Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: gRW3MSwvD5btvByOFqFzvcBWBvPuJoCdQaUGIqpMUaU=
Subject key identifier: F1:8A:06:BC:03:96:C9:C7:1D:1C:56:EC:4C:FB:60:0C:24:1C:7E:8A
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019F93FFAAE4C89735D18E52798EDA4935A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:33 +0000
Manifest this update: Fri 24 Jul 2026 12:00:33 +0000
Manifest next update: Sat 25 Jul 2026 12:00:33 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: OZ3VTitTrs219l1phoauoFqy1Kanyaq7C+orDAkwmhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:aa:e4:c8:97:35:d1:8e:52:79:8e:da:49:35:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jul 24 12:00:33 2026 GMT
Not After : Jul 25 12:00:33 2026 GMT
Subject: CN=f18a06bc0396c9c71d1c56ec4cfb600c241c7e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:ab:b2:93:78:25:76:c4:81:5c:d3:ad:47:
86:a8:07:bc:ad:91:82:a2:50:23:d1:a0:77:c8:0b:
31:4c:18:c8:3c:12:12:81:16:32:3d:04:41:f0:77:
6b:f2:1c:c2:9b:17:d9:99:c1:c6:6a:56:91:c5:ed:
c7:c1:bb:73:f2:e4:ff:a1:7a:9f:11:74:0f:6b:0d:
c3:e4:f7:8f:3f:c3:d9:b6:be:b6:9e:6c:ee:19:11:
f9:f8:e3:7f:8b:b0:b4:a1:2b:dd:2f:d8:bc:67:fb:
37:51:0a:b0:6e:7f:4d:00:5a:9a:b9:31:fc:66:63:
64:9d:a1:23:fb:f6:1a:73:0c:97:6f:5a:c8:7c:4b:
84:ac:4e:de:5d:6d:1a:f2:cd:b4:da:2f:0f:70:18:
93:9d:04:f1:0c:af:f3:47:95:b4:ad:5d:59:5d:bb:
9b:1f:bc:11:1a:d6:c4:9f:e0:5e:0a:09:c7:bf:22:
5b:4b:0c:8a:b8:a6:69:52:e7:4a:2b:63:eb:52:22:
cd:9d:31:81:1f:90:06:dc:61:c1:6b:60:79:94:29:
99:7c:53:39:6d:97:ee:e5:6c:c1:ca:5f:a4:47:14:
0d:83:cb:22:c1:67:78:89:8a:6b:0c:e9:6e:9f:d3:
51:bb:02:fd:78:53:ee:6f:3f:e1:62:4b:ee:d1:93:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:06:BC:03:96:C9:C7:1D:1C:56:EC:4C:FB:60:0C:24:1C:7E:8A
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:91:71:10:21:c9:df:25:09:e2:3f:07:09:06:bd:4e:7e:a4:
a9:d1:77:ee:96:77:aa:69:e7:63:13:7c:bb:f6:35:25:0c:c9:
40:13:09:f8:2a:70:e2:3f:7e:5e:07:7e:fe:c0:5e:be:8e:c9:
30:36:25:47:9f:41:c3:46:0c:b7:4a:e3:ca:68:6b:63:c4:92:
b7:10:0c:57:8f:4e:a7:99:de:b5:63:0f:fb:e4:e7:cf:bc:14:
83:ae:81:16:9c:ee:44:1f:c7:af:fe:db:8d:25:ce:f9:fd:ed:
a7:63:1e:99:e1:af:12:99:ac:56:db:6d:5e:e4:07:4d:de:32:
9a:bc:1c:b1:e2:b0:f3:cc:a0:07:72:2c:5b:da:8a:c0:b7:28:
35:b7:ca:5c:56:77:d8:69:a0:f1:29:29:3a:76:df:b2:d1:6c:
ad:33:3c:a1:64:e0:48:7a:26:cd:82:14:f8:34:68:17:ab:f0:
67:86:2c:7b:38:52:53:55:76:fe:35:87:6b:1b:c2:9e:8d:cd:
e6:70:13:5b:25:6d:a1:f2:20:a1:b3:d9:5c:77:c6:59:58:45:
50:21:85:68:bd:bc:f4:dd:d2:6a:e7:61:41:e9:63:87:08:0f:
a1:04:2d:e6:8e:1d:07:dc:a9:45:6e:7e:4e:4b:8e:aa:8c:7f:
e6:34:1c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/6rkyJc10Y5SeY7aSTWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk
MWM4NzkwHhcNMjYwNzI0MTIwMDMzWhcNMjYwNzI1MTIwMDMzWjAzMTEwLwYDVQQD
EyhmMThhMDZiYzAzOTZjOWM3MWQxYzU2ZWM0Y2ZiNjAwYzI0MWM3ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM+rspN4JXbEgVzTrUeGqAe8rZGC
olAj0aB3yAsxTBjIPBISgRYyPQRB8Hdr8hzCmxfZmcHGalaRxe3Hwbtz8uT/oXqf
EXQPaw3D5PePP8PZtr62nmzuGRH5+ON/i7C0oSvdL9i8Z/s3UQqwbn9NAFqauTH8
ZmNknaEj+/YacwyXb1rIfEuErE7eXW0a8s202i8PcBiTnQTxDK/zR5W0rV1ZXbub
H7wRGtbEn+BeCgnHvyJbSwyKuKZpUudKK2PrUiLNnTGBH5AG3GHBa2B5lCmZfFM5
bZfu5WzByl+kRxQNg8siwWd4iYprDOlun9NRuwL9eFPubz/hYkvu0ZPfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGKBrwDlsnHHRxW7Ez7YAwkHH6KMB8GA1UdIwQY
MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt
NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh
LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJFxECHJ
3yUJ4j8HCQa9Tn6kqdF37pZ3qmnnYxN8u/Y1JQzJQBMJ+Cpw4j9+Xgd+/sBevo7J
MDYlR59Bw0YMt0rjymhrY8SStxAMV49Op5netWMP++Tnz7wUg66BFpzuRB/Hr/7b
jSXO+f3tp2MemeGvEpmsVtttXuQHTd4ymrwcseKw88ygB3IsW9qKwLcoNbfKXFZ3
2Gmg8SkpOnbfstFsrTM8oWTgSHomzYIU+DRoF6vwZ4YsezhSU1V2/jWHaxvCno3N
5nATWyVtofIgobPZXHfGWVhFUCGFaL289N3SaudhQeljhwgPoQQt5o4dB9ypRW5+
TkuOqox/5jQc5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:41:44 2026 by rpki-client