Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File: cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier: Z5BCZhhr9M6eB5TkZJMPd++wOuiUeCK99Vu82f5sTlc=
Subject key identifier: 5E:97:14:93:73:CC:D8:31:A6:F6:F8:CA:BB:B5:E1:52:65:F9:CA:FD
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer: /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial: 019F8E346E23DA89C4E47475E4E226E1ECEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number: 0135
Signing time: Thu 23 Jul 2026 09:00:28 +0000
Manifest this update: Thu 23 Jul 2026 09:00:28 +0000
Manifest next update: Fri 24 Jul 2026 09:00:28 +0000
Files and hashes: 1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: wOjzTWjzM14sx7QNypNXdku7gXk36iAOCwNj0l4aC2o=)
2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:6e:23:da:89:c4:e4:74:75:e4:e2:26:e1:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
Validity
Not Before: Jul 23 09:00:28 2026 GMT
Not After : Jul 24 09:00:28 2026 GMT
Subject: CN=5e97149373ccd831a6f6f8cabbb5e15265f9cafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:e4:98:d9:84:b3:5f:7a:f1:4a:85:5b:d2:
43:47:b1:6e:fe:47:57:77:f4:92:18:cd:dd:8b:c2:
59:e1:6f:d3:be:ea:ec:c4:d3:7b:4c:9e:64:d2:99:
bf:8b:d8:c0:7e:25:b6:71:fb:af:44:d8:24:a5:2d:
30:38:4a:fe:7a:9b:7f:2c:0a:76:cc:21:97:a1:85:
01:f3:22:c2:0e:cf:5c:9e:e6:30:dc:49:ff:21:3c:
61:c7:f6:c1:69:80:d1:11:60:f5:cd:8e:49:e2:dd:
34:73:36:d4:ce:da:57:2f:70:ac:6b:0b:ca:fb:8d:
b0:c4:89:a2:c2:cd:bc:0d:64:f3:14:23:0c:fc:5a:
20:ec:3c:79:93:c4:00:a9:7e:2e:22:ca:89:10:17:
2d:9c:f0:89:9e:d3:57:0c:c1:55:64:b1:69:59:d6:
a3:be:40:8d:28:a0:ac:3c:55:34:3f:46:c1:55:5c:
25:64:b3:70:9c:bf:8d:e7:be:0c:f4:85:41:e6:a2:
f0:4f:34:29:8b:df:6f:e5:e5:00:14:5f:5d:18:c0:
86:01:a1:20:5f:d3:ed:46:aa:f6:95:18:28:f5:1a:
cb:5d:64:00:3f:50:52:10:6a:04:73:af:37:da:c7:
bc:68:b4:c2:07:0f:50:d0:3b:29:02:7a:4f:2c:cd:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:14:93:73:CC:D8:31:A6:F6:F8:CA:BB:B5:E1:52:65:F9:CA:FD
X509v3 Authority Key Identifier:
keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:dd:e9:b1:b3:ee:11:94:a3:5a:fc:5a:85:2c:ef:32:47:1d:
3c:b1:0a:29:86:fe:62:1c:19:ec:53:e3:bb:91:d6:18:d4:bd:
ae:62:6a:7b:98:f0:5d:89:13:c3:33:02:b6:5d:aa:2c:19:d6:
3a:50:d5:e2:c5:7e:2a:3d:e7:a5:69:19:20:92:a9:c8:9e:7c:
35:18:f6:ed:e6:be:0f:35:4e:1a:54:fe:e6:68:d8:36:3f:67:
39:76:10:a7:5d:70:a6:44:0e:bf:56:f2:fb:89:8c:61:d2:82:
a4:73:9e:5e:87:fc:79:5c:0f:b7:06:e0:ac:19:85:cd:24:a1:
1a:15:57:c4:91:80:68:ab:9b:36:ef:86:cd:cc:7f:67:47:36:
bb:f6:87:96:13:93:46:d2:0f:c2:cf:43:0e:81:29:02:1c:67:
c3:db:9f:92:ee:46:5a:90:2c:0b:c8:80:77:e7:9d:3b:6e:ca:
4e:4a:08:f9:56:ba:1e:a5:80:7e:d9:48:b4:eb:a0:6d:5d:c3:
36:a7:b7:07:8e:21:d0:87:e9:01:10:5c:16:3e:51:f1:2a:97:
df:2e:c9:c6:7a:b8:e8:14:e4:a3:e6:fe:d6:34:3e:60:ee:47:
76:24:04:c5:98:49:e5:62:b0:f2:1e:3f:6e:26:8b:c8:ad:37:
e9:bf:91:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ONG4j2onE5HR15OIm4ezrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTM4NDhjMGNmOTA0NjhkMDdkNjk5ZjcxNGM3ZmQ3NDhh
MTMyNjkwHhcNMjYwNzIzMDkwMDI4WhcNMjYwNzI0MDkwMDI4WjAzMTEwLwYDVQQD
Eyg1ZTk3MTQ5MzczY2NkODMxYTZmNmY4Y2FiYmI1ZTE1MjY1ZjljYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCHkmNmEs1968UqFW9JDR7Fu/kdX
d/SSGM3di8JZ4W/TvursxNN7TJ5k0pm/i9jAfiW2cfuvRNgkpS0wOEr+ept/LAp2
zCGXoYUB8yLCDs9cnuYw3En/ITxhx/bBaYDREWD1zY5J4t00czbUztpXL3CsawvK
+42wxImiws28DWTzFCMM/Fog7Dx5k8QAqX4uIsqJEBctnPCJntNXDMFVZLFpWdaj
vkCNKKCsPFU0P0bBVVwlZLNwnL+N574M9IVB5qLwTzQpi99v5eUAFF9dGMCGAaEg
X9PtRqr2lRgo9RrLXWQAP1BSEGoEc6832se8aLTCBw9Q0DspAnpPLM1gHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6XFJNzzNgxpvb4yru14VJl+cr9MB8GA1UdIwQY
MBaAFHEThIwM+QRo0H1pn3FMf9dIoTJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQt
MjZhY2NiN2VmZDdmLzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQtMjZhY2NiN2VmZDdm
LzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN3psbPu
EZSjWvxahSzvMkcdPLEKKYb+YhwZ7FPju5HWGNS9rmJqe5jwXYkTwzMCtl2qLBnW
OlDV4sV+Kj3npWkZIJKpyJ58NRj27ea+DzVOGlT+5mjYNj9nOXYQp11wpkQOv1by
+4mMYdKCpHOeXof8eVwPtwbgrBmFzSShGhVXxJGAaKubNu+Gzcx/Z0c2u/aHlhOT
RtIPws9DDoEpAhxnw9ufku5GWpAsC8iAd+edO27KTkoI+Va6HqWAftlItOugbV3D
Nqe3B44h0IfpARBcFj5R8SqX3y7Jxnq46BTko+b+1jQ+YO5HdiQExZhJ5WKw8h4/
biaLyK036b+RMw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:51 2026 by rpki-client