Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: 37rmytczLZ1vmbUZLZWcDcwUWLPprzKbtEDsRfjcUPY=
Subject key identifier: AC:04:26:B3:C6:19:C6:7A:1C:DC:21:5B:66:18:4B:DD:9F:9B:92:20
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019F9248F813E360CF82BBF4CDF5BBE8C277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 122E
Signing time: Fri 24 Jul 2026 04:01:23 +0000
Manifest this update: Fri 24 Jul 2026 04:01:23 +0000
Manifest next update: Sat 25 Jul 2026 04:01:23 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: Kqr0dcXYgXbcHyNlkuJKi4bCG2yfPnJ80gHGjy5T7Mo=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f8:13:e3:60:cf:82:bb:f4:cd:f5:bb:e8:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jul 24 04:01:23 2026 GMT
Not After : Jul 25 04:01:23 2026 GMT
Subject: CN=ac0426b3c619c67a1cdc215b66184bdd9f9b9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:ed:bb:25:73:5d:76:db:0b:84:38:e7:2e:
b4:48:39:52:35:58:0d:90:84:19:6c:3d:80:d0:22:
72:4f:b5:d1:64:40:c8:82:7b:21:6b:89:17:26:92:
15:18:c3:9f:ed:d2:ce:f5:72:fe:39:be:c9:6d:bd:
72:ed:c4:be:8a:05:53:32:58:72:a5:6f:28:65:44:
cd:94:b9:10:52:3b:45:a4:d0:dc:3f:80:4d:42:8a:
f1:02:6f:db:2d:b6:55:36:2e:ef:e3:55:ef:dd:7e:
08:8d:7d:d5:18:6e:2b:ff:38:52:8e:d8:b0:78:e7:
da:d1:5c:86:8e:9d:4f:ca:f7:a3:47:08:b8:96:f4:
0f:41:0e:26:c1:a5:64:dc:f9:2d:b1:ba:65:f4:cd:
89:44:e5:b2:44:74:16:5a:6a:69:3f:36:a1:a7:9b:
76:19:66:e4:3e:82:0b:23:f2:70:c5:9e:42:96:03:
00:58:bf:d1:bf:15:22:f5:77:7a:b4:21:23:7c:fa:
1a:02:e4:e7:34:1d:ce:d8:73:bd:0d:08:8a:50:45:
95:85:a8:3e:ad:8c:ff:69:87:f8:22:5e:bb:12:c8:
1a:fb:40:20:01:8d:3b:2b:31:77:7c:d5:f1:c4:51:
d9:5e:ae:b3:92:ef:da:a3:94:6d:86:59:84:4f:56:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:26:B3:C6:19:C6:7A:1C:DC:21:5B:66:18:4B:DD:9F:9B:92:20
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:37:9f:b9:a6:29:d8:87:6b:23:2b:77:7b:b1:e0:8c:59:8e:
8b:b8:3d:04:4e:57:a8:a5:91:2a:76:9b:1c:ff:37:4b:57:86:
ae:5e:c5:3d:f0:03:ae:39:b3:12:3c:0a:cd:e3:64:f8:a5:b4:
c4:e1:ea:fa:52:5a:82:00:5a:36:d4:6e:d2:36:75:71:6a:38:
96:b6:73:09:b7:ec:b0:19:d6:02:c1:db:84:2f:a1:14:8c:2c:
cf:00:50:04:ee:91:98:9b:48:f6:c5:c1:28:df:49:5c:39:6b:
1b:ad:0b:09:ea:a2:da:0c:4f:64:97:40:11:b9:b5:6c:38:be:
44:01:e0:57:9d:8e:32:57:c3:7a:4e:a2:28:02:4c:59:ea:f6:
29:31:14:26:35:5e:30:87:b9:34:b7:d0:b6:fe:3a:06:09:a4:
0d:cb:c1:49:c1:e0:03:06:55:e2:20:bb:c8:dd:d0:e6:d0:34:
16:d8:73:79:0d:7e:f2:54:54:76:89:d0:ed:dc:88:18:e7:0e:
e1:14:8a:3a:f4:4e:a6:85:b2:69:5a:95:0c:f8:14:d4:1c:9c:
58:bc:9b:df:df:1e:cd:06:8c:98:61:54:84:ac:76:cf:eb:69:
de:23:cc:9c:1e:22:1b:99:ab:8e:15:5b:e4:05:84:85:32:3b:
9a:31:39:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSPgT42DPgrv0zfW76MJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw
MjEzYTkwHhcNMjYwNzI0MDQwMTIzWhcNMjYwNzI1MDQwMTIzWjAzMTEwLwYDVQQD
EyhhYzA0MjZiM2M2MTljNjdhMWNkYzIxNWI2NjE4NGJkZDlmOWI5MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y3tuyVzXXbbC4Q45y60SDlSNVgN
kIQZbD2A0CJyT7XRZEDIgnsha4kXJpIVGMOf7dLO9XL+Ob7Jbb1y7cS+igVTMlhy
pW8oZUTNlLkQUjtFpNDcP4BNQorxAm/bLbZVNi7v41Xv3X4IjX3VGG4r/zhSjtiw
eOfa0VyGjp1PyvejRwi4lvQPQQ4mwaVk3Pktsbpl9M2JROWyRHQWWmppPzahp5t2
GWbkPoILI/JwxZ5ClgMAWL/RvxUi9Xd6tCEjfPoaAuTnNB3O2HO9DQiKUEWVhag+
rYz/aYf4Il67Esga+0AgAY07KzF3fNXxxFHZXq6zku/ao5RthlmET1asGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwEJrPGGcZ6HNwhW2YYS92fm5IgMB8GA1UdIwQY
MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt
NGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5
LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDefuaYp
2IdrIyt3e7HgjFmOi7g9BE5XqKWRKnabHP83S1eGrl7FPfADrjmzEjwKzeNk+KW0
xOHq+lJaggBaNtRu0jZ1cWo4lrZzCbfssBnWAsHbhC+hFIwszwBQBO6RmJtI9sXB
KN9JXDlrG60LCeqi2gxPZJdAEbm1bDi+RAHgV52OMlfDek6iKAJMWer2KTEUJjVe
MIe5NLfQtv46BgmkDcvBScHgAwZV4iC7yN3Q5tA0FthzeQ1+8lRUdonQ7dyIGOcO
4RSKOvROpoWyaVqVDPgU1BycWLyb398ezQaMmGFUhKx2z+tp3iPMnB4iG5mrjhVb
5AWEhTI7mjE5Kw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:54 2026 by rpki-client