Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: 7xR54i5cmV84dxsfNT6z7/suFc7CjVjzmzvcoUJeAF4=
Subject key identifier: 75:9D:7F:13:6E:A2:C1:69:DD:70:A4:2D:7D:97:90:25:71:12:AB:3D
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019F8FEC37F85E835F3F779D25F5BC3E0143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 17:00:50 +0000
Manifest this update: Thu 23 Jul 2026 17:00:50 +0000
Manifest next update: Fri 24 Jul 2026 17:00:50 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: cvx1TttRGO0k48Qx8FJt7z/yTX9lEXp4TAJcI3eaBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:37:f8:5e:83:5f:3f:77:9d:25:f5:bc:3e:01:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jul 23 17:00:50 2026 GMT
Not After : Jul 24 17:00:50 2026 GMT
Subject: CN=759d7f136ea2c169dd70a42d7d9790257112ab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:bf:45:3f:d3:97:7e:dd:dd:70:e4:dc:1a:
b1:63:2f:eb:cc:8b:41:57:1e:5a:bd:7b:ac:c3:06:
11:87:2c:6d:ac:43:f8:48:2d:c4:48:b5:f7:cf:33:
a2:d9:ca:64:3f:8b:84:f8:97:05:69:ff:43:3b:91:
9d:5b:83:63:cb:31:22:3f:a5:ba:03:83:75:d0:2b:
be:73:15:43:95:9c:28:0f:02:b9:24:8a:45:f5:2c:
8f:a6:82:76:45:87:65:0f:44:32:9e:56:51:5d:99:
b2:ed:28:2f:94:25:37:7b:d5:4b:31:1f:12:cf:ba:
ed:b6:10:75:de:d9:81:1f:8e:74:ed:9f:9b:92:88:
85:fc:04:5c:2d:e4:c7:0a:4a:74:7a:23:f8:96:4e:
2c:7e:79:6f:25:9f:29:48:57:4e:66:85:e8:fb:16:
21:c5:d1:45:3b:00:8a:f0:0e:87:60:44:a2:da:a5:
69:75:c2:57:79:be:7e:15:62:88:49:df:19:ba:83:
e1:b0:4c:05:85:92:69:84:c7:1c:1b:05:15:90:82:
4d:62:57:6a:cf:83:fa:6f:51:95:f0:99:5f:b7:3b:
d7:d0:40:fd:14:19:2b:9a:18:a0:95:52:09:f0:cd:
b3:48:37:b5:4c:ad:7f:d4:10:9f:8c:d8:3c:96:2f:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:7F:13:6E:A2:C1:69:DD:70:A4:2D:7D:97:90:25:71:12:AB:3D
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a9:4c:9f:fc:19:51:df:e0:b3:62:13:d2:5c:99:bf:47:12:
1c:82:81:66:fb:93:d5:bd:8b:35:30:63:7d:ac:04:1c:1e:9c:
a0:e9:e9:79:2c:1d:85:01:3d:8a:86:bc:44:1c:d5:43:0a:97:
6d:60:a4:d0:c1:01:de:a4:12:e8:93:7c:34:9a:8a:cc:f3:96:
75:ee:7f:c7:05:a9:ab:63:3c:eb:95:b9:f1:d2:ba:87:7c:2a:
4b:e4:43:22:d3:ad:e6:24:51:15:09:49:f6:0b:cd:1b:d7:3b:
11:4d:96:a4:c1:72:ff:3d:38:03:64:91:91:40:4c:50:6a:ae:
8e:59:77:e8:40:13:8c:67:09:81:67:a7:a4:5d:e6:fd:46:ce:
8f:ff:27:8f:f7:1a:38:64:c9:6f:57:ee:9b:7e:64:7a:f9:df:
97:13:e3:af:36:02:b4:12:65:e5:ed:44:63:7c:84:50:35:7c:
67:3d:4c:a4:d3:e1:45:bd:dd:78:3c:c7:be:4e:43:de:a7:48:
3a:10:b0:d6:08:16:a5:4e:8e:7e:d9:17:73:9e:da:a6:a6:8f:
36:c4:04:1a:e4:f2:32:ae:ef:3f:03:03:88:27:08:a5:9c:d1:
1f:0e:a4:44:62:9c:3e:26:e5:72:66:96:cf:12:88:8a:b2:75:
1d:53:92:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7Df4XoNfP3edJfW8PgFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1
ODdlY2MwHhcNMjYwNzIzMTcwMDUwWhcNMjYwNzI0MTcwMDUwWjAzMTEwLwYDVQQD
Eyg3NTlkN2YxMzZlYTJjMTY5ZGQ3MGE0MmQ3ZDk3OTAyNTcxMTJhYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJi/RT/Tl37d3XDk3BqxYy/rzItB
Vx5avXuswwYRhyxtrEP4SC3ESLX3zzOi2cpkP4uE+JcFaf9DO5GdW4NjyzEiP6W6
A4N10Cu+cxVDlZwoDwK5JIpF9SyPpoJ2RYdlD0QynlZRXZmy7SgvlCU3e9VLMR8S
z7rtthB13tmBH4507Z+bkoiF/ARcLeTHCkp0eiP4lk4sfnlvJZ8pSFdOZoXo+xYh
xdFFOwCK8A6HYESi2qVpdcJXeb5+FWKISd8ZuoPhsEwFhZJphMccGwUVkIJNYldq
z4P6b1GV8JlftzvX0ED9FBkrmhiglVIJ8M2zSDe1TK1/1BCfjNg8li+R9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWdfxNuosFp3XCkLX2XkCVxEqs9MB8GA1UdIwQY
MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt
MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3
LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqlMn/wZ
Ud/gs2IT0lyZv0cSHIKBZvuT1b2LNTBjfawEHB6coOnpeSwdhQE9ioa8RBzVQwqX
bWCk0MEB3qQS6JN8NJqKzPOWde5/xwWpq2M865W58dK6h3wqS+RDItOt5iRRFQlJ
9gvNG9c7EU2WpMFy/z04A2SRkUBMUGqujll36EATjGcJgWenpF3m/UbOj/8nj/ca
OGTJb1fum35kevnflxPjrzYCtBJl5e1EY3yEUDV8Zz1MpNPhRb3deDzHvk5D3qdI
OhCw1ggWpU6OftkXc57apqaPNsQEGuTyMq7vPwMDiCcIpZzRHw6kRGKcPiblcmaW
zxKIirJ1HVOSRg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:41 2026 by rpki-client