Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: mqwOqWZK8/7JHaHoiHka3zjHNZoOV9zThpE6UacYSco=
Subject key identifier: F6:BD:35:4A:E9:E8:69:F5:24:10:34:F1:08:C4:FE:EA:FB:31:7D:2C
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 019F9059A1FF1E1F89682CEDED168F253E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:00:20 +0000
Manifest this update: Thu 23 Jul 2026 19:00:20 +0000
Manifest next update: Fri 24 Jul 2026 19:00:20 +0000
Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: mGhY8jaLj31eMw00uw1HGG9dKdJ9mwjdtpCQZOimK7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a1:ff:1e:1f:89:68:2c:ed:ed:16:8f:25:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Jul 23 19:00:20 2026 GMT
Not After : Jul 24 19:00:20 2026 GMT
Subject: CN=f6bd354ae9e869f5241034f108c4feeafb317d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7b:44:04:69:06:a1:7b:6a:36:44:46:55:
6c:6c:e2:89:4d:ab:1f:21:ad:29:b9:f7:6c:85:09:
58:3e:f2:50:d2:e7:56:4e:eb:da:07:68:ba:b7:cd:
3d:51:a9:b9:02:38:39:26:1f:b4:2a:83:9f:24:03:
b3:20:87:46:2b:fa:ec:36:92:14:04:20:bb:00:5d:
c6:13:d3:60:2b:af:69:52:e2:67:33:59:e4:7a:16:
c6:ce:16:53:82:e9:6a:fb:c5:95:95:27:c1:fe:5a:
a4:99:94:07:96:23:18:9f:fc:f4:73:4b:22:17:1d:
81:e0:0f:35:43:5b:12:6d:8f:52:40:c9:3a:a2:06:
58:fd:87:d9:4f:21:d4:d8:84:47:bf:5a:15:20:9f:
83:09:ab:10:df:63:21:75:cf:e0:d5:8f:b5:e5:a2:
3a:55:f1:1f:c1:82:c2:6e:51:9f:d0:4f:d4:83:a4:
bb:a8:85:ad:f6:5a:1d:fb:4c:10:9e:3a:58:d3:f7:
ab:59:a2:6f:f9:70:1a:0f:98:3a:17:87:40:24:ec:
9b:4a:88:17:1d:bc:a7:ac:1a:25:93:41:0c:26:ab:
a3:9d:7f:d2:7e:ab:42:2e:c6:78:24:04:87:76:5d:
e8:20:be:94:07:26:44:d2:90:94:6c:0e:bd:8e:af:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:35:4A:E9:E8:69:F5:24:10:34:F1:08:C4:FE:EA:FB:31:7D:2C
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cc:9e:49:67:9d:38:6e:95:b5:80:52:57:0a:86:3f:13:4e:
cb:7d:98:c9:4e:b8:34:50:2d:ff:e9:1f:c5:48:bb:61:ca:78:
ec:1a:92:81:5d:a2:65:54:74:e7:92:ab:d5:73:73:87:fb:c8:
e6:f3:cb:ea:96:b8:c1:fd:20:92:07:2b:0d:0d:c4:bb:e5:c6:
62:0d:2b:d1:3b:23:bd:85:41:d8:09:2e:a5:46:37:1b:dc:21:
8b:a5:49:f0:70:09:08:ed:a4:4a:b1:de:ab:66:e9:70:90:51:
63:d3:73:8d:3d:02:12:d5:b8:3b:f7:44:5d:d4:ae:46:45:35:
1a:70:5d:61:0b:d9:15:a4:be:69:a2:43:90:0f:b7:89:43:9b:
fc:91:a9:41:bb:28:e9:a3:a1:dc:ec:f1:bb:ab:5e:ec:21:2f:
62:f6:3b:d4:4e:c9:c1:47:50:02:86:60:21:da:ad:0c:cd:80:
18:0c:89:00:32:aa:0f:55:a3:93:71:be:dc:24:e5:bf:36:a4:
ba:60:d0:5e:f6:92:5e:d0:24:9b:01:9d:e5:b2:21:c9:95:4e:
cb:e4:d5:b9:ac:25:ba:68:ba:bb:df:fc:b4:00:38:4f:cc:0a:
bb:68:d9:ee:06:1d:db:ed:12:c1:30:e2:b8:c1:dd:15:58:5e:
48:51:17:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWaH/Hh+JaCzt7RaPJT4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1
ZDA1MzkwHhcNMjYwNzIzMTkwMDIwWhcNMjYwNzI0MTkwMDIwWjAzMTEwLwYDVQQD
EyhmNmJkMzU0YWU5ZTg2OWY1MjQxMDM0ZjEwOGM0ZmVlYWZiMzE3ZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFt7RARpBqF7ajZERlVsbOKJTasf
Ia0pufdshQlYPvJQ0udWTuvaB2i6t809Uam5Ajg5Jh+0KoOfJAOzIIdGK/rsNpIU
BCC7AF3GE9NgK69pUuJnM1nkehbGzhZTgulq+8WVlSfB/lqkmZQHliMYn/z0c0si
Fx2B4A81Q1sSbY9SQMk6ogZY/YfZTyHU2IRHv1oVIJ+DCasQ32Mhdc/g1Y+15aI6
VfEfwYLCblGf0E/Ug6S7qIWt9lod+0wQnjpY0/erWaJv+XAaD5g6F4dAJOybSogX
HbynrBolk0EMJqujnX/SfqtCLsZ4JASHdl3oIL6UByZE0pCUbA69jq+LwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa9NUrp6Gn1JBA08QjE/ur7MX0sMB8GA1UdIwQY
MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct
YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz
LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsyeSWed
OG6VtYBSVwqGPxNOy32YyU64NFAt/+kfxUi7Ycp47BqSgV2iZVR055Kr1XNzh/vI
5vPL6pa4wf0gkgcrDQ3Eu+XGYg0r0TsjvYVB2AkupUY3G9whi6VJ8HAJCO2kSrHe
q2bpcJBRY9NzjT0CEtW4O/dEXdSuRkU1GnBdYQvZFaS+aaJDkA+3iUOb/JGpQbso
6aOh3Ozxu6te7CEvYvY71E7JwUdQAoZgIdqtDM2AGAyJADKqD1Wjk3G+3CTlvzak
umDQXvaSXtAkmwGd5bIhyZVOy+TVuawlumi6u9/8tAA4T8wKu2jZ7gYd2+0SwTDi
uMHdFVheSFEXZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:06 2026 by rpki-client