Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
File: b5O_DH82JtwEWpijltR9M1tz_lU.mft (raw, json)
Hash identifier: U+mV44KVUQw1i9Qm/1/u822pvEAYiRKotmx7Mr/5nPc=
Subject key identifier: 03:02:52:26:58:92:F2:0E:FF:D0:24:B7:1B:0A:F1:30:F5:64:EC:CC
Authority key identifier: 6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
Certificate issuer: /CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Certificate serial: 019FAC75E85330197C62B3B6EBD9BC07735C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:36 +0000
Manifest this update: Wed 29 Jul 2026 06:00:36 +0000
Manifest next update: Thu 30 Jul 2026 06:00:36 +0000
Files and hashes: 1: 7ZJKSnvn6eDvPf1Ga0ognzlOqUo.roa (hash: jqd1cXzeNxyDHHxxgJZE3/SIjMMDeA4xZRyGZCH75OY=)
2: b5O_DH82JtwEWpijltR9M1tz_lU.crl (hash: u0zWmElAZKFSsXQ2plkbRyLxnsZtQNkIR3SOa59/Oos=)
3: f8g99RRZqCoxm5euSeYWZpHjx84.roa (hash: RAak1S/CpTHbug6ZdRWMP+IfC0d0jFHGr8IO+OZIlxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:e8:53:30:19:7c:62:b3:b6:eb:d9:bc:07:73:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Validity
Not Before: Jul 29 06:00:36 2026 GMT
Not After : Jul 30 06:00:36 2026 GMT
Subject: CN=030252265892f20effd024b71b0af130f564eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:2e:0c:21:00:77:48:b1:ed:c5:fa:00:bb:
33:e3:ba:43:e9:bb:ed:9d:86:ce:79:58:7d:e4:33:
32:2c:22:e9:6c:78:34:d2:d7:64:41:4f:6f:c5:fd:
72:ae:8f:b0:95:4b:29:dd:0b:e8:06:5b:98:c2:06:
39:8a:34:59:43:5e:71:2c:a4:a8:89:4a:22:88:cc:
5d:4a:c2:93:bc:9b:ac:e5:a0:3e:0c:78:bc:75:a4:
6a:7b:43:fc:c0:5c:60:20:cc:a9:87:b2:92:0b:62:
73:1f:69:78:4e:11:b7:be:00:7d:76:f9:a8:a0:4d:
91:2a:b7:b6:02:8d:e9:7c:3d:84:18:da:78:f0:1c:
1d:28:71:d2:07:0d:97:10:8e:53:33:f3:66:d2:25:
d9:16:18:a6:e5:73:c3:ff:79:16:77:66:ea:1a:9d:
c5:15:b4:82:4a:57:65:8e:1b:0b:9d:b8:06:c3:04:
31:e5:3b:35:33:af:fc:78:ee:9b:9b:cf:cc:a8:aa:
30:d8:a9:d4:5b:43:74:8e:36:59:b5:7a:02:c0:84:
67:ae:9f:32:88:e9:e3:ae:b9:a4:62:8c:cf:ca:c2:
6d:63:7c:ab:7f:6b:84:fb:ff:c4:dc:15:3f:3f:02:
e4:4c:d7:02:3e:65:22:b1:d9:38:4e:51:5c:9a:09:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:52:26:58:92:F2:0E:FF:D0:24:B7:1B:0A:F1:30:F5:64:EC:CC
X509v3 Authority Key Identifier:
keyid:6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:81:83:4c:00:1f:3f:42:cb:83:a1:61:1c:f0:31:23:f5:3f:
