Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json)
Hash identifier: BGJlkVNY1+X4WxjNJ8vlRlg3EhzSMiIx73kMIMjFm0Y=
Subject key identifier: 2F:FE:47:64:C6:CC:C3:7D:A0:BE:19:66:92:A8:94:99:A9:8E:3A:CA
Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Certificate issuer: /CN=32b1b94b073c547991c20f842eadec167ec19e34
Certificate serial: 019F93927D5CC9E738CFE7BDC4532ED9AA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
Manifest number: 063E
Signing time: Fri 24 Jul 2026 10:01:18 +0000
Manifest this update: Fri 24 Jul 2026 10:01:18 +0000
Manifest next update: Sat 25 Jul 2026 10:01:18 +0000
Files and hashes: 1: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: PX6Vw/JMPWYE3RjI9fZmdFjX+RXmhHGjp6hxUjiwthE=)
2: ajY7opH2JkgKSsn0u1tCSe2qO48.roa (hash: digTHTa7KkUVMUs55bQN2ammxPkYLAkzneKY1dmofHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:7d:5c:c9:e7:38:cf:e7:bd:c4:53:2e:d9:aa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34
Validity
Not Before: Jul 24 10:01:18 2026 GMT
Not After : Jul 25 10:01:18 2026 GMT
Subject: CN=2ffe4764c6ccc37da0be196692a89499a98e3aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:13:d0:cb:c7:c4:2f:45:b1:f4:6a:9c:db:
8c:41:01:17:28:a9:d3:9b:9d:09:18:7f:f9:9b:1a:
66:9b:be:10:25:4b:eb:49:8c:e1:c3:32:c7:e3:58:
54:bf:96:d6:8d:eb:c2:f1:3d:f1:f3:1c:1b:6d:29:
e8:02:20:9a:b9:0f:3b:5b:1c:d0:43:50:26:8a:77:
c1:73:33:c3:50:f0:ed:2f:0c:b7:eb:b1:a1:03:9a:
38:0a:9b:72:e5:5c:45:9b:47:88:e2:90:d4:99:13:
f0:bf:e6:68:78:ba:66:f9:de:e8:cb:b8:1f:9e:9f:
9f:7f:c6:7a:ed:88:08:4c:1a:66:e6:80:06:42:66:
84:2a:f4:90:52:79:d1:4b:b6:a5:a9:7d:a7:32:a8:
44:e6:b6:52:d5:0b:56:57:a4:88:32:ec:79:24:27:
07:96:96:83:9b:27:c2:cc:4e:f4:7d:3e:63:f7:0e:
1e:aa:98:d7:7e:9b:ec:8a:42:7c:f5:a5:34:fc:bf:
7a:f5:6a:58:c0:b6:ce:14:b4:a7:03:43:1d:59:db:
a6:91:12:e9:a0:e9:ae:8f:99:06:57:47:40:b9:d2:
4c:56:d8:a9:6a:9f:86:f4:8f:8e:c5:81:79:da:9e:
2d:97:11:65:d3:11:90:3c:8f:e7:61:ef:28:6d:83:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:47:64:C6:CC:C3:7D:A0:BE:19:66:92:A8:94:99:A9:8E:3A:CA
X509v3 Authority Key Identifier:
keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:b5:40:b6:c3:48:fc:87:bb:91:e3:dc:fb:eb:1c:b2:f6:
51:ff:45:a0:1e:2e:e2:db:ae:f2:0b:7a:65:e3:9c:b1:f7:70:
ec:b9:bf:2f:66:ca:1f:c9:ea:0d:10:49:9e:63:c7:8e:08:13:
e2:d0:b3:77:fa:c6:85:95:ea:d3:64:80:64:76:d0:6c:13:3f:
37:b4:bd:67:f4:44:a7:cc:8b:bc:a6:7c:4c:b6:e0:9f:ea:48:
06:53:13:73:05:a7:a3:0d:65:ea:f9:9c:20:c3:f2:9f:ad:fa:
8c:24:19:dd:1e:4e:dd:92:30:a3:e0:7f:8c:06:b3:d1:f6:92:
24:7f:9a:ae:34:17:1e:0f:15:f6:bf:f5:ef:25:bb:1f:08:ce:
2a:8d:e8:42:46:c3:78:cb:6b:74:89:b6:50:53:52:e3:a9:ff:
a8:59:bb:a4:8b:9a:49:46:9f:2c:de:eb:0b:4b:0e:8c:69:12:
c4:e2:f2:7a:74:01:c6:03:47:9c:ef:de:20:68:0a:ec:c2:11:
e3:02:b4:5a:f7:16:04:06:90:b7:b5:47:ce:39:6f:de:4e:d5:
a2:b3:2d:77:74:bb:40:3a:08:10:9d:0a:c3:c2:ea:50:fd:74:
07:47:42:7f:b4:b2:76:d1:06:0f:3b:8a:1a:ff:8f:16:33:1f:
74:b2:c5:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkn1cyec4z+e9xFMu2aoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYjFiOTRiMDczYzU0Nzk5MWMyMGY4NDJlYWRlYzE2N2Vj
MTllMzQwHhcNMjYwNzI0MTAwMTE4WhcNMjYwNzI1MTAwMTE4WjAzMTEwLwYDVQQD
EygyZmZlNDc2NGM2Y2NjMzdkYTBiZTE5NjY5MmE4OTQ5OWE5OGUzYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bwT0MvHxC9FsfRqnNuMQQEXKKnT
m50JGH/5mxpmm74QJUvrSYzhwzLH41hUv5bWjevC8T3x8xwbbSnoAiCauQ87WxzQ
Q1AminfBczPDUPDtLwy367GhA5o4Cpty5VxFm0eI4pDUmRPwv+ZoeLpm+d7oy7gf
np+ff8Z67YgITBpm5oAGQmaEKvSQUnnRS7alqX2nMqhE5rZS1QtWV6SIMux5JCcH
lpaDmyfCzE70fT5j9w4eqpjXfpvsikJ89aU0/L969WpYwLbOFLSnA0MdWdumkRLp
oOmuj5kGV0dAudJMVtipap+G9I+OxYF52p4tlxFl0xGQPI/nYe8obYNKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/+R2TGzMN9oL4ZZpKolJmpjjrKMB8GA1UdIwQY
MBaAFDKxuUsHPFR5kcIPhC6t7BZ+wZ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYTIwNmUtMTc4OC00MzZiLTk3Mjgt
YmVkNGI5OWE3YmI0LzEvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYTIwNmUtMTc4OC00MzZiLTk3MjgtYmVkNGI5OWE3YmI0
LzEvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMi1QLbD
SPyHu5Hj3PvrHLL2Uf9FoB4u4tuu8gt6ZeOcsfdw7Lm/L2bKH8nqDRBJnmPHjggT
4tCzd/rGhZXq02SAZHbQbBM/N7S9Z/REp8yLvKZ8TLbgn+pIBlMTcwWnow1l6vmc
IMPyn636jCQZ3R5O3ZIwo+B/jAaz0faSJH+arjQXHg8V9r/17yW7HwjOKo3oQkbD
eMtrdIm2UFNS46n/qFm7pIuaSUafLN7rC0sOjGkSxOLyenQBxgNHnO/eIGgK7MIR
4wK0WvcWBAaQt7VHzjlv3k7VorMtd3S7QDoIEJ0Kw8LqUP10B0dCf7SydtEGDzuK
Gv+PFjMfdLLFVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:39:31 2026 by rpki-client