Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: 1rbMVvdAWkFCJFSCxXiZ55TCkmeFPNFEIso0xQqphzg=
Subject key identifier: 2A:AD:55:B9:0F:C1:79:39:8F:57:07:2F:D9:0F:78:F3:D0:FA:54:72
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019FA906E0D168D37881262D8A432E801FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 14:00:27 +0000
Manifest this update: Tue 28 Jul 2026 14:00:27 +0000
Manifest next update: Wed 29 Jul 2026 14:00:27 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: kcymGcMjYq/jUqoe9ha7/lpsAd4F4bKaBBOPV+TyA9k=)
2: ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa (hash: F0+H6qDixU/03vN/UlEJN6xAxFU7ewgK1yqAztFgQS4=)
3: fSmn7fdIQV-BhV-TX9ikmCr8pz0.roa (hash: aPwivrJczNCFzMJcf0LFQLamq3ppdLsG7e6V+tPBFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:e0:d1:68:d3:78:81:26:2d:8a:43:2e:80:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Jul 28 14:00:27 2026 GMT
Not After : Jul 29 14:00:27 2026 GMT
Subject: CN=2aad55b90fc179398f57072fd90f78f3d0fa5472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:ab:01:aa:23:fe:6c:76:bc:d5:43:0d:27:
6b:1f:d3:57:e3:de:8e:0b:e0:c1:0a:7b:53:ee:30:
f4:6d:0f:9f:d2:d2:90:8c:26:cc:3e:8b:74:9d:e6:
45:b2:6d:2f:ab:06:f8:e9:54:1c:77:64:f7:05:86:
78:9e:c2:c7:2f:1d:aa:32:ab:e3:a3:7b:fd:f5:d1:
85:f2:7a:e2:61:03:8a:c1:d8:f9:32:6b:f3:8c:3b:
e8:65:c1:7d:6c:0e:44:56:a3:37:93:89:cb:2d:f9:
2f:41:d9:db:eb:3f:b7:4b:26:39:9d:b2:96:68:41:
9b:ec:db:4f:69:0f:9b:93:4b:8c:38:dc:5d:0c:7e:
bf:96:f9:3e:c9:a0:a0:b4:0a:5a:c9:85:7f:f4:a0:
77:1f:45:13:d0:f9:5a:4a:a0:bd:c7:64:43:e8:5d:
65:33:a3:cc:e0:d3:4f:be:67:6b:9e:10:3f:d6:d4:
62:94:3b:91:ad:e5:e6:b6:7d:36:9a:27:d1:f1:cb:
2b:b1:05:89:23:06:c8:95:f5:5f:9e:75:d8:88:b2:
9d:10:35:1b:96:91:a4:56:fa:0a:32:10:6c:92:73:
13:fe:53:e9:c9:00:6d:7a:3c:12:6f:42:37:68:eb:
5a:f9:d1:2c:1f:3d:a4:9c:c1:c4:18:ce:ec:4c:e0:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AD:55:B9:0F:C1:79:39:8F:57:07:2F:D9:0F:78:F3:D0:FA:54:72
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:1c:4a:54:5c:cf:37:71:e9:a3:df:af:dc:a7:03:32:51:
58:b7:bf:f0:f0:b9:4c:b5:05:d2:a3:6c:c8:76:ae:e6:e6:8c:
ab:57:c2:64:1a:05:71:81:a6:de:1a:95:44:43:ed:1b:f6:65:
2d:4d:82:c3:2b:70:03:04:35:cb:8e:1d:e2:ef:3a:d4:3f:da:
0c:bc:5a:a9:e8:ae:44:61:50:77:b4:18:6f:55:ab:30:db:ea:
4f:2d:27:53:14:d2:24:e5:8a:08:61:41:e6:c1:78:2d:6c:03:
a6:d0:34:d5:9b:20:31:bc:11:8c:d3:42:57:c1:e9:ca:e4:95:
16:0a:7b:4c:c8:28:b1:23:e7:09:55:97:52:12:06:e3:8c:16:
18:f1:e7:c5:05:e0:69:be:36:e5:89:99:6e:dd:d1:e1:e0:25:
db:60:20:9e:42:f6:05:9b:1f:79:f9:de:da:a9:a0:3d:0f:18:
65:9c:27:c9:cf:03:34:40:c8:5b:04:1b:82:b5:bc:e3:c4:e8:
00:69:eb:bf:cf:de:7d:d9:c0:0b:6a:92:8a:54:53:ca:2c:3c:
4f:27:85:3e:9b:09:d2:62:11:d4:ac:d5:0e:2e:28:a1:0f:8a:
66:51:27:d2:80:82:97:10:a2:93:45:bc:a0:8a:42:a0:d9:f6:
a2:ae:e2:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBuDRaNN4gSYtikMugB/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTIyYTVjYjA2NDNmNzM2YzdlYzc5NjE4MDlhMjU5Mzg2
NjhmMGUwHhcNMjYwNzI4MTQwMDI3WhcNMjYwNzI5MTQwMDI3WjAzMTEwLwYDVQQD
EygyYWFkNTViOTBmYzE3OTM5OGY1NzA3MmZkOTBmNzhmM2QwZmE1NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOrAaoj/mx2vNVDDSdrH9NX496O
C+DBCntT7jD0bQ+f0tKQjCbMPot0neZFsm0vqwb46VQcd2T3BYZ4nsLHLx2qMqvj
o3v99dGF8nriYQOKwdj5MmvzjDvoZcF9bA5EVqM3k4nLLfkvQdnb6z+3SyY5nbKW
aEGb7NtPaQ+bk0uMONxdDH6/lvk+yaCgtApayYV/9KB3H0UT0PlaSqC9x2RD6F1l
M6PM4NNPvmdrnhA/1tRilDuRreXmtn02mifR8csrsQWJIwbIlfVfnnXYiLKdEDUb
lpGkVvoKMhBsknMT/lPpyQBtejwSb0I3aOta+dEsHz2knMHEGM7sTODEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqtVbkPwXk5j1cHL9kPePPQ+lRyMB8GA1UdIwQY
MBaAFNESKlywZD9zbH7HlhgJolk4Zo8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgt
MTE1MmY0MzkzMDIwLzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgtMTE1MmY0MzkzMDIw
LzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoIcSlRc
zzdx6aPfr9ynAzJRWLe/8PC5TLUF0qNsyHau5uaMq1fCZBoFcYGm3hqVREPtG/Zl
LU2CwytwAwQ1y44d4u861D/aDLxaqeiuRGFQd7QYb1WrMNvqTy0nUxTSJOWKCGFB
5sF4LWwDptA01ZsgMbwRjNNCV8HpyuSVFgp7TMgosSPnCVWXUhIG44wWGPHnxQXg
ab425YmZbt3R4eAl22AgnkL2BZsfefne2qmgPQ8YZZwnyc8DNEDIWwQbgrW848To
AGnrv8/efdnAC2qSilRTyiw8TyeFPpsJ0mIR1KzVDi4ooQ+KZlEn0oCClxCik0W8
oIpCoNn2oq7isQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:02 2026 by rpki-client