e1:d0:5b:87:e1:c4:8e:17:7d:cc:41:36:47:f3:b6:84:0d:3d:
05:f5:9c:e5:df:bf:ce:ae:b1:b9:86:ab:6a:f4:a9:77:88:76:
6c:ae:bb:3f:61:1e:ba:16:5e:54:93:85:13:e6:87:8a:d3:a5:
0f:3b:93:04:00:31:2a:bb:4e:04:49:f9:99:22:b6:8a:56:07:
08:df:a2:ea:ba:3e:76:2a:90:a1:85:a9:c2:7f:46:f3:d4:a9:
34:06:c6:d8:99:e8:8e:b6:58:2b:a9:4a:e4:33:73:64:d7:83:
a7:6a:6c:0b:62:50:11:04:3c:04:a1:6c:a8:ba:11:ac:83:95:
de:21:f7:6c:77:1a:e6:36:d0:6b:c7:4f:e7:cc:18:5a:33:86:
b6:4b:ec:ad:e6:0c:14:85:a7:d6:a4:51:f3:65:2c:db:a7:70:
f4:69:57:07:90:02:44:bf:03:5b:36:c2:d5:84:31:d2:c3:1b:
6d:92:da:24:af:c5:de:c0:8f:35:ee:31:0b:b3:9a:57:ab:f2:
a9:3d:ee:8e:3e:bb:d8:ff:02:28:5c:5b:6e:bc:7b:0e:61:6b:
5c:88:9b:3e:f6:c6:bf:a5:41:bf:43:4b:e2:19:bf:ee:01:c8:
2c:81:83:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdehTMBl8YrO269m8B3NcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTNiZjBjN2YzNjI2ZGMwNDVhOThhMzk2ZDQ3ZDMzNWI3
M2ZlNTUwHhcNMjYwNzI5MDYwMDM2WhcNMjYwNzMwMDYwMDM2WjAzMTEwLwYDVQQD
EygwMzAyNTIyNjU4OTJmMjBlZmZkMDI0YjcxYjBhZjEzMGY1NjRlY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61EuDCEAd0ix7cX6ALsz47pD6bvt
nYbOeVh95DMyLCLpbHg00tdkQU9vxf1yro+wlUsp3QvoBluYwgY5ijRZQ15xLKSo
iUoiiMxdSsKTvJus5aA+DHi8daRqe0P8wFxgIMyph7KSC2JzH2l4ThG3vgB9dvmo
oE2RKre2Ao3pfD2EGNp48BwdKHHSBw2XEI5TM/Nm0iXZFhim5XPD/3kWd2bqGp3F
FbSCSldljhsLnbgGwwQx5Ts1M6/8eO6bm8/MqKow2KnUW0N0jjZZtXoCwIRnrp8y
iOnjrrmkYozPysJtY3yrf2uE+//E3BU/PwLkTNcCPmUisdk4TlFcmgkZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMCUiZYkvIO/9AktxsK8TD1ZOzMMB8GA1UdIwQY
MBaAFG+Tvwx/NibcBFqYo5bUfTNbc/5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVPX0RIODJKdHdFV3Bpamx0UjlNMXR6X2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt
MGYzYjZmOTY5OTBiLzEvYjVPX0RIODJKdHdFV3Bpamx0UjlNMXR6X2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi
LzEvYjVPX0RIODJKdHdFV3Bpamx0UjlNMXR6X2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIGDTAAf
P0LLg6FhHPAxI/U/4dBbh+HEjhd9zEE2R/O2hA09BfWc5d+/zq6xuYaravSpd4h2
bK67P2EeuhZeVJOFE+aHitOlDzuTBAAxKrtOBEn5mSK2ilYHCN+i6ro+diqQoYWp
wn9G89SpNAbG2JnojrZYK6lK5DNzZNeDp2psC2JQEQQ8BKFsqLoRrIOV3iH3bHca
5jbQa8dP58wYWjOGtkvsreYMFIWn1qRR82Us26dw9GlXB5ACRL8DWzbC1YQx0sMb
bZLaJK/F3sCPNe4xC7OaV6vyqT3ujj672P8CKFxbbrx7DmFrXIibPvbGv6VBv0NL
4hm/7gHILIGD9g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:07:06 2026 by rpki-client