Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: bY9ZCnHQ6a5HoTEkC5qFrYmAEEgnN+XBe37eXmQz0ws=
Subject key identifier: 76:E3:C9:A9:3F:2E:E8:7B:D9:F3:F5:CC:DF:8B:1A:7D:6B:A7:29:A5
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019FAB2C9DB933AF007832DC8D1327CA9345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 00:00:55 +0000
Manifest this update: Wed 29 Jul 2026 00:00:55 +0000
Manifest next update: Thu 30 Jul 2026 00:00:55 +0000
Files and hashes: 1: 6fN9h0BE8aQ9CkNz0FDDwJzJ1WI.roa (hash: lchc3zsBE0dtE9KZlnVKCzZkcOJOv0TaeNSl6grWrKg=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: erj71S6PNnzZVAATaQG1W2240PY2FTGDBO3Tuo8gKo4=)
3: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (hash: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8=)
4: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:9d:b9:33:af:00:78:32:dc:8d:13:27:ca:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Jul 29 00:00:55 2026 GMT
Not After : Jul 30 00:00:55 2026 GMT
Subject: CN=76e3c9a93f2ee87bd9f3f5ccdf8b1a7d6ba729a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:f7:c2:38:78:dc:07:f0:7d:59:f7:57:35:
7f:8c:e6:a3:4c:6a:ec:60:18:df:d1:3e:5b:7b:38:
3f:fb:1b:06:d5:c2:bb:ca:c4:a3:25:8e:69:2a:32:
b8:7b:65:1f:01:bb:33:3c:85:7e:df:5a:f5:f6:cd:
2c:72:aa:82:50:9b:5b:e4:1a:5e:f4:38:63:ab:e7:
03:40:2d:6c:71:1a:eb:59:9e:bb:12:fa:59:1f:49:
34:51:1a:5d:04:64:64:15:f6:54:f4:eb:5d:93:60:
5c:99:c3:9b:e7:57:bd:b9:a7:85:09:c7:11:cb:20:
93:8c:14:b3:30:57:81:b8:f1:35:b5:3b:47:46:c6:
c3:6f:d6:5c:8f:43:e1:73:c7:39:ce:9e:ad:b6:1b:
2f:e9:7c:ca:da:28:fb:55:f9:07:c2:9c:97:0c:5a:
e5:17:90:f5:16:a7:a2:46:f2:e0:1b:d5:65:19:10:
07:01:24:41:9c:c7:4e:57:59:c8:b7:13:e0:62:fb:
d8:c4:03:92:22:03:64:ce:52:2a:91:43:d9:c2:4d:
c2:15:86:93:f5:ca:b6:30:40:27:dc:37:6a:e4:5c:
bc:9b:f6:9c:d0:bc:dd:2a:72:94:55:5e:8b:a6:4c:
f6:77:8d:cf:d7:cc:33:13:b5:85:13:b8:03:61:67:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E3:C9:A9:3F:2E:E8:7B:D9:F3:F5:CC:DF:8B:1A:7D:6B:A7:29:A5
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:37:ef:db:f6:96:8b:86:f0:7e:a1:92:b4:7c:6c:20:80:
f5:6e:db:3c:54:c5:e8:d2:8d:3b:99:46:e7:64:e4:9d:2e:dc:
47:9d:cf:57:bc:23:72:91:bb:aa:ee:ea:07:7f:53:fa:d9:2a:
51:73:4a:e5:d4:c2:b7:8a:cd:f6:8a:5a:b8:d5:21:6c:71:40:
05:b8:a2:87:5e:36:cb:b5:02:1a:df:71:de:83:b2:98:0f:04:
39:72:ae:22:94:06:03:9e:0e:a4:40:9c:53:80:de:90:19:ab:
94:8a:a0:41:c1:8e:d8:20:93:7f:ed:e4:24:0c:ac:96:aa:7d:
4e:5a:3f:a1:f7:ae:ad:d4:1a:e0:98:b2:3a:e7:dc:bb:1a:7b:
02:54:28:a3:29:77:81:1f:57:92:36:7e:0a:bc:ba:36:2e:80:
de:33:dc:09:57:65:3e:ae:16:d4:38:30:ab:78:fb:f2:56:3d:
f2:16:84:ba:ff:58:a9:79:58:94:18:38:66:96:67:f2:eb:df:
c9:fd:ad:90:76:56:2b:b3:c7:da:fc:b2:4c:66:1b:65:33:6e:
d7:06:8a:af:22:1c:1b:3b:53:8d:a2:e7:a3:c9:18:07:d2:ad:
73:12:04:b2:8a:a7:ae:13:2b:8a:0f:7c:55:e3:ee:69:ec:48:
02:8a:13:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLJ25M68AeDLcjRMnypNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz
ZmRlNWMwHhcNMjYwNzI5MDAwMDU1WhcNMjYwNzMwMDAwMDU1WjAzMTEwLwYDVQQD
Eyg3NmUzYzlhOTNmMmVlODdiZDlmM2Y1Y2NkZjhiMWE3ZDZiYTcyOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugb3wjh43AfwfVn3VzV/jOajTGrs
YBjf0T5bezg/+xsG1cK7ysSjJY5pKjK4e2UfAbszPIV+31r19s0scqqCUJtb5Bpe
9Dhjq+cDQC1scRrrWZ67EvpZH0k0URpdBGRkFfZU9Otdk2BcmcOb51e9uaeFCccR
yyCTjBSzMFeBuPE1tTtHRsbDb9Zcj0Phc8c5zp6tthsv6XzK2ij7VfkHwpyXDFrl
F5D1FqeiRvLgG9VlGRAHASRBnMdOV1nItxPgYvvYxAOSIgNkzlIqkUPZwk3CFYaT
9cq2MEAn3Ddq5Fy8m/ac0LzdKnKUVV6Lpkz2d43P18wzE7WFE7gDYWfzbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbjyak/Luh72fP1zN+LGn1rpymlMB8GA1UdIwQY
MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt
NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1
LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbY379v2
louG8H6hkrR8bCCA9W7bPFTF6NKNO5lG52TknS7cR53PV7wjcpG7qu7qB39T+tkq
UXNK5dTCt4rN9opauNUhbHFABbiih142y7UCGt9x3oOymA8EOXKuIpQGA54OpECc
U4DekBmrlIqgQcGO2CCTf+3kJAyslqp9Tlo/ofeurdQa4JiyOufcuxp7AlQooyl3
gR9XkjZ+Cry6Ni6A3jPcCVdlPq4W1Dgwq3j78lY98haEuv9YqXlYlBg4ZpZn8uvf
yf2tkHZWK7PH2vyyTGYbZTNu1waKryIcGztTjaLno8kYB9KtcxIEsoqnrhMrig98
VePuaexIAooTUw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:37 2026 by rpki-client