Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: FC1jUxFQdSqNQ7rOMxrOe87kh9/83YYqtBcuz4/yDSg=
Subject key identifier: F1:12:40:64:5A:76:E3:7E:46:19:F1:39:9F:72:E3:75:42:51:6D:0A
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019F8FEC2CFD489CD499789C8B0781910B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 17:00:47 +0000
Manifest this update: Thu 23 Jul 2026 17:00:47 +0000
Manifest next update: Fri 24 Jul 2026 17:00:47 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: 3+xfmfSRje3kd6fpkPnA9byXj6DrFTTgO9Q+i50pmSo=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2c:fd:48:9c:d4:99:78:9c:8b:07:81:91:0b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Jul 23 17:00:47 2026 GMT
Not After : Jul 24 17:00:47 2026 GMT
Subject: CN=f11240645a76e37e4619f1399f72e37542516d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:c2:83:42:3f:80:0a:1d:79:c3:fb:1a:ab:
cf:3f:e3:40:65:a2:6f:61:49:2d:3c:e1:2d:a9:b2:
f9:1d:ae:d7:9b:f8:a1:bd:68:59:67:e6:d3:ae:70:
50:b7:91:87:09:43:74:d0:1c:13:fc:be:6a:fc:75:
6f:3f:77:8a:42:ad:55:64:fa:0e:ae:b9:e8:7e:70:
56:08:ea:c3:c3:dd:7b:d4:90:6a:3b:43:e2:0a:29:
8e:2f:e0:2b:2a:5c:e4:6c:30:ae:83:70:e3:ad:0d:
e5:92:ad:4c:d0:81:4b:9c:cc:6e:37:ee:21:4d:be:
7f:e0:30:81:b0:78:d8:50:59:8f:11:fa:42:73:48:
7d:cb:7f:f9:16:1b:b2:74:90:6f:8a:9d:40:1e:cb:
2e:58:3b:2e:50:dd:65:43:56:db:1a:0c:08:52:22:
e4:76:44:4e:d0:e7:a5:fb:f7:b0:1b:a8:08:a9:5c:
c3:e4:9f:2e:15:30:48:c7:c4:f5:99:19:b0:6a:82:
62:76:ba:2f:a4:11:f6:c1:31:dd:2a:54:c5:b0:b0:
2c:24:81:09:42:cd:d3:ee:f2:a3:5f:36:ec:c8:9b:
aa:f2:2e:33:d5:1c:ab:b7:be:df:57:63:49:92:7e:
df:73:1a:7b:37:eb:34:12:77:f6:66:8d:97:a0:b5:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:40:64:5A:76:E3:7E:46:19:F1:39:9F:72:E3:75:42:51:6D:0A
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:9a:7a:56:85:b1:e8:6b:bd:08:58:06:18:0f:2e:46:bd:
4b:c0:65:dc:09:c1:9d:67:79:3c:9c:a4:8d:0a:18:8c:6d:89:
7b:ef:0b:09:c1:38:13:cb:43:dd:33:40:9d:0e:be:78:04:ea:
89:a2:ae:f0:ce:e1:46:d8:06:01:05:f2:d1:8e:e8:a7:60:74:
86:a0:dd:a7:e7:a6:e3:5f:2a:6f:55:0a:10:58:5e:7f:1e:42:
d0:74:c2:f9:11:62:fa:f7:6a:64:05:80:72:6f:bd:a9:c6:ef:
46:a6:90:36:8f:cd:87:61:31:94:b1:9c:a0:4e:07:40:3c:d6:
4a:42:51:89:97:ee:cc:60:b3:c1:58:b2:6d:58:48:06:41:db:
59:dc:65:2d:10:bf:25:b9:4f:01:f1:b9:38:94:29:c9:f4:57:
b3:8b:6a:c6:b2:de:a3:c1:d7:98:cb:a3:de:d4:6b:69:34:16:
b8:be:30:f4:95:e9:bf:0a:a6:ae:cc:28:02:53:57:54:e6:1f:
c4:70:fb:43:2d:28:5c:5e:40:cc:16:ec:fe:1c:f7:be:a9:69:
71:84:74:70:d2:ec:df:4b:8d:8f:49:e5:15:c1:93:ad:26:c8:
52:1a:2f:f1:ed:f6:c9:81:06:b3:73:41:65:e1:9b:6a:7c:8d:
a7:b6:9f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7Cz9SJzUmXiciweBkQtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx
Njk4YjUwHhcNMjYwNzIzMTcwMDQ3WhcNMjYwNzI0MTcwMDQ3WjAzMTEwLwYDVQQD
EyhmMTEyNDA2NDVhNzZlMzdlNDYxOWYxMzk5ZjcyZTM3NTQyNTE2ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqrCg0I/gAodecP7GqvPP+NAZaJv
YUktPOEtqbL5Ha7Xm/ihvWhZZ+bTrnBQt5GHCUN00BwT/L5q/HVvP3eKQq1VZPoO
rrnofnBWCOrDw9171JBqO0PiCimOL+ArKlzkbDCug3DjrQ3lkq1M0IFLnMxuN+4h
Tb5/4DCBsHjYUFmPEfpCc0h9y3/5FhuydJBvip1AHssuWDsuUN1lQ1bbGgwIUiLk
dkRO0Oel+/ewG6gIqVzD5J8uFTBIx8T1mRmwaoJidrovpBH2wTHdKlTFsLAsJIEJ
Qs3T7vKjXzbsyJuq8i4z1Ryrt77fV2NJkn7fcxp7N+s0Enf2Zo2XoLXQ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPESQGRaduN+RhnxOZ9y43VCUW0KMB8GA1UdIwQY
MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt
ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl
LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8GaelaF
sehrvQhYBhgPLka9S8Bl3AnBnWd5PJykjQoYjG2Je+8LCcE4E8tD3TNAnQ6+eATq
iaKu8M7hRtgGAQXy0Y7op2B0hqDdp+em418qb1UKEFhefx5C0HTC+RFi+vdqZAWA
cm+9qcbvRqaQNo/Nh2ExlLGcoE4HQDzWSkJRiZfuzGCzwViybVhIBkHbWdxlLRC/
JblPAfG5OJQpyfRXs4tqxrLeo8HXmMuj3tRraTQWuL4w9JXpvwqmrswoAlNXVOYf
xHD7Qy0oXF5AzBbs/hz3vqlpcYR0cNLs30uNj0nlFcGTrSbIUhov8e32yYEGs3NB
ZeGbanyNp7afLg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:58:38 2026 by rpki-client