Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: KoikVOnXs9VRk5d4vn2SJiej9ECn2ovLCCgwHga881U=
Subject key identifier: 58:D5:3E:AD:5D:1B:1C:1C:80:5A:F4:BA:22:BD:72:33:15:05:77:FC
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019F91DA94B8C6CA81B7C6B5A3CC801D7BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 02:00:48 +0000
Manifest this update: Fri 24 Jul 2026 02:00:48 +0000
Manifest next update: Sat 25 Jul 2026 02:00:48 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: 75uv4hBGb8FYfHo2RT7U5w3zE59b5bWVCf7Z+/l/P58=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:94:b8:c6:ca:81:b7:c6:b5:a3:cc:80:1d:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Jul 24 02:00:48 2026 GMT
Not After : Jul 25 02:00:48 2026 GMT
Subject: CN=58d53ead5d1b1c1c805af4ba22bd7233150577fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:d6:78:59:c3:28:2c:81:6c:d9:23:1b:55:
a1:13:c5:56:6e:7e:7d:ba:f8:70:b7:45:98:51:36:
f3:85:fb:9b:d2:5f:b0:e3:89:1e:04:06:db:b1:96:
66:d7:17:ca:12:79:3f:98:0d:f6:68:9e:ff:08:5b:
0f:6a:80:e2:ec:56:5b:af:91:dd:1d:b5:b4:f9:61:
55:e0:f2:d4:51:b7:06:f9:91:44:90:2d:1b:95:41:
f7:74:9f:cb:d8:23:02:81:6d:cd:96:e9:ef:2b:be:
ad:75:12:92:67:f8:c7:b8:be:95:e0:45:9e:7e:70:
8b:2f:b0:b0:67:f7:a8:dc:69:f4:42:a4:cc:f7:88:
7d:ce:ba:81:36:b6:b6:cf:01:80:da:aa:cc:86:53:
dc:d9:e2:b9:37:f3:03:31:d6:6c:e4:ba:82:ab:37:
19:f0:e7:82:72:b6:44:73:1e:fc:9a:3a:15:c2:bd:
dc:b0:b3:97:ad:41:68:d8:39:6e:a4:1b:21:05:4b:
77:56:fe:45:9f:0a:cb:c6:2c:55:87:8a:26:8b:fe:
d2:78:f7:ad:a5:bc:3b:21:cb:0a:77:1d:5c:2c:c5:
0e:cd:f8:ac:31:dd:e3:00:69:37:fc:ec:09:04:89:
1e:49:d0:43:d5:6d:9c:71:e7:08:3d:c9:ba:0b:82:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D5:3E:AD:5D:1B:1C:1C:80:5A:F4:BA:22:BD:72:33:15:05:77:FC
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ec:94:30:4b:07:07:02:f3:82:c7:1d:f5:e2:ea:d1:d9:58:
85:06:1b:a7:a8:a7:aa:e5:2e:89:f0:b3:df:20:7c:68:78:f2:
92:53:04:2d:36:ea:1b:ae:d9:3f:57:7b:73:30:65:60:12:07:
73:94:e7:9d:76:b6:29:8b:1c:a2:3f:e0:8a:ea:73:52:ee:f1:
ab:e1:89:92:cb:99:22:22:4d:31:5e:21:44:d3:3a:b4:db:a5:
30:db:57:f3:87:30:5b:bc:e0:b9:69:b2:b5:74:c9:2f:d4:1e:
07:f4:9c:ed:b0:c9:f6:4b:02:2a:e9:71:75:e5:6b:d8:4c:af:
5d:00:1e:e1:8d:2e:15:46:c3:79:60:5b:81:84:e9:ff:fd:7b:
cc:46:db:da:03:c1:8b:fb:b4:fe:bb:16:c0:28:9f:e1:4a:23:
3c:cd:4e:97:9c:fc:a0:50:94:99:88:cd:03:af:12:b9:67:4d:
59:a1:83:ab:a5:a3:a4:1f:37:ed:08:21:3c:d8:de:64:5b:27:
15:91:4d:48:ec:58:41:9e:00:1d:ad:03:78:82:24:99:8d:96:
cc:67:12:70:00:a9:c2:86:4a:06:f6:ef:1c:54:b3:32:cb:9f:
44:4e:d8:5b:98:8d:eb:a9:f4:3c:c1:fe:f1:bf:ad:e8:50:ca:
ca:28:f7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2pS4xsqBt8a1o8yAHXvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx
Njk4YjUwHhcNMjYwNzI0MDIwMDQ4WhcNMjYwNzI1MDIwMDQ4WjAzMTEwLwYDVQQD
Eyg1OGQ1M2VhZDVkMWIxYzFjODA1YWY0YmEyMmJkNzIzMzE1MDU3N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cXWeFnDKCyBbNkjG1WhE8VWbn59
uvhwt0WYUTbzhfub0l+w44keBAbbsZZm1xfKEnk/mA32aJ7/CFsPaoDi7FZbr5Hd
HbW0+WFV4PLUUbcG+ZFEkC0blUH3dJ/L2CMCgW3NlunvK76tdRKSZ/jHuL6V4EWe
fnCLL7CwZ/eo3Gn0QqTM94h9zrqBNra2zwGA2qrMhlPc2eK5N/MDMdZs5LqCqzcZ
8OeCcrZEcx78mjoVwr3csLOXrUFo2DlupBshBUt3Vv5FnwrLxixVh4omi/7SePet
pbw7IcsKdx1cLMUOzfisMd3jAGk3/OwJBIkeSdBD1W2ccecIPcm6C4IuQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjVPq1dGxwcgFr0uiK9cjMVBXf8MB8GA1UdIwQY
MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt
ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl
LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOyUMEsH
BwLzgscd9eLq0dlYhQYbp6inquUuifCz3yB8aHjyklMELTbqG67ZP1d7czBlYBIH
c5TnnXa2KYscoj/giupzUu7xq+GJksuZIiJNMV4hRNM6tNulMNtX84cwW7zguWmy
tXTJL9QeB/Sc7bDJ9ksCKulxdeVr2EyvXQAe4Y0uFUbDeWBbgYTp//17zEbb2gPB
i/u0/rsWwCif4UojPM1Ol5z8oFCUmYjNA68SuWdNWaGDq6WjpB837QghPNjeZFsn
FZFNSOxYQZ4AHa0DeIIkmY2WzGcScACpwoZKBvbvHFSzMsufRE7YW5iN66n0PMH+
8b+t6FDKyij3pA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:07 2026 by rpki-client