Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier: oxLQVUhcbk3FIyekQsbyEG2n54XuapRWSTTuicwmff8=
Subject key identifier: 53:AA:47:9E:D2:60:FE:80:66:31:8D:53:F0:31:E1:68:CE:BA:D0:57
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial: 019F92112D1A1E0D495B66D6F4F53AF45FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:26 +0000
Manifest this update: Fri 24 Jul 2026 03:00:26 +0000
Manifest next update: Sat 25 Jul 2026 03:00:26 +0000
Files and hashes: 1: Pygss5f1ruujkq8WTW7laONkQ2o.roa (hash: 7WHTQ4+Rj6UfUnW2B2kYVMQPC72bm+std85TSgIO/SI=)
2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: ipvA/7eFpJl3GnJRY12C5yYgQsdkZ3vwlQ9X40rbF6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:2d:1a:1e:0d:49:5b:66:d6:f4:f5:3a:f4:5f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
Validity
Not Before: Jul 24 03:00:26 2026 GMT
Not After : Jul 25 03:00:26 2026 GMT
Subject: CN=53aa479ed260fe8066318d53f031e168cebad057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:da:e7:36:ca:69:1f:b6:4f:3a:9c:7c:99:
ce:b3:fd:2f:11:38:09:12:e2:b6:85:8b:ad:7e:9f:
7b:94:98:15:d4:28:05:3e:89:44:02:2c:63:26:df:
5f:f0:6d:ad:d1:80:60:36:4a:ca:0a:ea:26:fc:be:
45:a5:b3:40:61:f8:5d:b4:50:c9:38:fa:61:df:db:
dd:3e:40:5d:32:03:48:71:0e:d9:56:7a:46:17:05:
26:38:1f:34:ff:c5:fe:a7:8c:c8:e2:6c:2d:75:a7:
51:7d:e4:07:5b:8c:f7:91:4f:5a:5b:d0:37:d2:a7:
33:e0:90:3c:b0:3e:aa:b1:07:28:dc:22:fe:f8:a6:
04:44:59:4c:a2:2c:80:fb:69:0f:c2:0c:14:58:72:
52:a8:36:11:97:ab:d6:04:4f:7d:a5:71:60:b6:cc:
de:9f:38:0b:7c:0e:20:7b:a3:7b:73:a8:9f:06:dd:
d1:a1:50:f7:fa:30:88:d0:d0:e8:09:ca:e4:96:3d:
cc:39:e1:d2:34:37:89:c0:7f:44:1d:e4:a3:32:c8:
eb:15:80:9b:6c:07:c9:9a:67:61:e4:cf:c9:c3:16:
23:65:8d:17:bd:8f:84:71:5e:ab:e7:18:39:c5:0d:
2f:d6:26:d6:b2:9a:b6:19:1b:46:c2:e3:f6:f6:86:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:47:9E:D2:60:FE:80:66:31:8D:53:F0:31:E1:68:CE:BA:D0:57
X509v3 Authority Key Identifier:
keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:66:a4:85:2b:2f:3b:bf:2b:a0:fd:e7:e6:c2:e3:73:61:
f3:1d:31:90:6c:71:47:32:25:ce:6c:46:91:d5:83:25:76:a3:
0a:9a:91:82:42:4e:c4:88:b7:c0:7f:5a:23:0d:14:c4:57:72:
1c:70:b4:ac:c3:65:94:ea:e8:42:f9:52:c6:25:08:88:5d:29:
e8:2a:a0:58:67:ae:de:5c:f2:f9:f5:56:89:5b:39:af:8e:9c:
1c:b5:21:7c:55:0a:77:a2:28:8f:1f:e8:0c:a7:c0:bf:8d:7d:
0e:05:70:c0:05:45:88:a0:1d:a4:b2:b0:f5:c7:2e:a7:cc:63:
99:75:b4:74:78:58:79:06:c9:8d:98:03:02:34:88:ba:e9:21:
00:b0:04:31:43:0a:7f:9d:31:62:df:43:e3:23:12:88:b1:96:
5a:a4:51:7a:74:ee:40:e7:d2:b5:cc:81:bf:0f:f7:d1:09:fa:
41:1e:fe:77:43:71:3a:af:4a:5a:94:8d:ed:cf:02:6d:1a:41:
7a:e3:9b:db:93:0c:69:dd:9d:5e:00:94:98:dd:fc:2f:3d:fa:
90:37:dd:bd:a0:7a:06:a0:29:69:85:74:28:fd:5f:ba:ee:93:
65:f0:82:e1:62:11:46:68:47:c7:56:2e:cb:8b:58:af:16:83:
7f:b3:9e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SES0aHg1JW2bW9PU69F/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh
YTAyZGEwHhcNMjYwNzI0MDMwMDI2WhcNMjYwNzI1MDMwMDI2WjAzMTEwLwYDVQQD
Eyg1M2FhNDc5ZWQyNjBmZTgwNjYzMThkNTNmMDMxZTE2OGNlYmFkMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ba5zbKaR+2TzqcfJnOs/0vETgJ
EuK2hYutfp97lJgV1CgFPolEAixjJt9f8G2t0YBgNkrKCuom/L5FpbNAYfhdtFDJ
OPph39vdPkBdMgNIcQ7ZVnpGFwUmOB80/8X+p4zI4mwtdadRfeQHW4z3kU9aW9A3
0qcz4JA8sD6qsQco3CL++KYERFlMoiyA+2kPwgwUWHJSqDYRl6vWBE99pXFgtsze
nzgLfA4ge6N7c6ifBt3RoVD3+jCI0NDoCcrklj3MOeHSNDeJwH9EHeSjMsjrFYCb
bAfJmmdh5M/JwxYjZY0XvY+EcV6r5xg5xQ0v1ibWspq2GRtGwuP29oaX/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOqR57SYP6AZjGNU/Ax4WjOutBXMB8GA1UdIwQY
MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt
YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz
LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIZmpIUr
Lzu/K6D95+bC43Nh8x0xkGxxRzIlzmxGkdWDJXajCpqRgkJOxIi3wH9aIw0UxFdy
HHC0rMNllOroQvlSxiUIiF0p6CqgWGeu3lzy+fVWiVs5r46cHLUhfFUKd6Iojx/o
DKfAv419DgVwwAVFiKAdpLKw9ccup8xjmXW0dHhYeQbJjZgDAjSIuukhALAEMUMK
f50xYt9D4yMSiLGWWqRRenTuQOfStcyBvw/30Qn6QR7+d0NxOq9KWpSN7c8CbRpB
euOb25MMad2dXgCUmN38Lz36kDfdvaB6BqApaYV0KP1fuu6TZfCC4WIRRmhHx1Yu
y4tYrxaDf7OejA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:26 2026 by rpki-client