Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: zQSTGL2as7HhYMegnJxShM5JGJ+rAyv5ByEzMk+UVlU=
Subject key identifier: F1:BA:D4:E4:07:B0:9A:D3:21:FA:79:57:32:EC:4B:19:27:E8:69:D4
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019F91DA3D81E86F8DEEF1BBDA88F29B65BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 02:00:26 +0000
Manifest this update: Fri 24 Jul 2026 02:00:26 +0000
Manifest next update: Sat 25 Jul 2026 02:00:26 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: XpDEr1nQCcZqzg+MUUTfwCDaaPwtCv++B75aGLEHmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:3d:81:e8:6f:8d:ee:f1:bb:da:88:f2:9b:65:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Jul 24 02:00:26 2026 GMT
Not After : Jul 25 02:00:26 2026 GMT
Subject: CN=f1bad4e407b09ad321fa795732ec4b1927e869d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:20:40:94:d5:95:34:ab:ca:1e:87:07:b0:
e7:08:d5:c1:9b:10:bc:29:7d:ad:e0:91:86:b4:dd:
ba:35:71:a7:ae:67:fd:1e:9a:96:33:2a:e4:ab:04:
7a:88:d4:c2:e9:2a:57:89:5f:74:e0:16:45:83:71:
8f:a2:c3:4f:9b:c7:d4:6a:a5:ee:b9:0e:6d:89:e7:
71:3a:a2:0c:86:19:df:10:40:b0:c8:f2:f2:5a:a6:
8d:0b:4f:ef:20:f1:be:c9:05:ea:fe:f2:f9:8a:dc:
26:95:d6:a7:4f:d8:81:32:f2:4d:8e:25:9d:ab:30:
94:46:b8:5d:65:1a:ce:90:50:5e:97:b9:82:79:b1:
56:04:32:39:12:9b:e6:06:6d:72:f0:4a:a1:40:90:
86:14:26:1a:d2:4a:8e:bc:0a:b5:b3:d1:02:93:67:
02:c8:16:0b:d2:7b:ce:04:0e:e7:c2:66:4b:b1:d5:
ea:b4:e9:5e:51:6e:bc:11:11:24:87:64:ca:70:20:
9c:92:8a:e1:08:bf:92:f6:00:21:3c:b5:f1:5b:55:
1b:69:f9:84:de:e4:63:c1:2e:78:a0:8c:46:87:11:
c8:4f:27:68:f1:e3:e4:ec:af:06:3c:85:a3:4f:bd:
f7:70:d5:56:d3:cd:92:df:f6:f7:18:fc:45:1c:60:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:D4:E4:07:B0:9A:D3:21:FA:79:57:32:EC:4B:19:27:E8:69:D4
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:21:97:af:74:2e:ee:26:c6:88:2c:a2:ff:f2:e9:e9:ac:c5:
c6:32:10:e9:1f:c5:a7:4a:8b:3d:10:fb:75:c4:c8:81:9a:1e:
83:5e:8c:89:30:eb:d0:88:18:f8:c6:03:8b:09:d7:26:0f:c3:
c2:94:34:a7:8f:b2:62:a1:a8:6f:f9:8d:1f:61:17:4e:01:fa:
f0:d1:8a:d6:ac:8c:c0:fe:2a:f7:51:6b:f3:c3:36:85:76:e9:
1b:af:e7:85:bd:f1:2b:17:01:3b:17:ec:57:81:81:f3:b1:32:
3f:ae:33:30:d4:53:ff:35:65:58:b6:c4:75:13:94:9e:7d:3c:
f4:db:57:cf:11:16:4c:90:dc:1a:cc:44:e5:2d:59:9b:a0:3b:
d2:15:ff:64:dd:90:3c:f2:cb:72:86:30:20:9f:16:9c:87:be:
22:d2:5d:20:51:94:40:43:0e:8e:e5:93:af:0b:a9:20:ac:1f:
8a:e6:ca:86:10:d5:aa:96:74:3a:8c:09:ba:9b:cf:f1:eb:68:
a0:a0:8c:97:08:e8:e1:e6:7a:22:bf:15:fe:98:ce:35:3f:81:
91:62:86:62:e4:9b:6a:32:9b:e3:90:e3:83:79:b4:b1:ec:10:
1e:85:eb:ea:1a:21:34:60:9c:22:7b:ca:80:9f:ac:dc:4e:e4:
0e:c4:db:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2j2B6G+N7vG72ojym2W6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5
ZDhmOTUwHhcNMjYwNzI0MDIwMDI2WhcNMjYwNzI1MDIwMDI2WjAzMTEwLwYDVQQD
EyhmMWJhZDRlNDA3YjA5YWQzMjFmYTc5NTczMmVjNGIxOTI3ZTg2OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs10gQJTVlTSryh6HB7DnCNXBmxC8
KX2t4JGGtN26NXGnrmf9HpqWMyrkqwR6iNTC6SpXiV904BZFg3GPosNPm8fUaqXu
uQ5tiedxOqIMhhnfEECwyPLyWqaNC0/vIPG+yQXq/vL5itwmldanT9iBMvJNjiWd
qzCURrhdZRrOkFBel7mCebFWBDI5EpvmBm1y8EqhQJCGFCYa0kqOvAq1s9ECk2cC
yBYL0nvOBA7nwmZLsdXqtOleUW68EREkh2TKcCCckorhCL+S9gAhPLXxW1UbafmE
3uRjwS54oIxGhxHITydo8ePk7K8GPIWjT733cNVW082S3/b3GPxFHGDZWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG61OQHsJrTIfp5VzLsSxkn6GnUMB8GA1UdIwQY
MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt
MDk4NmQ4YjBjNmQ5LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5
LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiGXr3Qu
7ibGiCyi//Lp6azFxjIQ6R/Fp0qLPRD7dcTIgZoeg16MiTDr0IgY+MYDiwnXJg/D
wpQ0p4+yYqGob/mNH2EXTgH68NGK1qyMwP4q91Fr88M2hXbpG6/nhb3xKxcBOxfs
V4GB87EyP64zMNRT/zVlWLbEdROUnn089NtXzxEWTJDcGsxE5S1Zm6A70hX/ZN2Q
PPLLcoYwIJ8WnIe+ItJdIFGUQEMOjuWTrwupIKwfiubKhhDVqpZ0OowJupvP8eto
oKCMlwjo4eZ6Ir8V/pjONT+BkWKGYuSbajKb45Djg3m0sewQHoXr6hohNGCcInvK
gJ+s3E7kDsTb4g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:24 2026 by rpki-client