Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: EeoP8ZHdAumlkflLheiQpTLgIRlXwy9EQ+d3XphKOoU=
Subject key identifier: B5:BB:C0:DD:64:A3:2D:46:9A:59:2F:47:A0:C5:0C:CA:A2:37:F6:FA
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 019F94A54EED73A085830E897EE897EE2814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 15:01:29 +0000
Manifest this update: Fri 24 Jul 2026 15:01:29 +0000
Manifest next update: Sat 25 Jul 2026 15:01:29 +0000
Files and hashes: 1: 4dMXi4_OZ1hIYb5lfSEix8dXAV4.roa (hash: pso0l4AjjbTbnTQh+xQFS2oQ9IVZGMVy1LttU/eMjhU=)
2: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: ARArKyBhcCakcd1H/uaBuGaKMLisXDvIS/sXeYMPlf8=)
3: X5rHphgjA2Ovs-Yct52WJKfW_k8.roa (hash: fS9NXooFPX4VLQ4SoiMsokXMu0rmiVlmUkYsHNO+cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:4e:ed:73:a0:85:83:0e:89:7e:e8:97:ee:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jul 24 15:01:29 2026 GMT
Not After : Jul 25 15:01:29 2026 GMT
Subject: CN=b5bbc0dd64a32d469a592f47a0c50ccaa237f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:a8:37:6e:c9:db:da:e6:b4:53:49:61:8b:
ea:6f:af:b9:82:5c:5e:7a:43:da:d2:20:f5:e5:45:
7f:6a:3b:d8:59:da:38:cf:38:a4:eb:e9:cc:14:da:
26:23:98:c1:13:28:84:81:ee:d3:20:97:c6:6e:a1:
55:33:15:b7:59:86:91:57:3a:ab:09:52:c7:08:c7:
97:11:a4:19:78:7c:cc:09:92:16:86:0f:bd:6a:b9:
d3:a8:f4:2b:59:bc:ea:c6:32:33:cd:b4:4c:40:6b:
9e:4e:62:2d:bf:e0:8d:88:a9:ee:e1:5a:61:12:89:
19:5d:2d:c4:5b:f2:38:2d:f5:9e:9f:02:24:63:be:
6c:24:87:aa:31:71:4c:ac:34:bf:33:f5:c0:eb:42:
4b:c4:5d:26:01:ba:5e:16:1c:92:41:bc:30:3b:8b:
13:c3:d2:1c:7b:26:c0:33:53:99:f1:ba:ba:00:24:
7d:58:2e:ec:60:e7:38:a1:00:7e:03:3a:c1:d0:53:
9e:0c:fc:4c:9e:42:44:f0:cc:cf:75:a1:3a:5e:08:
e7:5f:80:a2:45:3d:5b:9f:f3:9d:0b:3b:58:4f:33:
50:57:a1:64:35:90:a8:50:72:b4:7e:19:3c:b6:ff:
11:d6:d4:72:d7:8a:af:1f:30:e0:e3:73:38:fe:a6:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:C0:DD:64:A3:2D:46:9A:59:2F:47:A0:C5:0C:CA:A2:37:F6:FA
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:7f:c0:d4:98:87:4f:89:41:c7:a2:0c:6a:f5:e8:82:66:
a9:53:6c:27:6f:9c:7b:d9:72:bc:e3:a9:9b:a2:ff:48:85:d9:
72:f4:f6:b3:d8:06:6d:26:96:65:3a:3c:70:aa:d7:b3:c2:48:
fb:b2:fb:cc:93:7b:0f:68:04:a5:ea:41:e4:c4:32:95:1a:33:
fe:45:2a:85:7d:78:2b:3c:78:21:d6:71:b5:75:37:82:f9:02:
86:76:d0:6c:36:3e:f5:c1:27:1c:7f:34:e7:17:a0:c9:7d:f1:
0e:ae:aa:d9:bc:79:0d:d2:f5:1a:b0:b9:2d:94:76:78:a3:87:
11:51:ed:0a:d9:a5:68:5d:23:14:c4:6b:54:5a:5d:f4:16:16:
68:e8:a8:cc:49:52:29:62:b3:bf:db:8a:2c:f8:5c:6b:e0:98:
10:fc:8e:8b:54:a1:59:c5:d4:03:6e:ab:ce:63:96:7b:ce:48:
86:cf:36:35:9c:48:12:4d:29:4b:b4:a1:b7:a6:87:36:c4:4e:
72:72:b6:69:57:cb:81:22:ca:26:a4:e2:06:5a:09:86:98:ae:
de:39:21:7f:66:7b:5d:a5:4e:02:b6:79:86:aa:11:52:e4:ae:
e4:cb:7a:a8:dd:90:7a:96:c0:09:51:ef:56:c7:e4:8a:0e:c0:
00:ab:68:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpU7tc6CFgw6JfuiX7igUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNhMGRmMDU5YTUyNTFhNDAwYjVhMWYxMzIxYmEwMGQz
MTIwZDIwHhcNMjYwNzI0MTUwMTI5WhcNMjYwNzI1MTUwMTI5WjAzMTEwLwYDVQQD
EyhiNWJiYzBkZDY0YTMyZDQ2OWE1OTJmNDdhMGM1MGNjYWEyMzdmNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwOoN27J29rmtFNJYYvqb6+5glxe
ekPa0iD15UV/ajvYWdo4zzik6+nMFNomI5jBEyiEge7TIJfGbqFVMxW3WYaRVzqr
CVLHCMeXEaQZeHzMCZIWhg+9arnTqPQrWbzqxjIzzbRMQGueTmItv+CNiKnu4Vph
EokZXS3EW/I4LfWenwIkY75sJIeqMXFMrDS/M/XA60JLxF0mAbpeFhySQbwwO4sT
w9IceybAM1OZ8bq6ACR9WC7sYOc4oQB+AzrB0FOeDPxMnkJE8MzPdaE6XgjnX4Ci
RT1bn/OdCztYTzNQV6FkNZCoUHK0fhk8tv8R1tRy14qvHzDg43M4/qZKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW7wN1koy1GmlkvR6DFDMqiN/b6MB8GA1UdIwQY
MBaAFA5DoN8FmlJRpAC1ofEyG6ANMSDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMt
MDA0ZmU0MzNjN2M4LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMtMDA0ZmU0MzNjN2M4
LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASR/wNSY
h0+JQceiDGr16IJmqVNsJ2+ce9lyvOOpm6L/SIXZcvT2s9gGbSaWZTo8cKrXs8JI
+7L7zJN7D2gEpepB5MQylRoz/kUqhX14Kzx4IdZxtXU3gvkChnbQbDY+9cEnHH80
5xegyX3xDq6q2bx5DdL1GrC5LZR2eKOHEVHtCtmlaF0jFMRrVFpd9BYWaOiozElS
KWKzv9uKLPhca+CYEPyOi1ShWcXUA26rzmOWe85Ihs82NZxIEk0pS7Sht6aHNsRO
cnK2aVfLgSLKJqTiBloJhpiu3jkhf2Z7XaVOArZ5hqoRUuSu5Mt6qN2QepbACVHv
Vsfkig7AAKtoDw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:01 2026 by rpki-client