Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: 8nNIUYy1IuFMM3kj5uSMYTBUnk+LQw/trUqvySHbZHs=
Subject key identifier: 1C:04:D9:13:45:A3:B9:55:C7:1F:C1:C8:3C:A8:A3:48:F6:14:D6:16
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019F9324661C294A920FB13E63C83DE1A559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:01:03 +0000
Manifest this update: Fri 24 Jul 2026 08:01:03 +0000
Manifest next update: Sat 25 Jul 2026 08:01:03 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: 2UhpPwPDOQWhjHiyrbsvYjuspBX8LEdmlmObbwKAqZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:66:1c:29:4a:92:0f:b1:3e:63:c8:3d:e1:a5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Jul 24 08:01:03 2026 GMT
Not After : Jul 25 08:01:03 2026 GMT
Subject: CN=1c04d91345a3b955c71fc1c83ca8a348f614d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:a2:ac:1c:cc:e3:45:9f:a7:c3:db:f6:06:
d8:18:0d:7b:4f:d9:fc:22:e4:11:41:88:24:14:ef:
15:70:3e:bf:03:5c:39:41:a2:22:1b:fb:e7:64:39:
1e:e2:54:b9:9f:7a:37:e4:56:0e:3c:93:ee:72:96:
09:ad:d9:35:25:3b:ae:27:9d:20:f6:2a:39:ee:e8:
c1:a7:ab:18:2a:29:5c:00:20:15:70:1f:e2:1d:d4:
5b:1d:42:4a:5d:e0:66:01:81:f8:cd:ba:35:cf:d5:
f8:79:c1:2e:a0:e9:68:c4:3c:77:12:1b:91:e0:60:
ea:93:77:38:9a:33:a0:a2:3c:64:ee:06:8c:70:87:
2b:44:60:c6:ea:3d:9d:86:82:00:34:64:66:7e:5f:
a6:8c:5d:79:c5:67:f7:b0:17:4a:63:13:64:a4:87:
fa:3f:0f:13:4e:dd:5e:e9:18:7b:4d:a2:dd:25:cf:
22:78:3f:e2:fc:69:43:79:ac:dc:0f:5c:99:46:4e:
1e:11:72:63:25:b0:d1:28:97:c2:cf:08:8d:15:de:
00:84:4d:92:2a:bc:57:79:13:04:94:01:7d:5c:54:
6a:67:00:9c:04:ad:e5:de:36:88:10:fb:2c:db:a0:
96:b9:e7:0c:4f:74:f5:95:6d:b2:72:38:74:fc:f4:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:D9:13:45:A3:B9:55:C7:1F:C1:C8:3C:A8:A3:48:F6:14:D6:16
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9f:e9:dd:6b:fb:d0:27:e5:ea:ba:33:50:2d:18:fe:fe:c2:
2b:14:16:9c:14:92:96:68:8c:65:25:43:1a:46:fe:60:dd:6f:
e6:bc:56:2d:83:ec:f9:ca:25:e5:89:0a:3a:59:f5:38:f2:5b:
14:61:8c:37:38:ac:d1:f7:7b:df:71:ee:7d:02:50:5b:b6:26:
b6:88:85:92:1f:fe:d7:73:0b:00:54:11:30:7c:8f:04:67:05:
62:bd:f1:56:64:f3:1c:23:e3:77:0c:42:f5:12:86:c7:91:ae:
7f:9c:01:53:1a:78:68:95:8f:b5:20:ee:8d:21:f0:c2:3f:2c:
1c:cd:95:3b:b6:a7:3e:d9:a8:4b:ee:64:bd:6b:d4:59:60:2e:
b6:b4:ef:83:95:b3:98:05:a3:11:3e:b6:17:6f:2f:4e:93:ea:
73:29:bd:23:43:ff:99:07:98:2c:ed:c1:5e:39:9d:5b:3f:2d:
f2:8a:7a:22:5f:d8:65:b0:16:e7:ef:e6:f4:24:26:36:bb:22:
94:e7:44:c9:8c:1f:3a:49:b2:8a:19:7f:e9:dc:fe:46:2f:22:
1c:ef:84:61:db:77:e6:2c:2c:2a:99:7f:97:d0:f6:4a:8d:8a:
7b:a6:d9:cd:7a:41:3d:11:d1:f9:e5:29:bb:8d:6e:ae:fd:2e:
85:5f:c6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJGYcKUqSD7E+Y8g94aVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NWQ0ZTYzMTdjNjJhMWE2OWRhYzMxZjRmMTQzZTNiYzI4
MGJhNjIwHhcNMjYwNzI0MDgwMTAzWhcNMjYwNzI1MDgwMTAzWjAzMTEwLwYDVQQD
EygxYzA0ZDkxMzQ1YTNiOTU1YzcxZmMxYzgzY2E4YTM0OGY2MTRkNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtGirBzM40Wfp8Pb9gbYGA17T9n8
IuQRQYgkFO8VcD6/A1w5QaIiG/vnZDke4lS5n3o35FYOPJPucpYJrdk1JTuuJ50g
9io57ujBp6sYKilcACAVcB/iHdRbHUJKXeBmAYH4zbo1z9X4ecEuoOloxDx3EhuR
4GDqk3c4mjOgojxk7gaMcIcrRGDG6j2dhoIANGRmfl+mjF15xWf3sBdKYxNkpIf6
Pw8TTt1e6Rh7TaLdJc8ieD/i/GlDeazcD1yZRk4eEXJjJbDRKJfCzwiNFd4AhE2S
KrxXeRMElAF9XFRqZwCcBK3l3jaIEPss26CWuecMT3T1lW2ycjh0/PTUkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwE2RNFo7lVxx/ByDyoo0j2FNYWMB8GA1UdIwQY
MBaAFLVdTmMXxioaadrDH08UPjvCgLpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAt
NTM0ZDc4ODk4ZDZiLzEvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAtNTM0ZDc4ODk4ZDZi
LzEvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJ/p3Wv7
0Cfl6rozUC0Y/v7CKxQWnBSSlmiMZSVDGkb+YN1v5rxWLYPs+col5YkKOln1OPJb
FGGMNzis0fd733HufQJQW7YmtoiFkh/+13MLAFQRMHyPBGcFYr3xVmTzHCPjdwxC
9RKGx5Guf5wBUxp4aJWPtSDujSHwwj8sHM2VO7anPtmoS+5kvWvUWWAutrTvg5Wz
mAWjET62F28vTpPqcym9I0P/mQeYLO3BXjmdWz8t8op6Il/YZbAW5+/m9CQmNrsi
lOdEyYwfOkmyihl/6dz+Ri8iHO+EYdt35iwsKpl/l9D2So2Ke6bZzXpBPRHR+eUp
u41urv0uhV/GBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:27 2026 by rpki-client