Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
File: M5rxdTy1gnt7QzdTtXxHjUqtbus.mft (raw, json)
Hash identifier: ysnwp1XoxPdyYuDKkrLiXPkMBfr4tBD52XG8723F25c=
Subject key identifier: 70:4C:09:3C:3B:BC:49:48:E5:24:C6:C7:4C:2A:35:D8:8D:57:B6:A3
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F91DA47D1B99033AA327746C314BCFCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 02:00:29 +0000
Manifest this update: Fri 24 Jul 2026 02:00:29 +0000
Manifest next update: Sat 25 Jul 2026 02:00:29 +0000
Files and hashes: 1: 1Tl9UIhCqeKOtou3xYXepXYcMhg.roa (hash: 5AkZht3+a78cap99bgI8nP4neP9y8A6GlDJrz6Dteng=)
2: B48qkRdOfa6_cPOlPzDgOqUlWSg.roa (hash: wSI7kbco2gmflRi9epKlQvIQAAUD21wLcZHQLK7txNA=)
3: DQBKGiZGDTDf_MhJYHXFm05lwLY.roa (hash: n5gQOXIBUlgRM18cV4srzrmBIxmZMJi0pTGhNSWt7ec=)
4: M5rxdTy1gnt7QzdTtXxHjUqtbus.crl (hash: I/+bKzWEczRRW/YDJ0/dehg/xPkSk7nDuEXecpkmHyc=)
5: QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa (hash: R4X1zIr5apakhLTxXprIGVOA1Cqy//r8dlHgHlvik2c=)
6: Srwm0O5XziVvTMCAUPAPHDtyOL4.roa (hash: Xqk8aLHxkijmEc5CYN4gn6Fq5GjplNDxfZlZrnMA9sY=)
7: XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa (hash: vt5PHv7coIM1JmNeX6jiBcQ3MwSimt+j/3Pge4DDNa4=)
8: ZNzJPMt2B1SyImQTB05Yvsvkd14.roa (hash: leKWlyfh6OtsxG9LVgSYbJDdSIf0o1TbZ02gUSkJ9+8=)
9: pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa (hash: /UkrVYY41cQP/8A3LMNbtpf3fvfzlt7M2OaVy/IHrJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:47:d1:b9:90:33:aa:32:77:46:c3:14:bc:fc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 24 02:00:29 2026 GMT
Not After : Jul 25 02:00:29 2026 GMT
Subject: CN=704c093c3bbc4948e524c6c74c2a35d88d57b6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:01:cf:c1:98:11:98:45:87:5b:86:91:c1:
06:50:01:33:e3:b0:1f:ae:a4:c7:59:6b:bd:ff:72:
74:36:a7:2c:0e:2f:3f:76:47:0d:83:87:13:1c:d5:
68:d1:a6:ba:45:71:61:3d:d8:23:e8:e5:87:2a:a9:
34:15:59:b5:3e:6d:a0:b2:fe:3c:89:ed:c1:66:7a:
b6:5c:ee:d3:a1:db:19:18:1d:fe:45:12:ac:09:b0:
c9:af:59:72:c0:e8:71:af:30:a1:80:f3:8f:58:f4:
43:b6:bc:ea:a8:0d:4b:39:f4:54:4b:5d:2b:ba:3f:
63:53:23:b4:90:fd:05:d2:49:53:fe:32:a9:59:c2:
60:6e:1c:6b:f6:ce:06:cf:25:15:5d:a9:29:df:b6:
cd:6e:0c:b4:bd:8a:22:3a:b3:4b:e6:a2:4e:02:d5:
65:54:02:d8:4e:4f:e4:77:7a:ec:78:d2:2d:fe:d2:
de:0e:9b:25:c4:a2:7e:8c:6d:cf:24:e4:7f:d0:59:
d6:8c:90:63:1d:f8:a5:5e:a2:e6:30:bd:47:6f:7d:
1d:0e:3d:77:63:1a:22:76:4b:06:11:35:d6:7e:74:
c2:dd:a8:d8:02:64:ba:24:cb:9c:22:f4:8e:51:ae:
