Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: nlKpCdMYouPBnSpClJmKk2o7Ag7pmrljkXrHTdczWYc=
Subject key identifier: 2A:E4:10:30:19:9D:CB:69:0F:78:BE:BD:4C:F1:5E:59:53:BF:EA:0A
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019F91A385DF8A4738CD2EEC1D94814ABBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0CD6
Signing time: Fri 24 Jul 2026 01:00:40 +0000
Manifest this update: Fri 24 Jul 2026 01:00:40 +0000
Manifest next update: Sat 25 Jul 2026 01:00:40 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: Fdzk+S/xodKCfXvEKATseCzv4jxMhnhzHjN/SdVTAWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:85:df:8a:47:38:cd:2e:ec:1d:94:81:4a:bb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jul 24 01:00:40 2026 GMT
Not After : Jul 25 01:00:40 2026 GMT
Subject: CN=2ae41030199dcb690f78bebd4cf15e5953bfea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:33:09:a2:95:ef:3e:e2:85:91:84:f7:62:
e8:95:f3:02:58:ae:79:9f:57:fc:42:73:63:7e:e8:
7d:42:7e:a9:90:ea:54:db:e7:a4:27:3f:6c:12:1a:
54:3f:d0:b0:c1:d4:38:9e:0c:68:06:81:d5:85:9d:
f5:78:57:3e:40:d3:dd:d2:6c:01:af:2d:47:c0:57:
fa:82:33:69:cb:2d:3c:f6:02:99:83:9d:d4:56:a4:
89:4c:30:6e:31:9e:d7:d8:79:f9:4f:a1:71:ec:ee:
31:27:a4:51:b9:74:0f:bb:25:97:58:9a:e7:04:19:
a5:df:08:9d:00:11:7f:1f:9f:7a:63:ab:bd:88:a5:
c9:46:2d:9d:88:26:66:95:fb:1d:eb:32:31:b2:77:
5f:dc:6c:c0:72:48:5a:6b:17:5e:d9:d5:17:3d:50:
86:ca:4d:cc:c8:94:17:0b:1b:ea:90:de:46:07:14:
d1:29:67:ab:22:48:d0:63:1e:96:80:a6:82:b2:95:
0c:dc:5e:ce:0f:c1:82:69:81:c4:dd:b9:5c:e2:5a:
54:ac:5e:89:2f:5d:3a:0c:ac:72:f7:24:1e:df:81:
d4:49:90:ae:61:9e:03:3c:33:7f:d7:53:2d:36:b9:
83:aa:f5:a2:a0:56:5f:b0:58:60:20:76:ba:33:3d:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:10:30:19:9D:CB:69:0F:78:BE:BD:4C:F1:5E:59:53:BF:EA:0A
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:02:0f:5f:d4:fd:65:62:5a:5b:2f:64:f6:7b:7b:f4:11:
05:dd:f9:16:47:2a:53:da:b8:fe:41:dd:c4:bc:80:04:e0:07:
00:40:9f:bc:1d:a5:a8:db:c9:40:b4:18:bb:68:a4:ec:fc:87:
e3:64:e7:94:a9:9c:80:5d:e6:08:d5:03:57:79:0d:5c:2c:09:
94:d2:6a:50:56:36:48:7d:a0:3d:8c:fd:60:91:a5:be:16:0b:
2d:ae:43:ac:52:58:a8:83:53:46:7c:41:3c:23:31:96:f5:f6:
49:a0:96:e0:c9:0d:1a:50:41:ca:ab:5c:aa:39:eb:d0:34:55:
89:dc:b3:b3:68:8d:ec:08:bd:38:91:f3:be:8d:62:f2:ee:05:
ad:ad:dd:f5:19:65:87:6a:7b:79:45:19:1e:7b:c4:47:3f:11:
74:2e:06:44:98:6f:90:22:2d:0e:04:44:25:5f:ff:93:04:60:
db:b2:14:49:4d:c0:9a:7d:fa:54:5b:56:13:c7:88:6b:6f:6f:
1c:fe:42:44:09:5a:8e:3c:8c:43:d7:18:02:84:a3:8d:c6:82:
9a:d8:8d:71:4d:37:79:4d:13:2f:ca:a7:7f:0b:82:a1:dc:3f:
80:40:df:2d:2f:d0:8b:0e:35:45:71:5c:68:08:33:47:0c:3d:
64:a3:f8:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro4Xfikc4zS7sHZSBSru2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjYwNzI0MDEwMDQwWhcNMjYwNzI1MDEwMDQwWjAzMTEwLwYDVQQD
EygyYWU0MTAzMDE5OWRjYjY5MGY3OGJlYmQ0Y2YxNWU1OTUzYmZlYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltgzCaKV7z7ihZGE92LolfMCWK55
n1f8QnNjfuh9Qn6pkOpU2+ekJz9sEhpUP9CwwdQ4ngxoBoHVhZ31eFc+QNPd0mwB
ry1HwFf6gjNpyy089gKZg53UVqSJTDBuMZ7X2Hn5T6Fx7O4xJ6RRuXQPuyWXWJrn
BBml3widABF/H596Y6u9iKXJRi2diCZmlfsd6zIxsndf3GzAckhaaxde2dUXPVCG
yk3MyJQXCxvqkN5GBxTRKWerIkjQYx6WgKaCspUM3F7OD8GCaYHE3blc4lpUrF6J
L106DKxy9yQe34HUSZCuYZ4DPDN/11MtNrmDqvWioFZfsFhgIHa6Mz2ecwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrkEDAZnctpD3i+vUzxXllTv+oKMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo4CD1/U
/WViWlsvZPZ7e/QRBd35FkcqU9q4/kHdxLyABOAHAECfvB2lqNvJQLQYu2ik7PyH
42TnlKmcgF3mCNUDV3kNXCwJlNJqUFY2SH2gPYz9YJGlvhYLLa5DrFJYqINTRnxB
PCMxlvX2SaCW4MkNGlBByqtcqjnr0DRVidyzs2iN7Ai9OJHzvo1i8u4Fra3d9Rll
h2p7eUUZHnvERz8RdC4GRJhvkCItDgREJV//kwRg27IUSU3Amn36VFtWE8eIa29v
HP5CRAlajjyMQ9cYAoSjjcaCmtiNcU03eU0TL8qnfwuCodw/gEDfLS/Qiw41RXFc
aAgzRww9ZKP4eA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:00 2026 by rpki-client