Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: QCVqGPXOWaTtSvFG41Klp/ap4TJ+WWsHtPxtgkJEnsA=
Subject key identifier: D9:80:0C:E1:DD:02:A5:BA:AF:59:F7:F2:64:AB:FA:FA:E0:60:01:B1
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019FAA50D239BC88B742EEB35FFCF69A070C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 20:00:51 +0000
Manifest this update: Tue 28 Jul 2026 20:00:51 +0000
Manifest next update: Wed 29 Jul 2026 20:00:51 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: 8n0sHrxkNOMix9ABdTzeZAi7wBHZLCPioGoIaq+jMn4=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d2:39:bc:88:b7:42:ee:b3:5f:fc:f6:9a:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jul 28 20:00:51 2026 GMT
Not After : Jul 29 20:00:51 2026 GMT
Subject: CN=d9800ce1dd02a5baaf59f7f264abfafae06001b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:fe:64:c5:db:a6:af:af:ae:cd:46:d9:f1:
b0:78:93:84:81:b5:12:de:60:29:a3:6b:78:f6:ab:
d3:1c:07:2c:1c:f2:45:27:8b:7c:0b:b7:ff:c7:50:
e0:df:3f:69:b0:b0:d6:0b:e5:3a:9c:b1:71:7a:b9:
67:2a:7c:d1:a4:76:4d:7b:4b:19:8f:91:12:93:d8:
b3:38:27:bc:c6:b7:85:4e:0c:91:d2:d8:5c:75:cb:
ff:2a:6e:46:d1:b3:0e:8c:bd:22:44:ca:73:1f:00:
51:d4:7c:ba:43:bf:b5:b6:df:3a:95:3f:fa:c2:a3:
87:e6:c5:9f:ae:7f:30:48:8d:b0:be:cd:92:58:e9:
33:62:ec:94:58:71:ab:69:94:76:aa:03:5f:e0:b1:
75:5f:aa:8b:cb:67:ad:1d:47:b9:4d:82:65:c6:1a:
7a:bb:d8:59:78:b4:46:2d:b6:f3:15:ee:44:47:1f:
b7:2f:37:75:b3:e0:23:c3:3f:97:41:6f:f2:53:c5:
b9:62:f1:7a:6e:66:2e:9a:3b:aa:42:ed:d3:ab:d7:
fe:8d:f9:c5:6f:01:a0:d5:43:9b:72:fd:46:9a:03:
34:e5:fb:07:96:ba:de:43:02:ff:59:74:90:9e:fd:
c3:ac:3c:d5:93:4b:6e:88:05:b0:d1:17:de:1d:99:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:0C:E1:DD:02:A5:BA:AF:59:F7:F2:64:AB:FA:FA:E0:60:01:B1
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:3f:81:c8:60:fa:e7:30:b8:dc:bf:56:10:31:3c:f3:e1:
d3:87:8b:fe:c8:48:83:46:f4:5c:72:a1:b9:45:8b:e1:95:28:
af:ab:c2:d8:e6:56:df:14:b3:93:7e:4d:09:a1:c7:51:c1:bb:
c6:1e:a9:b0:20:4c:f3:8e:f8:e8:54:53:a3:4a:62:57:dd:28:
c2:df:09:ab:24:b4:1c:60:a1:3e:83:8d:94:64:9e:2f:ac:79:
41:60:1c:fa:26:fe:b8:5f:be:aa:8b:46:de:c7:4d:19:ac:65:
0a:a9:e9:a0:26:47:36:bf:f0:b0:0c:c7:36:de:e4:0d:bb:67:
b4:cc:31:6d:06:91:b4:7c:b8:a9:82:ed:bc:8e:44:9e:13:73:
65:5d:41:3c:19:68:fd:40:ba:8b:49:27:30:95:10:8e:d6:46:
85:13:e5:bd:1f:ae:2f:fb:9e:5a:07:d2:7f:1a:0b:bd:58:5d:
b5:90:a7:b4:7f:f5:06:0c:08:0d:7a:02:b7:b8:2d:0f:46:c8:
f3:d6:18:f1:c5:be:fa:f6:76:2b:ab:7c:81:36:36:e3:21:ee:
10:60:ec:bd:e6:ac:b8:53:03:08:f9:6c:7a:65:64:fc:47:e9:
a1:01:61:37:4f:d6:fc:da:04:3d:b1:d8:48:3e:01:24:a7:e6:
5a:2a:8a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUNI5vIi3Qu6zX/z2mgcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm
NWY1MTkwHhcNMjYwNzI4MjAwMDUxWhcNMjYwNzI5MjAwMDUxWjAzMTEwLwYDVQQD
EyhkOTgwMGNlMWRkMDJhNWJhYWY1OWY3ZjI2NGFiZmFmYWUwNjAwMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXr+ZMXbpq+vrs1G2fGweJOEgbUS
3mApo2t49qvTHAcsHPJFJ4t8C7f/x1Dg3z9psLDWC+U6nLFxerlnKnzRpHZNe0sZ
j5ESk9izOCe8xreFTgyR0thcdcv/Km5G0bMOjL0iRMpzHwBR1Hy6Q7+1tt86lT/6
wqOH5sWfrn8wSI2wvs2SWOkzYuyUWHGraZR2qgNf4LF1X6qLy2etHUe5TYJlxhp6
u9hZeLRGLbbzFe5ERx+3Lzd1s+Ajwz+XQW/yU8W5YvF6bmYumjuqQu3Tq9f+jfnF
bwGg1UObcv1GmgM05fsHlrreQwL/WXSQnv3DrDzVk0tuiAWw0RfeHZmvVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmADOHdAqW6r1n38mSr+vrgYAGxMB8GA1UdIwQY
MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt
Zjc4YmRiNmY2MGMyLzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy
LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrI/gchg
+ucwuNy/VhAxPPPh04eL/shIg0b0XHKhuUWL4ZUor6vC2OZW3xSzk35NCaHHUcG7
xh6psCBM84746FRTo0piV90owt8JqyS0HGChPoONlGSeL6x5QWAc+ib+uF++qotG
3sdNGaxlCqnpoCZHNr/wsAzHNt7kDbtntMwxbQaRtHy4qYLtvI5EnhNzZV1BPBlo
/UC6i0knMJUQjtZGhRPlvR+uL/ueWgfSfxoLvVhdtZCntH/1BgwIDXoCt7gtD0bI
89YY8cW++vZ2K6t8gTY24yHuEGDsveasuFMDCPlsemVk/EfpoQFhN0/W/NoEPbHY
SD4BJKfmWiqKAw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:04 2026 by rpki-client