Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: WdPJs//uQVAb0e8kDYOKbyVD+YzzrKc47VVkiE0h0Z0=
Subject key identifier: F9:45:EF:B5:29:94:74:CF:36:EC:9D:EE:7C:7E:AC:88:2B:97:0F:40
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019F94002B00182E1B5579201508A5F6BE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 0820
Signing time: Fri 24 Jul 2026 12:01:06 +0000
Manifest this update: Fri 24 Jul 2026 12:01:06 +0000
Manifest next update: Sat 25 Jul 2026 12:01:06 +0000
Files and hashes: 1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: SPpS7EK87iaTKtiKeOi5lf4DR8rsuesp0f3l+srUeOg=)
3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:2b:00:18:2e:1b:55:79:20:15:08:a5:f6:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jul 24 12:01:06 2026 GMT
Not After : Jul 25 12:01:06 2026 GMT
Subject: CN=f945efb5299474cf36ec9dee7c7eac882b970f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:f8:b5:ee:b2:06:62:fd:87:99:20:82:bc:
52:43:9f:0a:6b:b4:c3:24:e8:b2:3b:9a:e0:05:42:
27:b8:81:f9:b0:de:72:14:ad:21:32:61:3a:8c:4c:
3e:29:a3:96:b9:6d:0b:f0:de:ff:6a:ec:59:2c:07:
84:d0:df:bc:8a:0a:21:5f:2e:3b:09:96:f7:89:53:
80:0b:b9:1b:d9:10:64:b2:71:80:26:77:ad:88:5b:
0d:1e:9f:d0:6f:e3:04:dd:df:fa:57:ed:16:50:66:
8d:95:20:64:49:c5:83:7c:18:7a:2a:c2:65:cc:29:
49:fd:98:9e:cf:58:13:eb:0d:b0:ab:c2:94:d9:82:
a6:36:72:be:e6:4f:7f:89:9e:94:72:c0:6f:74:c9:
44:2a:89:1b:96:82:55:de:18:73:c4:c0:2b:92:aa:
c3:ff:96:d2:80:fb:46:34:c6:77:1a:42:af:ac:a6:
58:78:e3:50:27:bd:dc:aa:c7:e3:3a:89:a1:96:c4:
15:29:21:ac:da:e0:e9:dc:80:ff:65:10:06:a5:74:
f2:44:cb:45:d6:aa:2e:5f:b3:a1:f5:e4:e1:94:97:
94:4f:d7:08:6e:40:f8:22:56:77:e8:01:2b:2d:86:
6a:12:9b:ec:0a:4d:8a:69:ef:f9:89:a7:9e:5a:a5:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:EF:B5:29:94:74:CF:36:EC:9D:EE:7C:7E:AC:88:2B:97:0F:40
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b8:71:33:bb:c7:bf:ac:7d:72:94:1b:d5:3a:72:c6:72:98:
3e:34:e6:7a:a9:45:ff:a7:f7:cc:58:fa:d9:03:a8:ac:70:78:
0d:c2:ee:32:a6:a6:29:d1:10:1a:b7:2a:9a:a2:11:ed:35:5d:
d6:8c:75:23:91:fa:26:81:bb:56:48:8b:fc:df:02:79:18:72:
e3:1b:49:f5:53:8c:9d:f9:b8:e5:fe:41:31:cb:1c:45:6a:71:
9c:c0:58:62:1c:d4:4e:8b:52:55:2e:7c:db:62:4e:3f:c4:5b:
da:97:fa:da:72:6f:2a:93:dd:e4:25:9c:cb:1b:d8:cf:ec:24:
bb:7c:9d:1e:e5:b9:73:3e:0f:8d:fd:b3:f8:51:b9:c5:4c:31:
83:7d:e1:34:3a:51:2f:e9:20:6a:07:69:c8:05:f0:7b:74:20:
42:ff:3a:f8:fb:57:8a:d3:98:4a:90:c2:a4:1a:02:03:d0:af:
ae:65:90:14:a3:36:9d:f6:23:05:fe:06:3a:33:0c:25:63:5f:
9a:c6:71:40:e5:29:bc:23:8f:75:7d:c5:ea:ff:ee:7c:14:b5:
4e:85:86:08:e6:b3:d3:e1:a7:0a:97:ec:86:a0:64:f9:42:c5:
35:42:63:a5:39:51:57:03:65:bc:86:65:66:3e:8c:b4:9d:87:
6a:38:9c:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACsAGC4bVXkgFQil9r4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjYwNzI0MTIwMTA2WhcNMjYwNzI1MTIwMTA2WjAzMTEwLwYDVQQD
EyhmOTQ1ZWZiNTI5OTQ3NGNmMzZlYzlkZWU3YzdlYWM4ODJiOTcwZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskX4te6yBmL9h5kggrxSQ58Ka7TD
JOiyO5rgBUInuIH5sN5yFK0hMmE6jEw+KaOWuW0L8N7/auxZLAeE0N+8igohXy47
CZb3iVOAC7kb2RBksnGAJnetiFsNHp/Qb+ME3d/6V+0WUGaNlSBkScWDfBh6KsJl
zClJ/Ziez1gT6w2wq8KU2YKmNnK+5k9/iZ6UcsBvdMlEKokbloJV3hhzxMArkqrD
/5bSgPtGNMZ3GkKvrKZYeONQJ73cqsfjOomhlsQVKSGs2uDp3ID/ZRAGpXTyRMtF
1qouX7Oh9eThlJeUT9cIbkD4IlZ36AErLYZqEpvsCk2Kae/5iaeeWqVAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlF77UplHTPNuyd7nx+rIgrlw9AMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7hxM7vH
v6x9cpQb1TpyxnKYPjTmeqlF/6f3zFj62QOorHB4DcLuMqamKdEQGrcqmqIR7TVd
1ox1I5H6JoG7VkiL/N8CeRhy4xtJ9VOMnfm45f5BMcscRWpxnMBYYhzUTotSVS58
22JOP8Rb2pf62nJvKpPd5CWcyxvYz+wku3ydHuW5cz4Pjf2z+FG5xUwxg33hNDpR
L+kgagdpyAXwe3QgQv86+PtXitOYSpDCpBoCA9CvrmWQFKM2nfYjBf4GOjMMJWNf
msZxQOUpvCOPdX3F6v/ufBS1ToWGCOaz0+GnCpfshqBk+ULFNUJjpTlRVwNlvIZl
Zj6MtJ2HajicpA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:53 2026 by rpki-client