Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: TRdWhPtjEfMDGvbxpKarC5+XpxrITHQQ1yfl2fTl6P0=
Subject key identifier: 2D:5C:75:AC:78:0F:E6:17:9E:04:E9:5A:A9:ED:FF:C1:28:C2:BF:5D
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 019F90908C62ADF5F2C951DD0B21A51A386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 20:00:19 +0000
Manifest this update: Thu 23 Jul 2026 20:00:19 +0000
Manifest next update: Fri 24 Jul 2026 20:00:19 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: FaIrKbOXks0YXm6OWhBzfYPF+kWLKvr6jhqCX2fHkdM=)
2: NIC6FPNA-Rut56ZtIFRnSurvICQ.roa (hash: 5L/3wMgmUEy2dfrMAgnd99xnHhW/Bj+jZ1MWwhBuJc8=)
3: YsYMCe9LReXjPKopmUA0EjsK0dc.roa (hash: y+81aZ09kbsZWCpPgtxvvuaCFjv5jJ1HQMWCIGPci3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:8c:62:ad:f5:f2:c9:51:dd:0b:21:a5:1a:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jul 23 20:00:19 2026 GMT
Not After : Jul 24 20:00:19 2026 GMT
Subject: CN=2d5c75ac780fe6179e04e95aa9edffc128c2bf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:1c:ba:b1:2f:69:30:96:29:aa:ef:18:e9:
0b:d8:71:29:d0:3a:44:8a:12:25:4e:ac:db:43:3f:
b4:12:6a:69:e8:6c:f3:d9:6a:03:a3:1b:30:65:77:
97:e4:e5:7c:e9:2d:f3:71:6d:bd:05:69:1c:d8:45:
cf:b7:0d:7d:1f:69:1d:76:35:84:c9:dc:52:9c:44:
fe:09:0a:35:4a:cb:91:cb:6e:5c:aa:90:61:7f:96:
cb:89:3a:39:68:47:a6:36:03:71:a9:66:4f:91:bd:
7c:f1:ab:03:9d:92:0a:f2:c7:b0:27:d9:83:01:7b:
19:c3:bb:0c:d2:07:25:28:91:18:ed:2a:e3:0e:23:
fe:44:03:8c:17:d0:5e:6c:26:f2:b5:5d:17:10:2f:
2b:76:3c:03:2a:e7:ca:99:33:09:6a:e6:0b:93:a5:
a8:e2:ce:5d:9e:4b:53:c2:06:54:04:ab:31:5c:65:
6f:bf:f2:f9:39:3d:61:86:d1:47:fe:bc:9d:6a:17:
d2:47:b4:f0:14:b5:84:5a:85:d5:60:a1:7f:a1:66:
2f:71:8d:d3:91:e7:4e:ed:ae:ac:bb:2d:0b:84:c8:
c2:83:be:03:fd:07:3a:b1:c1:b7:32:c2:15:e2:12:
9b:a1:94:89:12:a5:5b:e1:69:fe:24:e0:8d:a2:35:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:75:AC:78:0F:E6:17:9E:04:E9:5A:A9:ED:FF:C1:28:C2:BF:5D
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:02:8a:e1:34:85:e0:d1:98:4d:7c:48:29:8a:b6:11:25:74:
0f:5e:47:c2:31:ff:94:c8:e1:0c:6d:6d:4d:a7:ad:69:ad:68:
eb:3c:8e:dc:6c:9f:ae:cd:4f:a3:d3:43:b2:f6:fe:66:70:22:
47:45:46:61:1e:df:7c:d3:d8:f5:f6:1c:53:39:d9:81:6f:41:
b7:2b:91:f6:cd:da:b3:f6:1a:68:9d:e7:ca:36:c6:ec:fd:9e:
b2:84:4f:70:08:07:ef:bc:b6:97:04:d2:8f:2c:dd:4d:ff:f4:
81:d1:cc:6e:29:14:8c:ca:f7:71:ce:97:17:f1:41:1b:d5:75:
de:e3:e1:00:60:d3:fb:7c:7b:d3:50:aa:c5:40:20:77:da:aa:
5b:74:63:cd:38:d4:d3:77:7a:41:f5:e4:2f:9b:29:71:fe:10:
34:2a:41:71:fb:3b:c2:eb:9e:fb:24:6b:8c:75:8f:d2:ab:60:
7c:81:0a:a4:d5:e5:4c:61:8c:fa:51:4a:c3:12:64:d5:38:01:
63:44:ee:0d:5b:1c:bd:a4:3c:61:54:a7:20:34:4f:36:9d:0f:
96:ed:f5:b0:fc:f7:31:2d:11:c2:0d:2a:f7:39:ad:75:13:ad:
32:f9:6b:bc:17:34:21:ed:54:8c:51:84:e7:a7:4e:52:3c:c0:
ba:9e:ad:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkIxirfXyyVHdCyGlGjhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZWVhZWUwODYzZDFkY2E2MjRmNjFmMzliMjE4MWM3ZGI2
Y2JhM2YwHhcNMjYwNzIzMjAwMDE5WhcNMjYwNzI0MjAwMDE5WjAzMTEwLwYDVQQD
EygyZDVjNzVhYzc4MGZlNjE3OWUwNGU5NWFhOWVkZmZjMTI4YzJiZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtgcurEvaTCWKarvGOkL2HEp0DpE
ihIlTqzbQz+0Empp6Gzz2WoDoxswZXeX5OV86S3zcW29BWkc2EXPtw19H2kddjWE
ydxSnET+CQo1SsuRy25cqpBhf5bLiTo5aEemNgNxqWZPkb188asDnZIK8sewJ9mD
AXsZw7sM0gclKJEY7SrjDiP+RAOMF9BebCbytV0XEC8rdjwDKufKmTMJauYLk6Wo
4s5dnktTwgZUBKsxXGVvv/L5OT1hhtFH/rydahfSR7TwFLWEWoXVYKF/oWYvcY3T
kedO7a6suy0LhMjCg74D/Qc6scG3MsIV4hKboZSJEqVb4Wn+JOCNojWp2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1cdax4D+YXngTpWqnt/8Eowr9dMB8GA1UdIwQY
MBaAFAruruCGPR3KYk9h85shgcfbbLo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAt
N2ExMDRiODBjZDcxLzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAtN2ExMDRiODBjZDcx
LzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwKK4TSF
4NGYTXxIKYq2ESV0D15HwjH/lMjhDG1tTaetaa1o6zyO3Gyfrs1Po9NDsvb+ZnAi
R0VGYR7ffNPY9fYcUznZgW9BtyuR9s3as/YaaJ3nyjbG7P2esoRPcAgH77y2lwTS
jyzdTf/0gdHMbikUjMr3cc6XF/FBG9V13uPhAGDT+3x701CqxUAgd9qqW3RjzTjU
03d6QfXkL5spcf4QNCpBcfs7wuue+yRrjHWP0qtgfIEKpNXlTGGM+lFKwxJk1TgB
Y0TuDVscvaQ8YVSnIDRPNp0Plu31sPz3MS0Rwg0q9zmtdROtMvlrvBc0Ie1UjFGE
56dOUjzAup6trQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:40 2026 by rpki-client