
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: 5lA89arCB0ifNZHpR5Sh9w3of69fia5NUCzstJbbPSI=
Subject key identifier: 1A:38:38:02:D1:44:7B:C1:B5:8B:D3:35:9C:DA:20:6D:ED:C2:59:2C
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 019F90C81794FCB84B628B058E00220462DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:00 +0000
Manifest this update: Thu 23 Jul 2026 21:01:00 +0000
Manifest next update: Fri 24 Jul 2026 21:01:00 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: egcByf30G4yN+3m2dSCnN+vJFqfcN9j9R/HOcfYGS6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:17:94:fc:b8:4b:62:8b:05:8e:00:22:04:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Jul 23 21:01:00 2026 GMT
Not After : Jul 24 21:01:00 2026 GMT
Subject: CN=1a383802d1447bc1b58bd3359cda206dedc2592c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:74:ae:36:a0:1a:f1:88:47:a0:3d:41:7a:37:
7e:cb:e5:f8:d7:f4:22:0b:91:19:c0:65:e4:9f:53:
fc:99:87:2c:8d:7d:ee:c2:78:41:4e:e5:de:79:15:
2c:e2:8e:a7:37:92:b0:1b:43:f3:9c:f5:f0:9b:8f:
62:50:8c:4e:b8:51:10:a4:24:23:84:50:37:9b:f6:
09:39:e7:01:18:e4:49:96:1c:0f:f0:0b:e5:dc:58:
fb:92:d0:ef:fc:ae:24:97:ea:c8:fe:8d:3c:96:36:
a5:2a:ec:b4:6c:c5:49:33:b3:9e:1c:b2:81:04:ef:
dc:49:a1:9a:0a:b8:64:34:11:a9:03:7b:c1:4b:f1:
e2:25:98:0c:c9:5c:e4:f4:d6:d9:69:6c:6c:88:16:
1a:52:e5:04:ac:58:f1:6b:23:ee:43:29:5b:8d:08:
8f:80:de:8d:a3:4c:fe:e8:af:23:51:1b:12:13:31:
2e:f0:19:86:51:33:da:d7:00:c7:00:3b:87:b4:53:
00:99:51:7a:39:b0:e0:56:ee:92:b6:1e:c3:ef:19:
b8:b1:ba:ec:63:ca:8a:07:07:b8:f3:40:d4:6c:3b:
37:e0:be:60:70:2d:83:e0:5d:a6:cf:01:4a:07:23:
74:aa:12:a7:1d:5d:c1:bc:2e:68:0d:c4:ed:4f:bf:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:38:38:02:D1:44:7B:C1:B5:8B:D3:35:9C:DA:20:6D:ED:C2:59:2C
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:25:ea:e1:a8:ee:88:38:37:f8:7a:21:ad:92:9d:68:e8:ed:
e3:3c:61:91:b5:78:cf:a1:02:2b:4d:f2:95:5e:38:16:d3:da:
e2:1f:44:8e:e8:b0:4b:eb:c8:2b:8d:f0:b4:7f:fd:c4:ec:bd:
82:f0:91:6e:14:42:a8:a2:c9:0b:19:1e:18:b0:d8:82:45:bd:
d4:5c:f4:5b:46:9f:84:cf:a8:21:46:78:36:ea:35:31:86:f2:
6e:01:e1:ac:9d:36:bb:9a:b2:ef:fb:96:8b:03:f1:6c:10:15:
62:6b:26:5f:6b:08:24:5c:13:5e:a9:ff:7e:b5:bc:9e:24:28:
c9:49:e5:78:39:cb:f9:ba:22:b3:05:f9:35:e2:ac:23:6f:74:
00:8b:f3:a4:57:35:c8:6f:40:4e:e8:dd:f2:90:4c:e8:8a:03:
51:d0:2d:08:38:42:a6:ae:aa:23:a9:76:6c:d4:f4:11:97:61:
00:83:da:d0:95:8d:5e:b8:17:8e:d2:80:a2:96:34:cd:e6:e5:
d4:3c:1e:80:73:9d:70:2d:12:7f:c0:fe:4b:7b:9a:64:f5:fc:
54:de:40:ca:a3:b6:13:f9:d7:63:4a:c7:58:7c:10:91:f7:e0:
f2:f2:98:41:1f:c6:95:d8:b0:11:28:71:49:9b:01:de:a5:4e:
2d:8a:3e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyBeU/LhLYosFjgAiBGLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWU1ZTMzODc5NGU2MGQ1ZDhiNTIzYmRiMmI2OGVjNGFj
NzYyY2UwHhcNMjYwNzIzMjEwMTAwWhcNMjYwNzI0MjEwMTAwWjAzMTEwLwYDVQQD
EygxYTM4MzgwMmQxNDQ3YmMxYjU4YmQzMzU5Y2RhMjA2ZGVkYzI1OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XSuNqAa8YhHoD1Bejd+y+X41/Qi
C5EZwGXkn1P8mYcsjX3uwnhBTuXeeRUs4o6nN5KwG0PznPXwm49iUIxOuFEQpCQj
hFA3m/YJOecBGORJlhwP8Avl3Fj7ktDv/K4kl+rI/o08ljalKuy0bMVJM7OeHLKB
BO/cSaGaCrhkNBGpA3vBS/HiJZgMyVzk9NbZaWxsiBYaUuUErFjxayPuQylbjQiP
gN6No0z+6K8jURsSEzEu8BmGUTPa1wDHADuHtFMAmVF6ObDgVu6Sth7D7xm4sbrs
Y8qKBwe480DUbDs34L5gcC2D4F2mzwFKByN0qhKnHV3BvC5oDcTtT78mCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo4OALRRHvBtYvTNZzaIG3twlksMB8GA1UdIwQY
MBaAFNKuXjOHlOYNXYtSO9sraOxKx2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYt
OGQ4ZTllYTE0MzI1LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYtOGQ4ZTllYTE0MzI1
LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiXq4aju
iDg3+HohrZKdaOjt4zxhkbV4z6ECK03ylV44FtPa4h9EjuiwS+vIK43wtH/9xOy9
gvCRbhRCqKLJCxkeGLDYgkW91Fz0W0afhM+oIUZ4Nuo1MYbybgHhrJ02u5qy7/uW
iwPxbBAVYmsmX2sIJFwTXqn/frW8niQoyUnleDnL+boiswX5NeKsI290AIvzpFc1
yG9ATujd8pBM6IoDUdAtCDhCpq6qI6l2bNT0EZdhAIPa0JWNXrgXjtKAopY0zebl
1DwegHOdcC0Sf8D+S3uaZPX8VN5AyqO2E/nXY0rHWHwQkffg8vKYQR/GldiwEShx
SZsB3qVOLYo+vg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:49 2026 by rpki-client