Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: 7iDY9k7uavaaflQbwTKt5flyOsA5av2u8XaO7Nt0rwA=
Subject key identifier: F7:29:51:32:F5:93:17:65:92:CE:97:6E:84:E6:EE:97:78:29:25:1C
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019F93C8C40D407A9BC9A12478DDCE29E909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 19D8
Signing time: Fri 24 Jul 2026 11:00:35 +0000
Manifest this update: Fri 24 Jul 2026 11:00:35 +0000
Manifest next update: Sat 25 Jul 2026 11:00:35 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: jhKi5WCaNG9l4OxNJbrEwTJIjMqAZdW2TyCMGnYIiz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:c4:0d:40:7a:9b:c9:a1:24:78:dd:ce:29:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jul 24 11:00:35 2026 GMT
Not After : Jul 25 11:00:35 2026 GMT
Subject: CN=f7295132f593176592ce976e84e6ee977829251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:df:c4:71:7f:6f:2c:1d:d8:07:77:ed:28:46:
fd:e1:02:b9:c1:b5:64:02:04:d5:f7:c8:57:1b:91:
76:e2:71:c5:8e:a7:81:ff:01:0d:59:55:59:3e:73:
4a:e9:b7:b1:8e:08:98:0b:63:c3:d3:40:77:6b:3a:
2c:88:3e:fe:c3:92:ad:ab:37:d4:43:a2:bd:45:e5:
dc:2b:e9:20:9d:20:92:b0:b6:bf:33:2d:bf:0b:b4:
c0:ae:39:40:4b:87:c9:82:e4:e5:9f:5c:40:78:51:
bd:cb:e7:82:af:6d:4a:7e:02:a9:f9:33:fb:43:a3:
79:ae:d9:62:7d:e5:84:54:5a:9e:76:de:bf:3d:e7:
37:05:5a:5c:bb:e6:de:20:97:96:33:5e:fe:4c:75:
c5:2b:ab:c2:09:c2:c6:24:65:6f:c0:ee:dc:90:9f:
72:f2:1a:b5:32:c4:94:d0:23:33:b1:a1:18:b4:99:
9f:27:e5:51:6f:5f:94:eb:28:01:e0:f9:ae:d6:0e:
c0:40:c8:b3:fc:ed:10:82:7b:52:f5:4a:b9:25:39:
0e:04:60:33:7a:13:ac:ff:30:65:fc:e7:22:32:76:
08:af:0b:4b:bf:3b:43:08:68:56:0f:ab:a2:e0:e0:
c8:60:4c:53:36:0b:23:63:99:29:f4:17:20:a1:35:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:29:51:32:F5:93:17:65:92:CE:97:6E:84:E6:EE:97:78:29:25:1C
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:26:1c:9a:e1:c6:1b:a6:bc:c8:21:5d:a1:b4:8a:9a:35:
6d:08:56:2d:dc:e0:c2:d5:e9:3c:0e:52:f1:f3:d0:bf:83:38:
26:36:ed:ce:2f:48:2a:d0:65:73:6d:5a:b5:cf:0b:ec:e5:b3:
23:87:de:a0:9c:5e:0b:d3:92:e8:8f:f4:6a:56:1d:09:7d:ce:
30:52:39:f7:ac:cd:43:29:73:2d:d4:e8:0b:af:45:31:8d:2c:
83:25:04:b4:cb:ea:f1:36:b3:49:45:7b:c1:7e:76:6c:88:ab:
cf:f7:ee:d7:65:d0:e2:74:e2:3c:6a:aa:a4:c2:94:29:76:67:
54:62:7a:a2:39:16:93:d9:74:0d:9a:c4:2a:b0:33:a6:52:11:
cd:1b:60:51:e1:b2:88:aa:ac:d2:53:8d:22:9a:46:61:d8:3d:
ec:ce:78:3f:06:16:33:d0:52:74:84:ce:ae:78:73:ce:ef:dc:
22:ce:6f:05:b2:79:17:56:57:6f:09:a7:d3:9b:9a:da:e5:8f:
0d:6c:8c:b1:d0:78:dd:fc:f6:3a:f1:e5:b0:2d:64:77:50:6f:
a7:a4:f0:95:da:a0:68:7e:06:71:6b:e5:b6:4e:1b:6a:53:20:
e3:64:c5:1b:17:b6:68:e6:f4:57:50:76:7f:fb:d2:50:32:0e:
a6:a5:3c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyMQNQHqbyaEkeN3OKekJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0
ZGQ0N2QwHhcNMjYwNzI0MTEwMDM1WhcNMjYwNzI1MTEwMDM1WjAzMTEwLwYDVQQD
EyhmNzI5NTEzMmY1OTMxNzY1OTJjZTk3NmU4NGU2ZWU5Nzc4MjkyNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9/EcX9vLB3YB3ftKEb94QK5wbVk
AgTV98hXG5F24nHFjqeB/wENWVVZPnNK6bexjgiYC2PD00B3azosiD7+w5KtqzfU
Q6K9ReXcK+kgnSCSsLa/My2/C7TArjlAS4fJguTln1xAeFG9y+eCr21KfgKp+TP7
Q6N5rtlifeWEVFqedt6/Pec3BVpcu+beIJeWM17+THXFK6vCCcLGJGVvwO7ckJ9y
8hq1MsSU0CMzsaEYtJmfJ+VRb1+U6ygB4Pmu1g7AQMiz/O0QgntS9Uq5JTkOBGAz
ehOs/zBl/OciMnYIrwtLvztDCGhWD6ui4ODIYExTNgsjY5kp9BcgoTWB3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcpUTL1kxdlks6XboTm7pd4KSUcMB8GA1UdIwQY
MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt
NjkzYmY2N2U2MWYzLzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz
LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIv8mHJrh
xhumvMghXaG0ipo1bQhWLdzgwtXpPA5S8fPQv4M4Jjbtzi9IKtBlc21atc8L7OWz
I4feoJxeC9OS6I/0alYdCX3OMFI596zNQylzLdToC69FMY0sgyUEtMvq8TazSUV7
wX52bIirz/fu12XQ4nTiPGqqpMKUKXZnVGJ6ojkWk9l0DZrEKrAzplIRzRtgUeGy
iKqs0lONIppGYdg97M54PwYWM9BSdITOrnhzzu/cIs5vBbJ5F1ZXbwmn05ua2uWP
DWyMsdB43fz2OvHlsC1kd1Bvp6TwldqgaH4GcWvltk4balMg42TFGxe2aOb0V1B2
f/vSUDIOpqU8lA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:50 2026 by rpki-client