Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: 4EjBXXY3NU/dNGwKwEWcPy6R/hUw0hhULfebUMyRO+Y=
Subject key identifier: 31:8B:1C:E5:76:DB:19:8C:EF:8A:4C:43:3A:01:0D:01:D9:6C:C4:66
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 019F8FECA9286AC52A76E28905D436395F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0A09
Signing time: Thu 23 Jul 2026 17:01:19 +0000
Manifest this update: Thu 23 Jul 2026 17:01:19 +0000
Manifest next update: Fri 24 Jul 2026 17:01:19 +0000
Files and hashes: 1: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: 9BUKvLhhhJwQoE64bd1pAGJxFv3xjXIApWSYY4bMdIg=)
2: hhh3z06Bpe2m47ehC44Gk6XsxWY.roa (hash: D+hS8HY9ljD+1P/aopr0G/yuhchBVZY0zZMSPMrBOWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a9:28:6a:c5:2a:76:e2:89:05:d4:36:39:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Jul 23 17:01:19 2026 GMT
Not After : Jul 24 17:01:19 2026 GMT
Subject: CN=318b1ce576db198cef8a4c433a010d01d96cc466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:c4:d3:34:99:d4:48:5e:1f:8a:cd:66:fa:
2d:a6:78:3b:bb:b1:ff:67:46:6c:eb:24:19:16:af:
d7:f3:a1:31:61:4c:89:12:a6:b1:da:be:cb:7a:54:
04:6a:37:c1:0c:3f:47:dd:f7:d7:d4:0e:f8:7d:99:
11:08:3d:c4:fd:64:ae:21:b8:35:d2:d1:1e:c2:84:
b6:fa:8d:8a:62:6e:78:8b:06:91:37:cf:8e:6e:72:
18:8c:ae:42:e4:24:94:2e:de:a0:bf:08:19:d2:a9:
ac:7f:cf:cd:d0:e6:7f:fd:12:00:ae:ea:53:9e:5f:
25:07:30:28:0d:ca:db:4f:41:58:77:4c:79:f4:ad:
f0:9e:34:77:e8:12:75:26:d3:8d:1a:0f:63:5c:32:
0b:d3:fb:7e:4d:63:be:bf:9e:74:b1:c8:36:18:51:
65:d3:d4:cf:6f:5a:73:c6:84:f6:54:79:38:d0:1f:
93:28:2e:05:c4:1c:ad:cb:ed:d8:01:36:f6:72:c6:
b5:7c:fc:29:7b:52:e4:05:09:79:8b:a5:82:69:2e:
9b:5e:7d:4a:08:4e:2f:92:6c:28:7a:97:d3:48:02:
21:7e:8a:54:9f:88:cb:98:ce:cd:80:1a:8a:1a:82:
c8:39:6e:72:6f:3f:86:82:f3:e1:d3:17:fd:5c:7f:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:1C:E5:76:DB:19:8C:EF:8A:4C:43:3A:01:0D:01:D9:6C:C4:66
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:7e:f5:f2:f4:ef:f6:c5:07:9c:e1:fa:b2:cd:d6:5e:39:85:
01:91:0e:18:ad:f0:53:7f:55:19:42:fa:cd:20:5e:de:54:dd:
8c:85:00:c8:02:42:e7:ab:dd:cd:7f:d1:54:ea:1a:a2:75:9b:
a5:75:9a:2f:f2:8b:cd:2d:3e:dc:e4:a7:79:1d:39:66:ec:a4:
ca:d8:0b:32:cf:40:48:2b:d2:64:ab:de:fd:31:40:2b:14:88:
df:17:bf:f6:9d:3e:53:ea:35:e0:5d:b0:61:c2:b3:47:29:98:
65:ae:20:f5:2e:08:b0:bd:c8:f0:d1:ff:c9:57:c6:e7:94:b5:
b8:1f:fc:18:df:30:75:ab:c5:b5:9f:e2:a3:58:0e:2f:10:42:
74:f9:84:db:09:68:da:f0:3a:69:cd:d7:3f:e6:fa:af:66:11:
ab:66:a4:d0:5f:ec:c9:24:fe:eb:65:c3:78:d1:c8:5b:8f:f9:
b8:3a:34:36:fd:83:4e:b2:91:b5:b3:fa:83:39:72:d4:95:63:
77:c5:1b:de:ae:fe:b8:46:f3:78:ab:46:7e:e7:82:ae:aa:e3:
33:cf:a1:01:f6:87:19:77:b9:bd:be:8d:2d:08:56:15:9c:0d:
5c:a7:3c:c9:6f:fc:09:49:d1:37:44:29:cc:3e:f7:a5:a6:99:
fe:be:e7:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7KkoasUqduKJBdQ2OV9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNzBjZTdhNGU2ZTRhYjNhNGVhOWYwODFmNTkyZWE1ZjZk
MmI5YWEwHhcNMjYwNzIzMTcwMTE5WhcNMjYwNzI0MTcwMTE5WjAzMTEwLwYDVQQD
EygzMThiMWNlNTc2ZGIxOThjZWY4YTRjNDMzYTAxMGQwMWQ5NmNjNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMHE0zSZ1EheH4rNZvotpng7u7H/
Z0Zs6yQZFq/X86ExYUyJEqax2r7LelQEajfBDD9H3ffX1A74fZkRCD3E/WSuIbg1
0tEewoS2+o2KYm54iwaRN8+ObnIYjK5C5CSULt6gvwgZ0qmsf8/N0OZ//RIArupT
nl8lBzAoDcrbT0FYd0x59K3wnjR36BJ1JtONGg9jXDIL0/t+TWO+v550scg2GFFl
09TPb1pzxoT2VHk40B+TKC4FxByty+3YATb2csa1fPwpe1LkBQl5i6WCaS6bXn1K
CE4vkmwoepfTSAIhfopUn4jLmM7NgBqKGoLIOW5ybz+GgvPh0xf9XH/YowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGLHOV22xmM74pMQzoBDQHZbMRmMB8GA1UdIwQY
MBaAFNtwznpObkqzpOqfCB9ZLqX20rmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ZGE2MDEtNjM1ZS00ZDA3LTgwOTYt
MmNiMTdiN2JjNjE4LzEvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85ZGE2MDEtNjM1ZS00ZDA3LTgwOTYtMmNiMTdiN2JjNjE4
LzEvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3718vTv
9sUHnOH6ss3WXjmFAZEOGK3wU39VGUL6zSBe3lTdjIUAyAJC56vdzX/RVOoaonWb
pXWaL/KLzS0+3OSneR05ZuykytgLMs9ASCvSZKve/TFAKxSI3xe/9p0+U+o14F2w
YcKzRymYZa4g9S4IsL3I8NH/yVfG55S1uB/8GN8wdavFtZ/io1gOLxBCdPmE2wlo
2vA6ac3XP+b6r2YRq2ak0F/syST+62XDeNHIW4/5uDo0Nv2DTrKRtbP6gzly1JVj
d8Ub3q7+uEbzeKtGfueCrqrjM8+hAfaHGXe5vb6NLQhWFZwNXKc8yW/8CUnRN0Qp
zD73paaZ/r7n5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:04 2026 by rpki-client