Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: U/WS6Wfkv3KZkjt1kv0OrEsheYlleOp7FDcxwD8nm14=
Subject key identifier: 90:EF:E1:48:0C:67:53:D4:B2:CE:6C:F4:8B:E9:52:75:FB:19:E0:54
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019F8F7F8A04D4A4FBA9797A8F7630ABE82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 15:02:07 +0000
Manifest this update: Thu 23 Jul 2026 15:02:07 +0000
Manifest next update: Fri 24 Jul 2026 15:02:07 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: VuTjUZiEqpFYsgzcPJR5QsxcPWD3IRzFR4rbexrvt1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:8a:04:d4:a4:fb:a9:79:7a:8f:76:30:ab:e8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jul 23 15:02:07 2026 GMT
Not After : Jul 24 15:02:07 2026 GMT
Subject: CN=90efe1480c6753d4b2ce6cf48be95275fb19e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:97:73:c7:f7:9d:a3:7f:fd:d7:f9:37:f4:
86:ef:22:90:3e:f6:83:8c:8c:61:e3:56:83:ab:2a:
ea:62:91:fd:fc:1c:cf:22:4c:f8:ad:af:0d:4f:da:
91:93:ef:8c:4b:a4:af:ac:8f:52:f2:8e:89:9e:a0:
00:22:e7:6d:2f:12:f3:6d:7a:06:41:ed:8f:95:f8:
09:9a:3d:03:eb:d2:a3:93:6e:b5:85:de:7d:3b:20:
c4:3a:20:e7:ea:ec:59:74:a7:22:d4:a5:0c:ed:89:
a0:45:c0:a8:3d:fe:83:c9:67:45:09:32:be:4f:3a:
3f:1e:4c:c1:16:32:25:fa:91:c4:59:4b:20:8f:28:
fb:05:7a:e8:22:b1:6b:a2:5e:10:ee:0c:c9:5c:a5:
d3:e0:59:a4:5b:e5:13:4d:64:57:49:72:2a:d5:f3:
a4:8b:8d:68:bc:54:2a:9d:70:07:0d:52:1e:5a:87:
81:b6:28:cb:a9:9b:24:11:53:07:e4:2c:00:47:20:
e1:ec:5a:9b:7a:05:df:0d:2f:ad:a1:0a:ed:54:41:
74:f7:77:1b:37:01:31:b4:be:9e:5e:1b:a5:c5:27:
9c:fa:5b:28:ea:a9:15:2d:a7:7b:d3:96:d7:b8:17:
37:2e:44:4a:17:03:33:25:59:80:49:fe:55:ad:f1:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:E1:48:0C:67:53:D4:B2:CE:6C:F4:8B:E9:52:75:FB:19:E0:54
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a9:cc:3e:d4:a3:3c:19:d2:2a:d3:45:72:f7:f1:a3:37:ab:
21:53:5c:81:20:e7:b4:17:b1:b8:4f:2a:c4:3b:17:e3:1d:fe:
5f:4d:9b:7a:33:b4:11:e5:90:f2:b6:7a:00:66:b2:17:d1:bd:
eb:2d:44:4c:09:57:0e:a4:fd:42:65:af:7a:1b:7a:a3:6c:12:
9a:4f:9d:11:c5:9e:d5:ab:52:ae:a0:ab:1d:0d:71:23:40:d3:
b5:f2:90:82:e7:85:90:94:5b:23:ba:5c:21:72:63:09:ac:7e:
97:1b:ea:a1:b6:6f:9f:4c:f1:fc:c9:6d:27:4e:19:b4:ab:a5:
9a:f4:60:5e:d0:74:b4:e9:9e:06:47:62:11:58:26:7b:03:bf:
16:a3:61:f1:8f:87:34:e4:cf:d4:17:9e:1f:44:c9:a7:f0:69:
d0:82:76:b6:5a:74:2f:07:94:2e:ba:33:20:81:88:9b:51:30:
0a:8b:02:25:66:fa:b2:41:31:79:72:0b:c6:76:a1:53:c6:72:
da:a5:04:62:32:50:ee:39:8c:81:8e:92:d1:fc:33:77:4e:77:
89:92:cd:ea:d1:00:e9:e2:03:6b:a4:0b:7c:ff:f5:49:43:d6:
34:67:3d:22:fa:70:25:0b:9e:05:ef:eb:a7:33:d2:66:49:c2:
64:3e:a5:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf4oE1KT7qXl6j3Ywq+gqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4
YTlmZGMwHhcNMjYwNzIzMTUwMjA3WhcNMjYwNzI0MTUwMjA3WjAzMTEwLwYDVQQD
Eyg5MGVmZTE0ODBjNjc1M2Q0YjJjZTZjZjQ4YmU5NTI3NWZiMTllMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCXc8f3naN//df5N/SG7yKQPvaD
jIxh41aDqyrqYpH9/BzPIkz4ra8NT9qRk++MS6SvrI9S8o6JnqAAIudtLxLzbXoG
Qe2PlfgJmj0D69Kjk261hd59OyDEOiDn6uxZdKci1KUM7YmgRcCoPf6DyWdFCTK+
Tzo/HkzBFjIl+pHEWUsgjyj7BXroIrFrol4Q7gzJXKXT4FmkW+UTTWRXSXIq1fOk
i41ovFQqnXAHDVIeWoeBtijLqZskEVMH5CwARyDh7FqbegXfDS+toQrtVEF093cb
NwExtL6eXhulxSec+lso6qkVLad705bXuBc3LkRKFwMzJVmASf5VrfEkbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDv4UgMZ1PUss5s9IvpUnX7GeBUMB8GA1UdIwQY
MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt
N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm
LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKnMPtSj
PBnSKtNFcvfxozerIVNcgSDntBexuE8qxDsX4x3+X02bejO0EeWQ8rZ6AGayF9G9
6y1ETAlXDqT9QmWveht6o2wSmk+dEcWe1atSrqCrHQ1xI0DTtfKQgueFkJRbI7pc
IXJjCax+lxvqobZvn0zx/MltJ04ZtKulmvRgXtB0tOmeBkdiEVgmewO/FqNh8Y+H
NOTP1BeeH0TJp/Bp0IJ2tlp0LweULrozIIGIm1EwCosCJWb6skExeXILxnahU8Zy
2qUEYjJQ7jmMgY6S0fwzd053iZLN6tEA6eIDa6QLfP/1SUPWNGc9IvpwJQueBe/r
pzPSZknCZD6lGA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:17 2026 by rpki-client