Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File: c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier: 8hQmbZJxfDDPSr9g6hGRKcij/wj9GWeP3zEqgJMaDlM=
Subject key identifier: E0:84:D4:F0:E6:5D:09:BA:59:12:1A:13:8A:8D:FA:DD:76:1B:37:8F
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer: /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial: 019F916D1D31A68C58C2B8EBB541F0037850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:14 +0000
Manifest this update: Fri 24 Jul 2026 00:01:14 +0000
Manifest next update: Sat 25 Jul 2026 00:01:14 +0000
Files and hashes: 1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: Rfjijk81su2CTnePekYB2baEp+htLJxnZikYqr8mvYQ=)
2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:1d:31:a6:8c:58:c2:b8:eb:b5:41:f0:03:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Validity
Not Before: Jul 24 00:01:14 2026 GMT
Not After : Jul 25 00:01:14 2026 GMT
Subject: CN=e084d4f0e65d09ba59121a138a8dfadd761b378f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:c5:65:34:03:8d:ed:8e:b5:a9:90:75:51:
11:0f:47:e7:fe:1a:92:20:06:99:6a:c8:9c:9d:08:
b0:e9:e2:21:97:7b:a2:32:66:49:d8:29:03:34:fe:
b6:14:8e:b0:f7:e6:96:71:03:a5:8a:cd:60:43:c9:
0b:69:11:9c:ae:a6:60:e0:4b:d7:d9:15:2d:1e:1c:
e6:41:cf:6e:8b:7f:47:5c:be:5c:69:ef:49:b0:62:
ec:70:ae:a7:fb:7f:4b:bf:99:3a:b7:7e:ce:6f:99:
87:d2:e5:65:a7:a1:d6:54:6a:30:55:9b:d8:1a:39:
e5:de:c7:50:7f:37:2b:83:29:6d:21:bc:c3:07:22:
89:ea:bb:c7:1e:96:e2:66:93:4e:15:85:fa:ac:11:
6f:53:6f:02:d2:a1:7d:79:aa:b5:1d:4e:50:7e:c9:
24:75:d5:7b:ac:75:80:5f:78:85:6b:f7:44:94:0d:
be:00:fd:34:f7:d8:38:00:b8:b1:18:63:29:bd:23:
dd:c6:ad:fd:7d:11:4d:de:d0:c5:51:06:7b:84:4a:
3f:b0:31:f9:68:b2:02:9c:63:93:fa:87:b0:98:b7:
c6:00:e2:e9:5e:7d:94:eb:13:6a:64:70:33:87:fc:
2f:87:a4:64:25:28:2f:bd:4a:03:c5:79:37:1d:14:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:D4:F0:E6:5D:09:BA:59:12:1A:13:8A:8D:FA:DD:76:1B:37:8F
X509v3 Authority Key Identifier:
keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a0:9c:6c:57:67:3f:2b:e7:57:97:dc:58:37:95:64:9c:d7:
af:85:93:94:92:b0:87:45:13:09:38:1d:cd:57:a7:a1:47:8d:
3a:d1:0a:b4:73:56:42:b9:04:06:e4:28:ef:3d:6e:32:4f:d9:
07:d7:57:db:30:76:58:9e:f0:a7:b0:81:0d:57:12:cd:a6:ae:
ea:2e:cb:f4:e2:0e:88:a7:84:08:57:44:a1:a5:ad:7c:3b:2f:
93:c3:f1:af:87:e1:91:d2:1f:fc:64:33:e2:65:45:71:90:c8:
6d:37:d4:6f:e5:1f:47:71:8d:d6:82:5b:9c:8f:10:10:7b:03:
2a:60:4f:6e:32:f7:1a:42:f8:8a:5d:7a:72:8e:a7:1a:72:9d:
23:1b:2d:1f:96:4b:8c:c4:a7:f7:8f:9a:4a:36:03:25:82:a2:
5f:ca:8b:0f:d2:c9:fd:d9:57:e2:b5:b1:c6:f2:13:a0:9d:bf:
98:9b:be:bc:0d:ce:07:8a:9e:85:6f:7c:ec:74:32:46:93:e2:
05:f0:5f:4f:f0:79:29:7c:c0:55:2b:c5:41:17:2c:c0:07:19:
ec:48:b0:f1:25:65:1c:27:34:5a:15:47:09:d9:fc:5a:96:0f:
7a:63:a3:af:0f:1f:75:16:31:a1:f3:ca:be:51:08:ac:fb:ed:
41:8d:31:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbR0xpoxYwrjrtUHwA3hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY5YjBkYThjYmE4MjMyYmZkN2M3NzEwZjA0NTM3Njc4
ODllOWQwHhcNMjYwNzI0MDAwMTE0WhcNMjYwNzI1MDAwMTE0WjAzMTEwLwYDVQQD
EyhlMDg0ZDRmMGU2NWQwOWJhNTkxMjFhMTM4YThkZmFkZDc2MWIzNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/fFZTQDje2OtamQdVERD0fn/hqS
IAaZasicnQiw6eIhl3uiMmZJ2CkDNP62FI6w9+aWcQOlis1gQ8kLaRGcrqZg4EvX
2RUtHhzmQc9ui39HXL5cae9JsGLscK6n+39Lv5k6t37Ob5mH0uVlp6HWVGowVZvY
Gjnl3sdQfzcrgyltIbzDByKJ6rvHHpbiZpNOFYX6rBFvU28C0qF9eaq1HU5Qfskk
ddV7rHWAX3iFa/dElA2+AP0099g4ALixGGMpvSPdxq39fRFN3tDFUQZ7hEo/sDH5
aLICnGOT+oewmLfGAOLpXn2U6xNqZHAzh/wvh6RkJSgvvUoDxXk3HRQ35wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCE1PDmXQm6WRIaE4qN+t12GzePMB8GA1UdIwQY
MBaAFHP/mw2oy6gjK/18dxDwRTdniJ6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQt
Yjg5ZGM0ZmQ2ZWUwLzEvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQtYjg5ZGM0ZmQ2ZWUw
LzEvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKCcbFdn
PyvnV5fcWDeVZJzXr4WTlJKwh0UTCTgdzVenoUeNOtEKtHNWQrkEBuQo7z1uMk/Z
B9dX2zB2WJ7wp7CBDVcSzaau6i7L9OIOiKeECFdEoaWtfDsvk8Pxr4fhkdIf/GQz
4mVFcZDIbTfUb+UfR3GN1oJbnI8QEHsDKmBPbjL3GkL4il16co6nGnKdIxstH5ZL
jMSn94+aSjYDJYKiX8qLD9LJ/dlX4rWxxvIToJ2/mJu+vA3OB4qehW987HQyRpPi
BfBfT/B5KXzAVSvFQRcswAcZ7Eiw8SVlHCc0WhVHCdn8WpYPemOjrw8fdRYxofPK
vlEIrPvtQY0xZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:34 2026 by rpki-client