Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: 981R9H1czk5LevIOyOKEU7fGY/cfiX7Sd7GnwbSf3QA=
Subject key identifier: ED:A1:93:56:6C:6A:75:6E:63:D2:F9:68:DE:FC:1C:B2:0A:F0:98:5B
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019F8F471FC72E00B3D59395073C6873C0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 08FB
Signing time: Thu 23 Jul 2026 14:00:30 +0000
Manifest this update: Thu 23 Jul 2026 14:00:30 +0000
Manifest next update: Fri 24 Jul 2026 14:00:30 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: sGBdfrDDxwqyRcMKn1wjH9Z4/ghwkCs2IchZQca5iZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:1f:c7:2e:00:b3:d5:93:95:07:3c:68:73:c0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jul 23 14:00:30 2026 GMT
Not After : Jul 24 14:00:30 2026 GMT
Subject: CN=eda193566c6a756e63d2f968defc1cb20af0985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:1b:bd:ec:af:99:7e:58:ce:28:fd:9c:7b:
ad:40:9b:12:e1:b2:13:4f:41:8c:36:50:29:23:e5:
5a:0b:b7:4c:66:5b:a2:36:6f:f2:f1:a2:2d:62:71:
c6:1c:76:15:f9:5e:be:55:01:43:6f:7f:df:cc:f8:
49:a2:a9:0b:8d:46:6d:ce:63:03:34:75:25:e6:b5:
35:ec:ed:97:20:89:e5:23:13:b8:76:fb:a5:06:ff:
6f:60:f7:57:89:36:3b:a7:dc:f5:a2:31:b4:b8:d9:
bd:88:22:1f:c9:68:b2:8b:9a:38:04:d3:85:41:d7:
b4:2a:4c:47:ea:d5:29:61:5b:83:e7:d8:30:53:b3:
09:3d:6b:7b:57:b1:a3:82:8c:23:7a:36:35:e7:ac:
1d:3a:8d:23:03:08:b9:8a:05:38:9c:54:b6:59:4a:
f6:32:43:26:af:57:63:3e:ea:85:20:38:0f:da:9c:
82:88:64:e7:b2:22:f3:6f:70:c6:77:ed:a9:86:cc:
5d:b0:99:4a:b9:64:e8:bc:ff:b8:10:51:71:51:03:
43:58:60:2c:30:4f:a3:64:6c:eb:f6:b5:1e:78:fb:
7b:fd:01:21:18:13:f8:40:fc:92:c0:88:ba:4d:33:
33:a3:4d:e5:27:c9:22:4d:f1:57:47:49:fe:c8:e1:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:93:56:6C:6A:75:6E:63:D2:F9:68:DE:FC:1C:B2:0A:F0:98:5B
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:d1:72:31:2a:e5:70:46:8b:22:83:8a:a8:42:ca:96:47:
ec:78:14:3f:e2:a0:9e:53:45:58:af:5c:52:a3:67:fd:dc:94:
99:55:87:b7:8a:f7:7d:4d:1c:fc:78:30:08:c3:51:27:fa:a0:
25:90:ef:2b:b2:28:d3:82:9c:ca:cd:1f:d0:04:84:bd:11:31:
e1:91:b7:9d:06:6c:ae:25:6f:03:86:3a:5b:91:e3:de:2e:03:
7a:2b:93:55:70:73:a3:da:12:8e:7a:0f:0b:ac:47:81:b1:df:
6c:40:b2:fe:3c:f7:46:f5:74:ed:0a:99:69:f4:6f:a9:d0:8c:
f7:82:80:98:b5:e7:3a:a6:06:63:13:46:44:e6:c5:3e:37:c1:
63:f1:73:e8:e6:75:36:1f:5d:ca:45:3f:f8:c1:3c:b2:62:be:
9d:10:07:0b:ee:57:59:e6:6d:38:3c:03:0d:d6:fe:91:a4:d5:
ec:58:b6:22:96:b6:33:65:7e:44:b7:af:c1:e8:cf:27:4c:d0:
ef:c0:64:17:f3:55:77:ef:a2:c4:d4:87:83:9c:f3:da:b2:3f:
54:34:39:18:98:3d:a3:5d:95:f3:dd:7c:25:e8:ce:3d:ff:d1:
ae:20:35:7a:39:7d:3d:f0:d5:eb:0d:ba:4e:7a:9e:ec:aa:b9:
5f:2a:a7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRx/HLgCz1ZOVBzxoc8DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz
MGYyNWEwHhcNMjYwNzIzMTQwMDMwWhcNMjYwNzI0MTQwMDMwWjAzMTEwLwYDVQQD
EyhlZGExOTM1NjZjNmE3NTZlNjNkMmY5NjhkZWZjMWNiMjBhZjA5ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5UbveyvmX5Yzij9nHutQJsS4bIT
T0GMNlApI+VaC7dMZluiNm/y8aItYnHGHHYV+V6+VQFDb3/fzPhJoqkLjUZtzmMD
NHUl5rU17O2XIInlIxO4dvulBv9vYPdXiTY7p9z1ojG0uNm9iCIfyWiyi5o4BNOF
Qde0KkxH6tUpYVuD59gwU7MJPWt7V7GjgowjejY156wdOo0jAwi5igU4nFS2WUr2
MkMmr1djPuqFIDgP2pyCiGTnsiLzb3DGd+2phsxdsJlKuWTovP+4EFFxUQNDWGAs
ME+jZGzr9rUeePt7/QEhGBP4QPySwIi6TTMzo03lJ8kiTfFXR0n+yOE5WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2hk1ZsanVuY9L5aN78HLIK8JhbMB8GA1UdIwQY
MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt
NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm
LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj3RcjEq
5XBGiyKDiqhCypZH7HgUP+KgnlNFWK9cUqNn/dyUmVWHt4r3fU0c/HgwCMNRJ/qg
JZDvK7Io04Kcys0f0ASEvREx4ZG3nQZsriVvA4Y6W5Hj3i4DeiuTVXBzo9oSjnoP
C6xHgbHfbECy/jz3RvV07QqZafRvqdCM94KAmLXnOqYGYxNGRObFPjfBY/Fz6OZ1
Nh9dykU/+ME8smK+nRAHC+5XWeZtODwDDdb+kaTV7Fi2Ipa2M2V+RLevwejPJ0zQ
78BkF/NVd++ixNSHg5zz2rI/VDQ5GJg9o12V8918JejOPf/RriA1ejl9PfDV6w26
Tnqe7Kq5XyqnyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:20 2026 by rpki-client