Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: D5ApRgy0wnL2fTUalN+S8kdGohVz8o+lmnTOvnE6k78=
Subject key identifier: A3:89:A1:05:BA:0A:B7:4E:51:D4:DD:D8:8E:7D:CA:36:33:E1:89:0E
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019FAC3EC4E13FD4A40290A260A664FB09A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 05:00:22 +0000
Manifest this update: Wed 29 Jul 2026 05:00:22 +0000
Manifest next update: Thu 30 Jul 2026 05:00:22 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: XcBgmMOjZ/Cj7AjsHcSr73IbIAd4hiHQv4w1oJxRonE=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c4:e1:3f:d4:a4:02:90:a2:60:a6:64:fb:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jul 29 05:00:22 2026 GMT
Not After : Jul 30 05:00:22 2026 GMT
Subject: CN=a389a105ba0ab74e51d4ddd88e7dca3633e1890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:a2:f5:d9:9c:75:d9:b3:b0:53:5b:03:0b:
73:c8:0e:59:08:49:98:52:e9:3b:87:6f:1d:4f:56:
ae:3d:43:d8:ea:50:f3:19:50:dd:7d:14:96:2e:cb:
66:88:a7:06:24:ee:1d:22:1a:ac:7b:21:5a:26:25:
e7:ac:41:83:41:5c:88:c6:ad:4a:64:09:9a:a6:3f:
af:06:6f:72:6d:c9:68:c1:70:59:0e:38:fb:bc:aa:
7a:3f:ce:2b:1e:9f:9a:47:22:0e:2f:be:47:52:4e:
46:08:32:da:13:f0:50:ee:20:41:e5:36:ad:00:e7:
99:0a:b1:04:f2:c3:ee:d0:43:d8:d6:75:1a:95:6c:
43:e8:75:a8:4e:78:0a:9b:54:ba:08:d3:fa:45:f8:
ba:c5:b5:e1:f5:51:67:75:86:cd:4e:ad:bb:06:a7:
4f:1c:0b:a3:73:27:c9:89:ae:97:9c:71:bb:27:46:
6f:18:c5:c9:c3:b5:11:44:3c:20:89:c1:ff:0c:9c:
c6:47:6f:0d:b3:42:88:37:ec:5c:93:12:c1:fa:4f:
ee:94:39:66:8a:43:9b:12:53:81:9e:1e:5e:ce:57:
e8:85:30:0c:fb:c2:4e:90:a6:2f:00:0b:de:da:82:
2d:78:77:c9:1d:58:1d:82:a1:03:9b:14:98:0b:44:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:A1:05:BA:0A:B7:4E:51:D4:DD:D8:8E:7D:CA:36:33:E1:89:0E
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:50:d4:ba:c2:73:ad:bc:b4:f4:5f:90:3c:45:84:a5:01:
be:96:68:5f:67:ea:6c:47:d3:51:a8:8b:52:f3:08:bc:03:75:
72:65:ee:bf:0d:0d:21:63:98:fd:f2:7f:06:b8:e6:e6:a9:ac:
f5:82:72:17:44:e4:be:dc:99:df:d8:66:40:1a:cb:5e:cb:c4:
4d:e5:52:1f:e6:c0:9c:ae:2c:69:57:2e:dd:4c:72:04:a7:90:
74:71:fe:23:cf:8b:e4:5b:60:86:7b:49:e5:3a:da:03:e1:3d:
cc:c4:9a:ef:87:72:dc:65:bd:8c:6f:e1:4e:d3:88:f3:50:8b:
c2:fc:97:9a:86:d8:89:a2:10:20:d9:3d:eb:a7:19:f7:0c:f6:
8d:f9:d2:95:3d:fc:b9:63:34:86:3b:81:96:2b:66:be:d4:2f:
a7:c4:72:1b:c8:d5:1a:41:12:82:99:fb:97:9f:d9:ec:f0:18:
5c:20:46:1c:89:29:0b:1d:78:c0:95:a3:b0:21:ad:07:ab:c5:
5f:23:ba:e0:4d:e8:32:ee:35:e9:eb:15:f7:61:4a:51:e3:69:
9c:5b:09:94:2c:fc:aa:25:d4:0a:dd:80:49:57:0f:6d:7a:fa:
07:14:0a:da:9e:0f:2e:37:52:96:09:45:ab:e1:7f:13:a2:03:
9d:29:94:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPsThP9SkApCiYKZk+wmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1
MDc3NDAwHhcNMjYwNzI5MDUwMDIyWhcNMjYwNzMwMDUwMDIyWjAzMTEwLwYDVQQD
EyhhMzg5YTEwNWJhMGFiNzRlNTFkNGRkZDg4ZTdkY2EzNjMzZTE4OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Zei9dmcddmzsFNbAwtzyA5ZCEmY
Uuk7h28dT1auPUPY6lDzGVDdfRSWLstmiKcGJO4dIhqseyFaJiXnrEGDQVyIxq1K
ZAmapj+vBm9ybclowXBZDjj7vKp6P84rHp+aRyIOL75HUk5GCDLaE/BQ7iBB5Tat
AOeZCrEE8sPu0EPY1nUalWxD6HWoTngKm1S6CNP6Rfi6xbXh9VFndYbNTq27BqdP
HAujcyfJia6XnHG7J0ZvGMXJw7URRDwgicH/DJzGR28Ns0KIN+xckxLB+k/ulDlm
ikObElOBnh5ezlfohTAM+8JOkKYvAAve2oIteHfJHVgdgqEDmxSYC0Sg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOJoQW6CrdOUdTd2I59yjYz4YkOMB8GA1UdIwQY
MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt
ZDViMGY5MWQ5N2MyLzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My
LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODZQ1LrC
c628tPRfkDxFhKUBvpZoX2fqbEfTUaiLUvMIvAN1cmXuvw0NIWOY/fJ/Brjm5qms
9YJyF0TkvtyZ39hmQBrLXsvETeVSH+bAnK4saVcu3UxyBKeQdHH+I8+L5FtghntJ
5TraA+E9zMSa74dy3GW9jG/hTtOI81CLwvyXmobYiaIQINk966cZ9wz2jfnSlT38
uWM0hjuBlitmvtQvp8RyG8jVGkESgpn7l5/Z7PAYXCBGHIkpCx14wJWjsCGtB6vF
XyO64E3oMu416esV92FKUeNpnFsJlCz8qiXUCt2ASVcPbXr6BxQK2p4PLjdSlglF
q+F/E6IDnSmU4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:46 2026 by rpki-client