Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: gs0KWKwqBu/KifK6JwJncPIqWisHgqH78BipKvBGtRM=
Subject key identifier: 95:A5:BC:5B:16:81:41:67:91:7D:CC:ED:CE:16:FF:33:C2:CD:5B:46
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019F927F51290E0B956C75E443BDB7ACA815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 128D
Signing time: Fri 24 Jul 2026 05:00:45 +0000
Manifest this update: Fri 24 Jul 2026 05:00:45 +0000
Manifest next update: Sat 25 Jul 2026 05:00:45 +0000
Files and hashes: 1: E1QbVJAayOHXybvvykh2_z_eoYk.roa (hash: Ne00sRp1K+wq4QIkqT2qcjKHyHlHGzP3FNyY8RockCE=)
2: JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa (hash: 9Mf/IBP/vEnvOsH8GvnEXV1QapAzMWJM6lph3xsak/E=)
3: Ov83ySv3sFV7M88SSWflw9--a-0.roa (hash: SVhdkcQVattKFVMXSZeL1xJo615LAy5BBiDbcYL9ck8=)
4: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
5: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
6: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: xcVAHE3woSKUpOW/38K72EjDa6auUr0sajoZtwNWTjM=)
7: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:51:29:0e:0b:95:6c:75:e4:43:bd:b7:ac:a8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jul 24 05:00:45 2026 GMT
Not After : Jul 25 05:00:45 2026 GMT
Subject: CN=95a5bc5b16814167917dccedce16ff33c2cd5b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:db:b1:e2:ba:9f:7d:8f:a1:3f:83:f5:63:
34:ad:fe:a9:b8:21:a0:fd:02:a7:4b:59:47:66:5f:
a4:d4:b1:51:64:54:1e:5f:04:7e:fb:11:ad:08:54:
3a:2b:53:b4:74:29:2f:c7:c1:2b:7a:5d:e2:92:84:
b3:0e:e2:54:dc:1b:c3:8f:bd:de:e3:09:60:58:d6:
b5:a5:dd:cf:27:8d:15:ca:f8:2c:85:e2:f3:27:e0:
77:fb:44:55:2e:90:23:fa:f5:00:97:c7:9b:dc:87:
eb:e1:83:62:36:a3:ad:77:0a:c7:67:63:79:0e:1d:
31:94:21:e2:3a:8d:b1:83:44:a0:d3:7f:af:02:a5:
f8:4f:9d:00:2d:82:74:f4:e5:98:70:af:63:ed:32:
d3:d4:55:e5:13:bc:eb:d6:52:49:75:47:e8:60:98:
df:0c:5e:8b:5e:ab:a6:00:4d:46:65:0b:bb:86:2b:
6b:f9:8d:8f:7b:92:d1:ce:da:9c:a0:a5:a9:4d:6d:
c2:0d:52:07:92:d1:93:ec:95:94:d3:04:a2:43:fd:
be:15:8a:b9:ce:a0:41:cd:02:84:73:bb:ca:ae:c9:
9d:95:e2:fb:66:af:cd:1b:d0:aa:d6:94:ce:e3:71:
6d:86:c8:4d:2e:38:07:c7:70:f3:52:a2:5a:0d:3e:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:BC:5B:16:81:41:67:91:7D:CC:ED:CE:16:FF:33:C2:CD:5B:46
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:b2:a3:ec:82:0e:a0:a0:f5:35:72:60:81:e9:78:c4:41:
ab:ce:16:bb:d8:ad:5e:08:21:be:d9:32:94:f0:b4:f4:e9:8a:
1b:f1:b3:be:1d:65:46:9f:3a:64:95:26:05:8d:56:dd:29:4a:
c7:25:cb:a1:a5:74:92:ea:e7:65:91:cc:b5:68:e6:a3:54:4d:
c7:d4:8e:19:20:36:69:d5:3a:84:52:5b:25:29:32:6e:eb:c3:
fb:07:b5:28:28:59:7c:9f:89:5b:c7:58:d6:ab:09:12:fc:0d:
bf:f2:26:9a:0b:ad:74:f7:82:63:33:00:56:93:06:1a:1e:11:
97:08:2d:cb:ba:2f:5c:72:a7:d0:8e:72:39:91:07:e6:21:4d:
9f:95:e9:62:7f:16:af:d8:2c:47:39:31:cf:b4:2c:6a:4a:87:
c5:69:e1:9a:e7:0a:f0:26:83:db:e3:6b:a2:82:ca:2d:3b:1b:
dc:66:2a:ed:d2:cf:a5:ce:13:e5:07:6f:ff:72:67:90:7e:33:
6f:b2:62:f6:b9:4e:af:bc:b2:41:e7:cb:ea:b5:f3:af:90:27:
ca:fb:62:a0:da:20:85:18:66:f6:49:28:85:43:9f:5e:fc:93:
e8:6e:3b:7d:68:89:43:c1:ab:c8:cc:43:5a:17:f3:12:cc:ac:
2c:76:ca:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf1EpDguVbHXkQ723rKgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGY3ZjViNjYxOGJkYTIzYzgzYmVkMTFiNDQyMDQxZjFm
YjQ1NmQwHhcNMjYwNzI0MDUwMDQ1WhcNMjYwNzI1MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg5NWE1YmM1YjE2ODE0MTY3OTE3ZGNjZWRjZTE2ZmYzM2MyY2Q1YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSvbseK6n32PoT+D9WM0rf6puCGg
/QKnS1lHZl+k1LFRZFQeXwR++xGtCFQ6K1O0dCkvx8Erel3ikoSzDuJU3BvDj73e
4wlgWNa1pd3PJ40VyvgsheLzJ+B3+0RVLpAj+vUAl8eb3Ifr4YNiNqOtdwrHZ2N5
Dh0xlCHiOo2xg0Sg03+vAqX4T50ALYJ09OWYcK9j7TLT1FXlE7zr1lJJdUfoYJjf
DF6LXqumAE1GZQu7hitr+Y2Pe5LRztqcoKWpTW3CDVIHktGT7JWU0wSiQ/2+FYq5
zqBBzQKEc7vKrsmdleL7Zq/NG9Cq1pTO43FthshNLjgHx3DzUqJaDT4f4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWlvFsWgUFnkX3M7c4W/zPCzVtGMB8GA1UdIwQY
MBaAFKDff1tmGL2iPIO+0RtEIEHx+0VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEt
NWY0YmM5MDBjMDNkLzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEtNWY0YmM5MDBjMDNk
LzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc96yo+yC
DqCg9TVyYIHpeMRBq84Wu9itXgghvtkylPC09OmKG/Gzvh1lRp86ZJUmBY1W3SlK
xyXLoaV0kurnZZHMtWjmo1RNx9SOGSA2adU6hFJbJSkybuvD+we1KChZfJ+JW8dY
1qsJEvwNv/ImmgutdPeCYzMAVpMGGh4Rlwgty7ovXHKn0I5yOZEH5iFNn5XpYn8W
r9gsRzkxz7QsakqHxWnhmucK8CaD2+NrooLKLTsb3GYq7dLPpc4T5Qdv/3JnkH4z
b7Ji9rlOr7yyQefL6rXzr5AnyvtioNoghRhm9kkohUOfXvyT6G47fWiJQ8GryMxD
WhfzEsysLHbKOQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:09 2026 by rpki-client