Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: FMCdW3CDt0QvViH6lGLsh7tI0UkW6nvbv2dqsKufYdU=
Subject key identifier: 5E:72:80:8D:CC:1B:16:E1:B6:EE:90:AC:05:66:51:06:8C:15:DE:31
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 019F92ED204FA08804CDFB4932EAA3ACEFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 07:00:41 +0000
Manifest this update: Fri 24 Jul 2026 07:00:41 +0000
Manifest next update: Sat 25 Jul 2026 07:00:41 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: u/dK3tVdkMyPaK9BoJue3fD4tJFttdn5Ch4iawwmfnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:20:4f:a0:88:04:cd:fb:49:32:ea:a3:ac:ef:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Jul 24 07:00:41 2026 GMT
Not After : Jul 25 07:00:41 2026 GMT
Subject: CN=5e72808dcc1b16e1b6ee90ac056651068c15de31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:af:2a:7f:3e:75:37:14:23:14:fc:3f:ad:
74:fb:a9:f1:5f:36:89:e9:5f:29:f8:23:4d:1d:66:
0a:e8:dc:88:d9:2b:f8:d2:b4:a0:b6:b8:9c:fa:aa:
7d:b3:e2:aa:c4:24:32:4d:48:f6:04:31:7c:99:51:
8f:5e:9d:8c:f8:74:04:6c:ca:a2:da:8a:07:f7:a4:
31:de:3f:df:9c:2e:3e:d8:c5:2a:cb:5e:37:0f:5b:
16:1a:d6:6e:68:29:37:3f:14:dc:37:a3:70:55:13:
3a:68:de:56:a6:ac:32:2d:fe:52:bc:e1:32:13:02:
64:73:d1:ba:70:ba:5c:81:c7:b2:04:4b:de:5f:9f:
68:63:6e:e0:a1:97:82:69:2d:79:23:21:a0:91:f7:
59:c3:05:43:ba:d8:f8:9b:a3:0b:e5:e2:12:4d:95:
f6:19:7f:a4:86:cc:c8:27:ff:40:60:dc:03:e8:2e:
33:23:1b:68:d0:c2:27:18:93:ee:b8:f9:e8:b5:10:
e3:fa:44:8f:56:32:88:4b:68:e0:86:96:81:1b:34:
7b:0a:32:40:7c:76:35:d3:7e:92:a5:a5:1f:19:de:
8e:44:98:44:43:19:56:21:65:87:36:7e:1f:41:ca:
bb:e3:8f:c2:b9:72:03:80:0b:e0:8e:0c:26:dc:3c:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:80:8D:CC:1B:16:E1:B6:EE:90:AC:05:66:51:06:8C:15:DE:31
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:6b:67:76:07:6d:96:73:72:66:a0:c0:cb:b5:90:de:fa:
1e:8e:2d:82:5d:19:5b:c7:d6:f8:71:24:a7:44:e6:d9:d6:6c:
05:b0:ca:40:5f:0c:8d:36:38:41:4a:6b:fe:2b:50:54:41:83:
95:b1:41:18:ff:a4:30:45:e4:a8:df:be:5c:87:8e:bf:5b:28:
97:35:45:ac:d2:fa:48:23:fa:49:74:72:72:3d:23:5c:e1:f9:
30:ce:92:c4:6e:6b:5b:e6:55:9e:2a:c0:a2:2c:2f:cc:8d:98:
f5:9e:98:b6:a8:14:55:86:35:28:c5:4e:50:9b:dd:5a:4c:19:
12:b9:b8:b1:05:52:b8:7d:a2:17:0f:71:dd:a2:4b:c9:1b:8c:
04:cd:e9:58:cd:b1:34:82:de:f3:0a:8b:08:72:8f:cb:f3:b0:
c4:1b:25:e6:37:8d:42:ec:72:6a:46:7d:56:ff:aa:67:58:93:
5c:60:42:6d:d4:c4:6c:03:97:6a:4b:a1:f0:f0:44:6f:60:fe:
6a:38:c7:23:76:5d:f7:d8:61:be:00:41:9d:9c:b0:98:6c:e3:
18:6a:c2:2a:a6:91:49:09:71:ed:fc:4f:80:c6:ab:3a:5a:ed:
4c:3c:0a:cd:ed:1e:3d:03:db:35:bc:e1:80:5c:fa:da:76:92:
db:a0:ce:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7SBPoIgEzftJMuqjrO/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4
NTQ1NzgwHhcNMjYwNzI0MDcwMDQxWhcNMjYwNzI1MDcwMDQxWjAzMTEwLwYDVQQD
Eyg1ZTcyODA4ZGNjMWIxNmUxYjZlZTkwYWMwNTY2NTEwNjhjMTVkZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth6vKn8+dTcUIxT8P610+6nxXzaJ
6V8p+CNNHWYK6NyI2Sv40rSgtric+qp9s+KqxCQyTUj2BDF8mVGPXp2M+HQEbMqi
2ooH96Qx3j/fnC4+2MUqy143D1sWGtZuaCk3PxTcN6NwVRM6aN5WpqwyLf5SvOEy
EwJkc9G6cLpcgceyBEveX59oY27goZeCaS15IyGgkfdZwwVDutj4m6ML5eISTZX2
GX+khszIJ/9AYNwD6C4zIxto0MInGJPuuPnotRDj+kSPVjKIS2jghpaBGzR7CjJA
fHY1036SpaUfGd6ORJhEQxlWIWWHNn4fQcq744/CuXIDgAvgjgwm3DzvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5ygI3MGxbhtu6QrAVmUQaMFd4xMB8GA1UdIwQY
MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt
ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5
LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH9rZ3YH
bZZzcmagwMu1kN76Ho4tgl0ZW8fW+HEkp0Tm2dZsBbDKQF8MjTY4QUpr/itQVEGD
lbFBGP+kMEXkqN++XIeOv1solzVFrNL6SCP6SXRycj0jXOH5MM6SxG5rW+ZVnirA
oiwvzI2Y9Z6YtqgUVYY1KMVOUJvdWkwZErm4sQVSuH2iFw9x3aJLyRuMBM3pWM2x
NILe8wqLCHKPy/OwxBsl5jeNQuxyakZ9Vv+qZ1iTXGBCbdTEbAOXakuh8PBEb2D+
ajjHI3Zd99hhvgBBnZywmGzjGGrCKqaRSQlx7fxPgMarOlrtTDwKze0ePQPbNbzh
gFz62naS26DORQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:25 2026 by rpki-client