1b:73:a0:a9:6f:b8:44:d1:d7:1d:a5:8b:19:ac:bd:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:09:3C:3B:BC:49:48:E5:24:C6:C7:4C:2A:35:D8:8D:57:B6:A3
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:32:ef:95:1f:12:43:2d:b6:92:c7:d2:9f:b7:b2:c6:77:49:
b2:eb:63:0d:dc:fe:93:53:d1:9c:56:5e:86:30:e2:55:6d:8d:
a3:26:29:09:3b:9b:e1:0f:be:1d:b5:52:64:6a:92:83:14:60:
9a:5c:cc:70:f1:bf:30:35:fa:6b:19:78:f3:4c:11:9d:db:63:
9d:5f:3d:78:b8:a3:89:4a:43:66:d1:bf:da:e6:74:34:1d:a0:
0e:82:48:f4:8b:c7:22:2a:92:24:e8:97:95:2c:18:da:1b:ea:
f2:c9:2b:c9:33:f0:80:5b:67:f4:3c:66:e2:15:24:ef:a1:d0:
fc:c6:8c:34:8b:f4:46:92:d2:5b:3f:d8:4e:d8:de:e5:a0:87:
63:5f:6a:c6:e5:bc:1b:e4:b9:ee:3f:60:55:5d:fa:5e:f6:a9:
7b:0b:0f:3a:07:2a:1c:a2:8d:76:29:73:64:4e:34:57:1c:f0:
28:28:7d:9d:18:f8:e4:a3:48:08:02:75:c9:8c:91:d2:ed:94:
fb:c4:0e:c2:fe:b9:a3:70:ac:c5:b8:87:c9:47:d9:f1:ed:89:
8d:96:79:93:36:e4:5d:86:53:a9:06:6d:cf:d1:1c:8d:6e:9a:
19:76:a1:8e:98:5f:d0:35:c9:3b:e0:43:0f:68:7d:89:a3:29:
15:55:22:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2kfRuZAzqjJ3RsMUvPzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWFmMTc1M2NiNTgyN2I3YjQzMzc1M2I1N2M0NzhkNGFh
ZDZlZWIwHhcNMjYwNzI0MDIwMDI5WhcNMjYwNzI1MDIwMDI5WjAzMTEwLwYDVQQD
Eyg3MDRjMDkzYzNiYmM0OTQ4ZTUyNGM2Yzc0YzJhMzVkODhkNTdiNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgYBz8GYEZhFh1uGkcEGUAEz47Af
rqTHWWu9/3J0NqcsDi8/dkcNg4cTHNVo0aa6RXFhPdgj6OWHKqk0FVm1Pm2gsv48
ie3BZnq2XO7TodsZGB3+RRKsCbDJr1lywOhxrzChgPOPWPRDtrzqqA1LOfRUS10r
uj9jUyO0kP0F0klT/jKpWcJgbhxr9s4GzyUVXakp37bNbgy0vYoiOrNL5qJOAtVl
VALYTk/kd3rseNIt/tLeDpslxKJ+jG3PJOR/0FnWjJBjHfilXqLmML1Hb30dDj13
YxoidksGETXWfnTC3ajYAmS6JMucIvSOUa4bc6Cpb7hE0dcdpYsZrL0/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBMCTw7vElI5STGx0wqNdiNV7ajMB8GA1UdIwQY
MBaAFDOa8XU8tYJ7e0M3U7V8R41KrW7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTVyeGRUeTFnbnQ3UXpkVHRYeEhqVXF0YnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt
Y2UyMjUxODdmYzM4LzEvTTVyeGRUeTFnbnQ3UXpkVHRYeEhqVXF0YnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4
LzEvTTVyeGRUeTFnbnQ3UXpkVHRYeEhqVXF0YnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDLvlR8S
Qy22ksfSn7eyxndJsutjDdz+k1PRnFZehjDiVW2NoyYpCTub4Q++HbVSZGqSgxRg
mlzMcPG/MDX6axl480wRndtjnV89eLijiUpDZtG/2uZ0NB2gDoJI9IvHIiqSJOiX
lSwY2hvq8skryTPwgFtn9Dxm4hUk76HQ/MaMNIv0RpLSWz/YTtje5aCHY19qxuW8
G+S57j9gVV36XvapewsPOgcqHKKNdilzZE40VxzwKCh9nRj45KNICAJ1yYyR0u2U
+8QOwv65o3CsxbiHyUfZ8e2JjZZ5kzbkXYZTqQZtz9EcjW6aGXahjphf0DXJO+BD
D2h9iaMpFVUiow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:20 2026 by rpki-client