Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: ugdKpLfeJJ3LqvrFP2GV6SJJwuev0L7gF8b9XuFpZUo=
Subject key identifier: D7:05:BE:50:9F:96:BC:AF:24:31:36:67:E1:69:0A:0E:BC:B7:BC:7C
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019F94A5082F65B43E9CC88F07D6BF7C0132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 15E2
Signing time: Fri 24 Jul 2026 15:01:11 +0000
Manifest this update: Fri 24 Jul 2026 15:01:11 +0000
Manifest next update: Sat 25 Jul 2026 15:01:11 +0000
Files and hashes: 1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: ASuJBY8vTfGHT09K9F1+AadbZWys/6BQuP180v+IMig=)
7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:08:2f:65:b4:3e:9c:c8:8f:07:d6:bf:7c:01:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jul 24 15:01:11 2026 GMT
Not After : Jul 25 15:01:11 2026 GMT
Subject: CN=d705be509f96bcaf24313667e1690a0ebcb7bc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:e4:3f:30:66:41:51:fa:5f:39:52:92:6f:
31:8d:5a:a7:8e:61:f3:36:ac:96:df:ec:16:3e:2d:
5c:3b:5e:7c:27:0a:04:22:5f:92:4c:50:4d:5c:6d:
b5:95:27:86:40:ff:58:6b:55:7d:a0:7f:1b:05:53:
3a:60:f2:96:54:11:30:6a:d5:74:01:c2:d7:e5:fc:
0e:76:e1:2a:ac:02:de:26:c8:d6:7e:9a:50:be:00:
c6:f0:a7:fd:02:0d:e6:09:bc:f0:b6:a3:30:f1:74:
b7:f1:c7:d7:02:6b:94:7e:0d:3b:bf:44:9a:52:6e:
e9:59:8c:41:08:ed:38:00:1e:b4:1d:8c:e8:57:17:
c7:f3:70:82:44:a4:3d:09:11:f5:16:90:7f:e6:f1:
a6:57:cd:08:ca:cf:16:0a:19:be:1d:29:68:52:f8:
0f:12:0e:03:cb:61:8e:73:74:db:37:ca:f1:e8:7e:
d9:8f:f4:92:bc:21:d8:51:cf:9a:84:79:99:92:b5:
bc:4c:92:b5:91:c8:ec:56:eb:fa:0e:eb:8c:db:85:
9a:60:0d:1d:83:b8:6a:a6:ad:9d:1b:d1:66:af:59:
54:37:48:eb:42:1e:55:e6:4f:28:e2:32:08:d6:ae:
f3:4d:17:21:4f:44:87:92:0e:95:52:f0:bd:a2:85:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:BE:50:9F:96:BC:AF:24:31:36:67:E1:69:0A:0E:BC:B7:BC:7C
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bf:9d:96:d0:e7:29:7e:9a:49:80:33:df:06:bc:f6:45:62:
60:8a:86:f0:ab:7a:c4:4b:c3:43:d8:9a:d8:fb:bb:40:63:5c:
ce:4c:59:fe:7e:c1:11:2c:70:e8:e3:15:a4:2a:fc:19:73:7d:
42:30:d9:ab:c1:31:33:35:b5:a2:06:33:29:85:d6:96:ac:48:
70:ad:d0:e7:54:37:29:bf:fa:d3:aa:85:60:55:17:de:f2:6e:
4b:a8:73:a3:36:f5:da:4e:2c:2b:8f:ed:9b:c9:8a:df:45:c6:
17:83:07:7c:20:6b:80:f3:d9:94:76:04:90:fe:c0:7b:7a:a9:
15:bc:d4:f1:6a:54:65:25:29:a6:7a:05:03:f1:38:a2:63:9a:
da:ab:54:e2:0a:47:2a:4a:86:2b:d7:9e:f3:2f:4c:6c:51:eb:
b7:32:65:f5:3c:76:e9:01:c7:36:bd:24:99:bc:ce:b2:f6:5f:
d1:54:09:cb:c3:bc:93:1a:fd:98:f9:12:41:e3:7a:cd:df:dc:
14:29:8a:ed:1b:e4:ac:f7:b0:85:34:5f:fa:71:5a:d3:85:e3:
9e:df:7d:f2:0c:63:41:4b:6b:05:53:ab:03:67:4d:ed:23:36:
89:49:ef:61:1a:9c:cf:d7:82:05:5d:50:7a:74:45:fa:37:bc:
b0:8c:3d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpQgvZbQ+nMiPB9a/fAEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjYwNzI0MTUwMTExWhcNMjYwNzI1MTUwMTExWjAzMTEwLwYDVQQD
EyhkNzA1YmU1MDlmOTZiY2FmMjQzMTM2NjdlMTY5MGEwZWJjYjdiYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGLkPzBmQVH6XzlSkm8xjVqnjmHz
NqyW3+wWPi1cO158JwoEIl+STFBNXG21lSeGQP9Ya1V9oH8bBVM6YPKWVBEwatV0
AcLX5fwOduEqrALeJsjWfppQvgDG8Kf9Ag3mCbzwtqMw8XS38cfXAmuUfg07v0Sa
Um7pWYxBCO04AB60HYzoVxfH83CCRKQ9CRH1FpB/5vGmV80Iys8WChm+HSloUvgP
Eg4Dy2GOc3TbN8rx6H7Zj/SSvCHYUc+ahHmZkrW8TJK1kcjsVuv6DuuM24WaYA0d
g7hqpq2dG9Fmr1lUN0jrQh5V5k8o4jII1q7zTRchT0SHkg6VUvC9ooX18wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcFvlCflryvJDE2Z+FpCg68t7x8MB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7+dltDn
KX6aSYAz3wa89kViYIqG8Kt6xEvDQ9ia2Pu7QGNczkxZ/n7BESxw6OMVpCr8GXN9
QjDZq8ExMzW1ogYzKYXWlqxIcK3Q51Q3Kb/606qFYFUX3vJuS6hzozb12k4sK4/t
m8mK30XGF4MHfCBrgPPZlHYEkP7Ae3qpFbzU8WpUZSUppnoFA/E4omOa2qtU4gpH
KkqGK9ee8y9MbFHrtzJl9Tx26QHHNr0kmbzOsvZf0VQJy8O8kxr9mPkSQeN6zd/c
FCmK7RvkrPewhTRf+nFa04Xjnt998gxjQUtrBVOrA2dN7SM2iUnvYRqcz9eCBV1Q
enRF+je8sIw9LQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:14 2026 by rpki-client