Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: jfqHLEbSw1nuHjRxB+2//vdEeGgyTsGjjUBHh6QCw58=
Subject key identifier: 18:AA:F5:01:9F:1E:39:77:12:A0:E0:A9:4A:02:40:25:9A:31:E3:05
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019FABD1673DE0E038796BAACB7E9A4922A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 198D
Signing time: Wed 29 Jul 2026 03:00:55 +0000
Manifest this update: Wed 29 Jul 2026 03:00:55 +0000
Manifest next update: Thu 30 Jul 2026 03:00:55 +0000
Files and hashes: 1: Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa (hash: sNTPIkd73n/EU/DbG6UaXBNfki1s2gEUwvwhofodNus=)
2: O_JWRj5Djic4pjl6umhJDPP7BuI.roa (hash: oXNGdNb1x3OVweYzH4oXuC+MRGHHCd9nwAtXQGgCLxw=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: tAV0d2qkchCvQrM6wYhrcW4ogTLrI+1TpnRYxWBzoZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:67:3d:e0:e0:38:79:6b:aa:cb:7e:9a:49:22:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jul 29 03:00:55 2026 GMT
Not After : Jul 30 03:00:55 2026 GMT
Subject: CN=18aaf5019f1e397712a0e0a94a0240259a31e305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:c9:9d:8f:08:53:0a:73:f7:c6:13:3a:4a:
d6:82:16:b9:25:56:bb:1a:29:e3:78:80:54:b6:22:
93:78:a4:c3:2e:be:bb:7e:26:77:1e:7a:1f:2f:be:
f0:a1:7f:94:3c:2f:d8:c7:e2:a3:dc:bd:c4:10:60:
35:d0:81:1e:77:4e:a7:b4:dd:04:d7:ef:84:b7:09:
ef:a7:04:36:57:bf:36:50:09:50:9c:9c:f3:03:90:
38:22:7e:4e:e1:96:c4:5e:c7:b1:25:e7:93:36:67:
45:cd:f2:a5:67:07:e1:9f:49:94:07:16:83:bb:a5:
95:55:9f:8c:6d:a5:c7:11:73:d4:a7:0e:c6:55:66:
a6:6a:ed:f0:fd:68:f3:fd:3e:be:6e:a9:12:50:23:
31:0d:f1:c1:f0:85:51:0c:c4:16:14:a8:06:24:0b:
4b:0e:2d:0f:cc:c9:9d:42:fc:41:c3:35:f7:f3:e8:
db:ae:14:0e:a7:ee:a8:7f:a1:f7:30:7c:a2:6b:2f:
fc:25:a4:80:44:74:d7:d0:76:33:82:85:61:5b:87:
7e:86:3d:4b:8c:33:47:15:ff:24:6d:59:3d:33:e3:
2c:f7:c9:d6:93:be:f8:d0:f7:6a:1f:7a:4e:8e:5e:
9c:b5:31:ad:ea:05:83:94:58:7b:b4:b5:67:10:30:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:F5:01:9F:1E:39:77:12:A0:E0:A9:4A:02:40:25:9A:31:E3:05
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:32:70:02:60:31:54:d2:2e:00:87:1f:b7:85:5b:7e:48:b9:
84:48:ba:38:b2:fc:74:32:78:14:1a:f2:1d:66:6e:b9:5b:89:
e9:49:a5:1e:72:b5:83:60:33:9e:88:b0:7f:fa:97:a0:07:91:
6c:a7:05:e4:ad:22:cd:09:fb:4f:c9:20:49:77:75:d7:e7:1f:
be:f9:89:a9:79:42:89:16:7c:f5:ba:16:80:14:ce:26:fc:79:
16:24:84:98:0f:1a:db:38:fd:8e:15:24:50:83:d7:cd:57:96:
32:fd:3f:ed:a9:c3:ab:0f:47:e0:de:0c:35:d9:62:d4:fa:f6:
13:dc:88:c7:e7:b3:6f:33:6d:fd:a6:f8:0c:c6:e2:76:60:58:
6c:41:c4:5a:bc:d8:31:0e:b2:2c:70:d1:eb:e9:8d:3c:7d:0e:
16:00:9d:5e:98:e8:b7:48:ae:9a:c4:77:06:c1:82:ba:19:d9:
6b:7a:1c:c7:58:8e:eb:cd:d7:ac:56:e6:26:1e:54:a1:7a:64:
5d:1d:4a:cc:f6:5c:c8:ec:e3:34:ac:ae:b1:2b:15:63:2c:76:
81:c5:11:67:27:d5:38:02:5e:9c:fd:8d:a6:60:36:0e:41:fe:
ac:12:13:29:87:48:e4:b3:9a:17:c7:bb:f7:17:87:85:25:73:
58:a2:d5:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0Wc94OA4eWuqy36aSSKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjYwNzI5MDMwMDU1WhcNMjYwNzMwMDMwMDU1WjAzMTEwLwYDVQQD
EygxOGFhZjUwMTlmMWUzOTc3MTJhMGUwYTk0YTAyNDAyNTlhMzFlMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5/JnY8IUwpz98YTOkrWgha5JVa7
GinjeIBUtiKTeKTDLr67fiZ3HnofL77woX+UPC/Yx+Kj3L3EEGA10IEed06ntN0E
1++EtwnvpwQ2V782UAlQnJzzA5A4In5O4ZbEXsexJeeTNmdFzfKlZwfhn0mUBxaD
u6WVVZ+MbaXHEXPUpw7GVWamau3w/Wjz/T6+bqkSUCMxDfHB8IVRDMQWFKgGJAtL
Di0PzMmdQvxBwzX38+jbrhQOp+6of6H3MHyiay/8JaSARHTX0HYzgoVhW4d+hj1L
jDNHFf8kbVk9M+Ms98nWk7740PdqH3pOjl6ctTGt6gWDlFh7tLVnEDA1kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiq9QGfHjl3EqDgqUoCQCWaMeMFMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzJwAmAx
VNIuAIcft4Vbfki5hEi6OLL8dDJ4FBryHWZuuVuJ6UmlHnK1g2Aznoiwf/qXoAeR
bKcF5K0izQn7T8kgSXd11+cfvvmJqXlCiRZ89boWgBTOJvx5FiSEmA8a2zj9jhUk
UIPXzVeWMv0/7anDqw9H4N4MNdli1Pr2E9yIx+ezbzNt/ab4DMbidmBYbEHEWrzY
MQ6yLHDR6+mNPH0OFgCdXpjot0iumsR3BsGCuhnZa3ocx1iO683XrFbmJh5UoXpk
XR1KzPZcyOzjNKyusSsVYyx2gcURZyfVOAJenP2NpmA2DkH+rBITKYdI5LOaF8e7
9xeHhSVzWKLVZg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:21 2026 by rpki-client