Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: IzZtFiZ5iCmJgZQVWMtgKa4YMr+GIosz5Tfi2St9ms4=
Subject key identifier: 79:A7:B6:5A:02:84:5E:E7:95:37:F1:24:A6:00:B4:BC:E6:75:6D:A7
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019F8F7E5E7C9ABC47E33D22D6C19B6ECDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 15:00:51 +0000
Manifest this update: Thu 23 Jul 2026 15:00:51 +0000
Manifest next update: Fri 24 Jul 2026 15:00:51 +0000
Files and hashes: 1: 4usRpBobCHCzpwrJfO9MESi2eHE.roa (hash: 9o5TwDkw3VuguoRghDhwwlw0Cs2+gJaMgEUU/235EeA=)
2: OaJvJxx6v6GWi19b1tfcABNBceQ.roa (hash: TnzXeBtI+3T5OrY62DPWKmO+Wg3GD37hX6hbBQYvfBw=)
3: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: X3m0sHbs3Kh9jj3eTDytAMlFpIZv58OH0ldOYghTfYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:5e:7c:9a:bc:47:e3:3d:22:d6:c1:9b:6e:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jul 23 15:00:51 2026 GMT
Not After : Jul 24 15:00:51 2026 GMT
Subject: CN=79a7b65a02845ee79537f124a600b4bce6756da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:71:2e:5d:94:29:93:5e:83:1c:3b:0a:2a:
5a:ba:fd:ab:d1:79:ff:46:a8:d8:e7:18:d3:5c:63:
47:8e:dd:cd:ac:62:e8:d5:fb:33:28:e7:21:20:39:
24:be:39:09:29:86:29:a1:1f:7b:5d:da:dc:a5:d3:
da:68:03:5b:5b:6d:d8:41:02:37:cd:a5:58:e9:aa:
14:df:ef:1b:60:84:2e:e6:30:65:90:91:f5:05:cd:
dc:ba:59:21:54:e1:dc:31:67:20:92:9b:50:ae:40:
53:4c:b4:70:d2:82:ac:be:bb:32:e3:32:65:37:f9:
ff:6a:e6:06:1e:2b:0a:0e:7b:b1:40:55:a9:2a:2d:
d9:b8:f8:ee:4b:d0:1d:ab:53:ab:ba:21:dc:f6:1b:
a6:0f:42:b1:33:b7:2f:15:f9:fe:b8:d5:90:9b:48:
c1:c0:3b:df:df:03:a8:20:1e:bb:c3:6d:e9:ba:ce:
45:51:b6:63:a8:e8:f1:7a:06:27:57:b3:b0:9c:b5:
24:80:3c:bc:bd:a8:2d:e9:9b:ec:fe:31:5d:1a:48:
8a:83:58:fe:7f:2c:b7:17:fc:bb:72:2f:44:2c:28:
a3:a1:a6:85:82:50:93:89:c5:79:12:f8:3a:d2:3a:
6b:85:d0:ad:fa:93:70:30:f0:5f:91:9a:06:a3:e7:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:B6:5A:02:84:5E:E7:95:37:F1:24:A6:00:B4:BC:E6:75:6D:A7
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:51:03:73:f9:7f:39:b2:e9:04:84:07:1c:64:be:59:60:dd:
60:4b:0f:21:d8:4f:a5:4a:9d:89:d7:0c:4c:4a:25:9f:67:07:
77:5d:5c:ac:bd:54:03:d0:8d:28:b4:c2:a1:04:4d:21:b0:c6:
76:a9:94:81:16:07:6d:eb:7d:14:77:7a:83:f8:11:96:bc:98:
ac:cb:90:72:0e:21:41:07:fe:85:1b:44:39:ca:d1:f2:eb:03:
1c:eb:91:80:ea:ac:4e:06:11:63:8c:e2:18:34:03:e0:7a:3f:
fc:5f:55:bf:a6:c2:65:b6:d3:1b:c7:3c:9d:43:66:a3:67:ea:
23:d1:d9:ae:d4:f3:25:2a:80:ca:3c:ca:fb:b5:dd:d1:0b:87:
fa:a7:97:71:86:99:71:5d:4f:fe:e8:96:b5:bc:c5:74:b3:7e:
4e:aa:2b:47:47:a7:cc:df:38:e5:38:23:2f:4e:9c:a8:a4:be:
6a:aa:ff:b1:88:15:82:7f:b6:39:e9:02:17:4b:77:e0:1f:10:
b9:70:a5:4d:ab:67:67:80:66:71:21:26:8e:e7:cb:f2:93:2a:
36:0c:f5:8a:99:1b:f0:df:a2:a5:9d:6d:52:f4:c2:e2:76:0b:
6d:24:47:64:68:20:56:92:35:4f:ac:a5:cd:43:7b:95:de:61:
a8:03:be:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfl58mrxH4z0i1sGbbs3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjYwNzIzMTUwMDUxWhcNMjYwNzI0MTUwMDUxWjAzMTEwLwYDVQQD
Eyg3OWE3YjY1YTAyODQ1ZWU3OTUzN2YxMjRhNjAwYjRiY2U2NzU2ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yhxLl2UKZNegxw7Cipauv2r0Xn/
RqjY5xjTXGNHjt3NrGLo1fszKOchIDkkvjkJKYYpoR97XdrcpdPaaANbW23YQQI3
zaVY6aoU3+8bYIQu5jBlkJH1Bc3culkhVOHcMWcgkptQrkBTTLRw0oKsvrsy4zJl
N/n/auYGHisKDnuxQFWpKi3ZuPjuS9Adq1OruiHc9humD0KxM7cvFfn+uNWQm0jB
wDvf3wOoIB67w23pus5FUbZjqOjxegYnV7OwnLUkgDy8vagt6Zvs/jFdGkiKg1j+
fyy3F/y7ci9ELCijoaaFglCTicV5Evg60jprhdCt+pNwMPBfkZoGo+cWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmntloChF7nlTfxJKYAtLzmdW2nMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFEDc/l/
ObLpBIQHHGS+WWDdYEsPIdhPpUqdidcMTEoln2cHd11crL1UA9CNKLTCoQRNIbDG
dqmUgRYHbet9FHd6g/gRlryYrMuQcg4hQQf+hRtEOcrR8usDHOuRgOqsTgYRY4zi
GDQD4Ho//F9Vv6bCZbbTG8c8nUNmo2fqI9HZrtTzJSqAyjzK+7Xd0QuH+qeXcYaZ
cV1P/uiWtbzFdLN+TqorR0enzN845TgjL06cqKS+aqr/sYgVgn+2OekCF0t34B8Q
uXClTatnZ4BmcSEmjufL8pMqNgz1ipkb8N+ipZ1tUvTC4nYLbSRHZGggVpI1T6yl
zUN7ld5hqAO+Xg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:07 2026 by rpki-client