Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: rdkDYg54HRLeYA99WOgvjj3AaqH+hvkYgSZ34jjierw=
Subject key identifier: 05:8F:1D:D7:21:98:EB:D2:D1:45:A0:E3:AE:67:D2:16:52:B2:78:02
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019F9211A7C12A9A85456041832FACF5F3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: pUQ+6N33VuVdaGjiIRx3NzPBmWrJAJBOdxl1eHDVgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a7:c1:2a:9a:85:45:60:41:83:2f:ac:f5:f3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=058f1dd72198ebd2d145a0e3ae67d21652b27802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:59:dc:36:ea:b2:a0:1a:6c:f5:0d:8a:7a:
3c:1b:41:6e:23:f2:7a:05:b1:9a:f1:8a:65:24:0e:
d8:e8:c2:36:b1:e1:a2:b2:d5:6f:a8:90:63:9c:8c:
b0:35:93:53:d6:7b:26:bf:d3:0c:54:a9:78:9d:0d:
dd:27:92:a1:9e:76:3d:6b:e6:7d:51:46:23:a0:bd:
22:06:9f:5f:f2:70:42:b5:f9:d6:c6:42:b7:c6:25:
36:22:f9:e5:73:ce:d9:87:8d:d1:92:c1:97:08:f3:
1a:f4:2b:a0:67:68:85:90:63:2e:50:c6:07:cb:de:
23:62:df:ba:46:10:7e:45:eb:31:b8:8b:c5:0c:06:
8b:90:f7:2a:87:b3:0c:d6:5f:a5:61:27:ce:83:87:
4f:a0:94:ad:20:22:03:53:dc:e5:c3:58:c5:16:9c:
77:e9:9f:e1:c5:df:d1:cf:3f:01:71:22:c4:fd:c2:
f5:bc:3e:ae:b9:45:ce:07:29:31:c5:f7:1e:c6:f6:
df:1b:f4:0d:c1:91:d1:86:93:0d:84:ed:c1:72:de:
7b:ef:98:44:98:56:62:31:44:39:cc:3a:a2:02:95:
56:36:a8:45:0e:b6:34:0e:c7:23:98:48:4f:07:56:
2f:7b:70:66:e0:b7:a3:f5:33:1a:06:5a:72:66:cb:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8F:1D:D7:21:98:EB:D2:D1:45:A0:E3:AE:67:D2:16:52:B2:78:02
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:db:79:d8:2d:51:57:3d:0b:bb:68:fb:a9:6d:cc:fb:9a:c5:
8c:1d:e5:35:18:85:b1:b5:13:87:7b:c0:6b:49:8b:38:2f:ec:
d2:6b:b4:f6:c9:40:94:fd:49:ff:c1:8f:e5:c3:47:87:8d:f8:
9c:bc:a0:92:40:3a:b5:26:2d:b8:50:52:c6:eb:cb:f0:8f:1d:
b3:c8:16:9a:5e:e5:01:70:16:ca:0f:11:4a:8e:60:1a:bc:ca:
72:94:8f:52:37:53:7e:86:66:1c:8b:2a:c3:28:01:92:fb:f5:
a5:31:7d:5d:f0:d7:df:f0:35:2e:69:c8:bc:a6:ff:3c:08:b9:
9d:52:3d:80:af:25:bf:e6:25:00:e3:dc:63:14:53:bc:e5:3f:
8b:47:2e:7e:a9:85:9b:fe:47:46:bf:66:78:1e:e7:18:73:a1:
88:82:d2:47:b2:66:ad:8d:ff:6e:e2:f5:08:19:b5:2b:6c:dd:
ea:8d:a8:e1:e1:36:a2:09:07:8a:c8:a0:9a:24:1b:2f:f9:a5:
5a:61:5a:1a:88:bc:30:64:ab:96:0d:5d:3a:3b:e7:fc:9d:6b:
83:67:d8:76:df:98:4a:95:88:da:40:5c:09:4a:c7:82:c1:29:
f5:9c:93:9a:bc:19:1b:cd:48:b7:91:3e:bf:b1:24:33:7d:76:
85:87:16:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEafBKpqFRWBBgy+s9fPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1
NzA3ZGYwHhcNMjYwNzI0MDMwMDU4WhcNMjYwNzI1MDMwMDU4WjAzMTEwLwYDVQQD
EygwNThmMWRkNzIxOThlYmQyZDE0NWEwZTNhZTY3ZDIxNjUyYjI3ODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRJZ3DbqsqAabPUNino8G0FuI/J6
BbGa8YplJA7Y6MI2seGistVvqJBjnIywNZNT1nsmv9MMVKl4nQ3dJ5KhnnY9a+Z9
UUYjoL0iBp9f8nBCtfnWxkK3xiU2Ivnlc87Zh43RksGXCPMa9CugZ2iFkGMuUMYH
y94jYt+6RhB+ResxuIvFDAaLkPcqh7MM1l+lYSfOg4dPoJStICIDU9zlw1jFFpx3
6Z/hxd/Rzz8BcSLE/cL1vD6uuUXOBykxxfcexvbfG/QNwZHRhpMNhO3Bct5775hE
mFZiMUQ5zDqiApVWNqhFDrY0DscjmEhPB1Yve3Bm4Lej9TMaBlpyZsu6iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWPHdchmOvS0UWg465n0hZSsngCMB8GA1UdIwQY
MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt
OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj
LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtt52C1R
Vz0Lu2j7qW3M+5rFjB3lNRiFsbUTh3vAa0mLOC/s0mu09slAlP1J/8GP5cNHh434
nLygkkA6tSYtuFBSxuvL8I8ds8gWml7lAXAWyg8RSo5gGrzKcpSPUjdTfoZmHIsq
wygBkvv1pTF9XfDX3/A1LmnIvKb/PAi5nVI9gK8lv+YlAOPcYxRTvOU/i0cufqmF
m/5HRr9meB7nGHOhiILSR7JmrY3/buL1CBm1K2zd6o2o4eE2ogkHisigmiQbL/ml
WmFaGoi8MGSrlg1dOjvn/J1rg2fYdt+YSpWI2kBcCUrHgsEp9ZyTmrwZG81It5E+
v7EkM312hYcWXA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:40 2026 by rpki-client