Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: EievDT19occuEzzZFb4wxGPQZAXmw51X4q0I9YBTQIw=
Subject key identifier: 97:B9:B3:25:0D:C6:B2:67:74:97:8E:0A:1B:98:05:61:90:9B:42:F2
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019FAA8781EFDEA6DDA7E450A651B6AED77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 21:00:35 +0000
Manifest this update: Tue 28 Jul 2026 21:00:35 +0000
Manifest next update: Wed 29 Jul 2026 21:00:35 +0000
Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: xaU/+/pGCzh/v+IK0KnasEwRujEEKR5omHjmJ49Bryc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:81:ef:de:a6:dd:a7:e4:50:a6:51:b6:ae:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jul 28 21:00:35 2026 GMT
Not After : Jul 29 21:00:35 2026 GMT
Subject: CN=97b9b3250dc6b26774978e0a1b980561909b42f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:1e:b7:e4:10:9b:84:a6:e3:d5:d3:5a:37:
ad:36:85:b2:f6:8e:2c:a9:75:d2:19:fc:d5:6a:bb:
f2:37:aa:fa:db:df:b2:58:d2:5f:9d:2d:d4:34:9d:
92:42:03:97:96:fb:36:3f:00:3d:bf:78:78:07:0c:
8d:12:62:a5:2c:f2:06:c4:f0:ae:f1:b7:2b:5b:47:
57:89:99:52:f8:b1:d3:1b:4f:ce:71:86:a5:47:07:
1c:f7:f1:b4:d4:bb:34:aa:1e:7b:d8:15:c1:4c:4e:
ac:9d:2f:20:f7:e0:af:1c:3a:77:2b:02:2b:6d:31:
27:ec:91:3d:bc:6b:33:e1:26:6d:ef:d3:2b:65:10:
25:16:e6:c0:d5:42:58:16:d5:16:65:e9:d1:61:ed:
d6:cf:48:d5:42:97:6e:af:15:c0:5d:6b:6a:12:7c:
b9:51:c2:ba:48:2d:d2:ec:c8:69:b8:fa:35:38:08:
91:3d:b9:77:92:d0:39:15:e7:1a:db:74:56:fa:75:
62:2d:f1:cb:72:09:80:ce:f7:a0:55:79:5e:4b:14:
4c:b6:7d:d1:db:bf:c3:22:08:41:c8:1e:51:e4:42:
ba:50:b2:1b:df:01:3d:b7:0b:c3:1c:1d:60:15:f7:
33:52:41:74:e2:52:33:cc:bb:33:1e:32:24:75:f4:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:B3:25:0D:C6:B2:67:74:97:8E:0A:1B:98:05:61:90:9B:42:F2
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:64:d8:99:c1:a9:a5:ff:13:35:27:91:10:a1:7b:e0:9c:62:
4e:4a:fd:ba:41:61:16:b7:8e:a8:49:15:eb:14:a8:d6:ac:89:
21:9c:61:ec:cc:8f:ba:9e:1a:14:fe:97:9c:e2:76:79:3e:bb:
aa:b5:b8:ec:07:26:88:9e:9e:d5:07:7c:0f:2d:76:90:b6:c3:
b0:50:52:82:df:5c:2d:4c:13:03:28:e3:00:9e:a3:5f:0f:e1:
ed:1c:11:9d:42:0f:3e:24:32:c3:6c:44:e6:aa:93:da:36:d6:
47:b6:ee:06:90:8b:22:d9:a8:e5:19:3f:41:00:7a:8f:e3:a2:
79:df:83:d9:4a:1b:fc:a1:a6:4d:e9:ee:43:2b:5f:e5:f2:1b:
72:ef:c5:5f:c7:97:99:ee:8d:81:ef:61:93:d5:6a:79:09:01:
4d:04:e1:cb:85:bb:a6:85:6c:2b:a5:e2:78:10:18:d4:74:26:
3c:6d:e8:ff:a6:e9:ed:77:ca:ba:b2:02:26:85:39:16:26:67:
12:16:72:8f:91:76:56:d4:6c:4d:54:04:1f:4c:b3:d0:60:53:
6b:82:d9:d3:52:fc:3d:ae:85:a7:f4:17:3b:ed:59:7f:a2:f0:
1e:29:61:c9:c8:8b:05:fa:3b:6d:09:fe:1c:43:6b:4b:31:9c:
78:54:a2:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh4Hv3qbdp+RQplG2rtd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjYwNzI4MjEwMDM1WhcNMjYwNzI5MjEwMDM1WjAzMTEwLwYDVQQD
Eyg5N2I5YjMyNTBkYzZiMjY3NzQ5NzhlMGExYjk4MDU2MTkwOWI0MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApScet+QQm4Sm49XTWjetNoWy9o4s
qXXSGfzVarvyN6r629+yWNJfnS3UNJ2SQgOXlvs2PwA9v3h4BwyNEmKlLPIGxPCu
8bcrW0dXiZlS+LHTG0/OcYalRwcc9/G01Ls0qh572BXBTE6snS8g9+CvHDp3KwIr
bTEn7JE9vGsz4SZt79MrZRAlFubA1UJYFtUWZenRYe3Wz0jVQpdurxXAXWtqEny5
UcK6SC3S7MhpuPo1OAiRPbl3ktA5Feca23RW+nViLfHLcgmAzvegVXleSxRMtn3R
27/DIghByB5R5EK6ULIb3wE9twvDHB1gFfczUkF04lIzzLszHjIkdfTdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe5syUNxrJndJeOChuYBWGQm0LyMB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmTYmcGp
pf8TNSeREKF74JxiTkr9ukFhFreOqEkV6xSo1qyJIZxh7MyPup4aFP6XnOJ2eT67
qrW47AcmiJ6e1Qd8Dy12kLbDsFBSgt9cLUwTAyjjAJ6jXw/h7RwRnUIPPiQyw2xE
5qqT2jbWR7buBpCLItmo5Rk/QQB6j+Oied+D2Uob/KGmTenuQytf5fIbcu/FX8eX
me6Nge9hk9VqeQkBTQThy4W7poVsK6XieBAY1HQmPG3o/6bp7XfKurICJoU5FiZn
EhZyj5F2VtRsTVQEH0yz0GBTa4LZ01L8Pa6Fp/QXO+1Zf6LwHilhyciLBfo7bQn+
HENrSzGceFSiwA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:43 2026 by rpki-client