Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier: 4wTZQpKwOOljrHo9b1Xp5QboW3eUHgeBVdlgs68YT9Y=
Subject key identifier: 9F:19:BA:E3:AD:F0:D8:2A:28:68:17:D9:E6:92:47:92:E3:C9:F5:84
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer: /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial: 019FA93E43D8E0F72B84AC704066679F03F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 15:00:57 +0000
Manifest this update: Tue 28 Jul 2026 15:00:57 +0000
Manifest next update: Wed 29 Jul 2026 15:00:57 +0000
Files and hashes: 1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: 5AL9PlE0HrfLu8LozlwVuBA1B4FFevXAQ5+DQMeIEnk=)
2: qB-yYmmoZAETKywXU4O90SMz9p4.roa (hash: zSfrh0GvpLorIoRjiLIdctGLnu0vrYxfcdrku/RI+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:43:d8:e0:f7:2b:84:ac:70:40:66:67:9f:03:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Validity
Not Before: Jul 28 15:00:57 2026 GMT
Not After : Jul 29 15:00:57 2026 GMT
Subject: CN=9f19bae3adf0d82a286817d9e6924792e3c9f584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:d3:26:94:c2:ec:18:b9:f7:8d:a6:a5:01:
7e:4c:2b:b8:19:63:92:e5:99:be:43:e0:fc:ed:54:
2d:95:8e:78:5d:94:35:94:cf:13:4f:64:d0:8f:53:
e5:d8:83:7e:11:21:9d:ae:83:b9:91:05:cf:17:87:
7e:a3:41:1d:2b:1a:74:99:e8:4d:b0:25:37:35:06:
fd:fd:db:ef:bb:a3:62:4c:f5:87:b4:1a:0e:b4:1b:
4b:c6:70:23:a5:f1:b4:ac:c6:0c:de:18:19:ca:9a:
3b:1e:af:79:9d:47:af:e0:52:f3:d8:b2:25:bc:9b:
1b:e9:5f:93:e4:37:d1:27:15:1b:a1:b5:d9:f5:a4:
4f:8d:32:72:44:77:42:5a:a4:f1:10:df:38:ef:1e:
b0:fe:9c:7f:51:fb:77:21:93:49:a1:cc:e6:d5:96:
87:44:26:59:f4:e6:af:a8:2f:78:12:96:00:53:41:
7e:2b:7a:94:34:83:b8:05:bf:6b:d4:a4:c8:8f:f5:
1c:c3:c7:a6:ed:51:8b:83:b0:4c:69:42:19:b7:11:
c3:9b:2f:f9:e6:6e:71:6f:5f:72:99:c8:51:e3:9e:
9b:3b:a0:0f:dd:7d:dd:d8:53:19:30:b4:0a:a1:10:
1a:6c:38:e6:8d:86:bf:33:fa:67:8f:94:e7:82:97:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:BA:E3:AD:F0:D8:2A:28:68:17:D9:E6:92:47:92:E3:C9:F5:84
X509v3 Authority Key Identifier:
keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:39:c4:58:00:f2:b9:61:0a:31:63:14:d3:84:e5:45:b6:60:
33:4d:1b:6b:81:1b:7c:88:5f:b7:b8:a2:e9:03:fd:80:f3:e9:
03:66:94:00:fe:e0:14:14:79:1b:68:91:a9:20:83:41:8a:1b:
45:a5:20:04:9b:0e:0d:8b:9e:e4:61:54:5b:ae:db:55:41:1a:
f2:b4:28:67:b4:55:7e:8d:18:d7:d0:89:5a:a4:09:2a:5c:d8:
06:d1:de:da:9e:68:9d:a2:da:9f:be:af:e1:c2:07:7f:aa:8e:
b5:34:22:2c:cb:af:d9:09:69:17:e6:4a:85:b4:fb:bc:f4:27:
ce:79:b3:a7:3a:8d:1a:d9:04:d1:41:11:b6:77:2a:fd:99:aa:
e3:55:4a:1a:b8:15:dd:fd:ee:75:9b:c2:fa:77:0b:86:a8:b9:
30:8e:01:99:25:3a:d1:f3:18:86:87:75:f8:2b:24:62:44:30:
b7:00:bd:55:72:db:46:5c:95:c7:64:93:44:be:73:9c:49:a4:
7e:99:80:12:78:12:9b:b1:2b:8b:07:6c:9e:52:f3:44:81:87:
ba:f1:5d:b6:be:de:7e:91:da:34:4b:93:a6:d3:f8:7f:36:d1:
34:d1:3e:d6:43:50:9d:56:3d:43:99:0e:09:79:57:48:45:a3:
ce:03:34:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPkPY4PcrhKxwQGZnnwP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzAyYTNiMjdjZTliZDA0ZGRjYTI4YzIxZDlkMGY1ZmYz
MmE5MDkwHhcNMjYwNzI4MTUwMDU3WhcNMjYwNzI5MTUwMDU3WjAzMTEwLwYDVQQD
Eyg5ZjE5YmFlM2FkZjBkODJhMjg2ODE3ZDllNjkyNDc5MmUzYzlmNTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhbTJpTC7Bi5942mpQF+TCu4GWOS
5Zm+Q+D87VQtlY54XZQ1lM8TT2TQj1Pl2IN+ESGdroO5kQXPF4d+o0EdKxp0mehN
sCU3NQb9/dvvu6NiTPWHtBoOtBtLxnAjpfG0rMYM3hgZypo7Hq95nUev4FLz2LIl
vJsb6V+T5DfRJxUbobXZ9aRPjTJyRHdCWqTxEN847x6w/px/Uft3IZNJoczm1ZaH
RCZZ9OavqC94EpYAU0F+K3qUNIO4Bb9r1KTIj/Ucw8em7VGLg7BMaUIZtxHDmy/5
5m5xb19ymchR456bO6AP3X3d2FMZMLQKoRAabDjmjYa/M/pnj5Tngpc/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8ZuuOt8NgqKGgX2eaSR5LjyfWEMB8GA1UdIwQY
MBaAFNJwKjsnzpvQTdyijCHZ0PX/MqkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5BcU95Zk9tOUJOM0tLTUlkblE5Zjh5cVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80OWY1MjgtZTcyZi00ZGE3LTkwMmUt
Njk3NWNhZGIyMjYyLzEvMG5BcU95Zk9tOUJOM0tLTUlkblE5Zjh5cVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80OWY1MjgtZTcyZi00ZGE3LTkwMmUtNjk3NWNhZGIyMjYy
LzEvMG5BcU95Zk9tOUJOM0tLTUlkblE5Zjh5cVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijnEWADy
uWEKMWMU04TlRbZgM00ba4EbfIhft7ii6QP9gPPpA2aUAP7gFBR5G2iRqSCDQYob
RaUgBJsODYue5GFUW67bVUEa8rQoZ7RVfo0Y19CJWqQJKlzYBtHe2p5onaLan76v
4cIHf6qOtTQiLMuv2QlpF+ZKhbT7vPQnznmzpzqNGtkE0UERtncq/Zmq41VKGrgV
3f3udZvC+ncLhqi5MI4BmSU60fMYhod1+CskYkQwtwC9VXLbRlyVx2STRL5znEmk
fpmAEngSm7EriwdsnlLzRIGHuvFdtr7efpHaNEuTptP4fzbRNNE+1kNQnVY9Q5kO
CXlXSEWjzgM06g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:48 2026 by rpki-client