Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: 1XnyVyyEcG77HvZmhQ2s7IVfc4+CzDexjfHEbOxIWEI=
Subject key identifier: 84:5C:DB:2B:33:37:FF:48:7C:28:65:19:B8:56:6C:23:54:3F:07:0A
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019FAA87DAD5BC0A05AF53B30B233F821FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 18AD
Signing time: Tue 28 Jul 2026 21:00:57 +0000
Manifest this update: Tue 28 Jul 2026 21:00:57 +0000
Manifest next update: Wed 29 Jul 2026 21:00:57 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: EnrFOScDPd+m8jlnF4SDorDN2uGZ7uTYk5mv/noAmDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:da:d5:bc:0a:05:af:53:b3:0b:23:3f:82:1f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jul 28 21:00:57 2026 GMT
Not After : Jul 29 21:00:57 2026 GMT
Subject: CN=845cdb2b3337ff487c286519b8566c23543f070a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:cb:d2:73:61:ff:85:05:f3:aa:9f:bf:54:
b8:19:85:05:b3:7c:1e:aa:36:05:1d:0a:86:16:3e:
eb:25:e7:ff:05:22:28:04:94:1e:90:50:ed:03:36:
0a:32:7e:58:4c:25:2c:61:16:65:bf:bb:d0:76:8d:
6a:d1:d0:79:88:d0:d7:9a:f5:dd:1f:1a:ef:64:23:
96:e6:42:ac:9b:f8:5c:ab:ad:fb:03:d4:a0:3f:b5:
41:fb:e5:0e:75:3a:5b:0f:bc:66:59:c7:fb:a8:f1:
b8:ef:5b:48:e9:6e:4b:97:d5:6d:e4:7f:26:d8:12:
cd:09:d2:0e:4c:d6:44:01:40:d9:c8:b2:94:77:fd:
d5:95:b7:e7:a7:b3:b4:37:c3:eb:4a:4e:aa:0a:c7:
ec:50:09:1a:c0:61:db:b2:c1:1e:0e:d1:35:97:a5:
ba:1a:c0:a7:24:40:e2:73:fb:49:b7:9b:11:3f:e3:
dd:bc:b7:79:68:62:4f:75:7b:22:65:e2:16:3a:20:
e5:ab:07:82:d9:1d:73:d2:06:00:be:63:67:bd:a7:
79:53:5a:7e:fd:1f:a9:df:fe:9f:13:7f:b3:26:81:
e3:a4:7a:d8:24:f5:4b:d3:1d:ae:54:db:d8:3c:fe:
46:d6:c1:ad:a1:89:0b:38:8a:ba:b4:5f:30:c0:01:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:DB:2B:33:37:FF:48:7C:28:65:19:B8:56:6C:23:54:3F:07:0A
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:eb:25:72:05:6d:e0:76:44:80:f9:46:c3:46:08:3f:43:a3:
b5:14:12:05:02:86:92:de:e2:30:62:4c:9b:4f:e8:06:05:dc:
98:ee:7c:bc:52:9a:03:ae:2a:74:74:a6:91:ba:6f:bb:ac:a6:
fe:57:cf:59:17:72:6a:01:79:d5:22:6f:e7:8d:ad:00:9b:d3:
3e:9f:a9:6a:e3:5f:ca:6f:f5:22:9d:c9:0e:c4:81:47:2d:81:
eb:0f:f1:81:a3:66:58:ff:17:74:02:e3:1e:e0:79:01:c0:2b:
d4:ce:a5:e4:20:b3:af:ed:71:3f:d8:45:3b:bc:8b:a9:98:20:
e7:93:03:07:55:92:8e:ae:2a:9e:a2:c3:f4:d1:c4:2a:70:fd:
23:fc:2e:40:21:46:69:fd:65:75:b1:be:67:3e:2e:3e:d6:08:
50:40:83:69:2c:7f:cd:30:89:81:8d:d0:ce:e9:4a:33:4a:3d:
c3:2b:7e:bb:ac:88:85:97:b4:62:57:f2:61:b0:9f:37:8d:8c:
58:73:c6:f7:06:e3:4e:2d:c9:13:62:f1:63:2d:19:21:68:72:
19:34:79:71:2c:52:7d:6f:46:93:e3:fd:af:ac:f4:23:44:27:
c7:db:e4:dd:a3:5c:74:6e:86:6e:36:29:e7:89:a7:7b:e6:d0:
27:ad:53:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh9rVvAoFr1OzCyM/gh+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjYwNzI4MjEwMDU3WhcNMjYwNzI5MjEwMDU3WjAzMTEwLwYDVQQD
Eyg4NDVjZGIyYjMzMzdmZjQ4N2MyODY1MTliODU2NmMyMzU0M2YwNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOLL0nNh/4UF86qfv1S4GYUFs3we
qjYFHQqGFj7rJef/BSIoBJQekFDtAzYKMn5YTCUsYRZlv7vQdo1q0dB5iNDXmvXd
HxrvZCOW5kKsm/hcq637A9SgP7VB++UOdTpbD7xmWcf7qPG471tI6W5Ll9Vt5H8m
2BLNCdIOTNZEAUDZyLKUd/3Vlbfnp7O0N8PrSk6qCsfsUAkawGHbssEeDtE1l6W6
GsCnJEDic/tJt5sRP+PdvLd5aGJPdXsiZeIWOiDlqweC2R1z0gYAvmNnvad5U1p+
/R+p3/6fE3+zJoHjpHrYJPVL0x2uVNvYPP5G1sGtoYkLOIq6tF8wwAGCewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRc2yszN/9IfChlGbhWbCNUPwcKMB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2eslcgVt
4HZEgPlGw0YIP0OjtRQSBQKGkt7iMGJMm0/oBgXcmO58vFKaA64qdHSmkbpvu6ym
/lfPWRdyagF51SJv542tAJvTPp+pauNfym/1Ip3JDsSBRy2B6w/xgaNmWP8XdALj
HuB5AcAr1M6l5CCzr+1xP9hFO7yLqZgg55MDB1WSjq4qnqLD9NHEKnD9I/wuQCFG
af1ldbG+Zz4uPtYIUECDaSx/zTCJgY3QzulKM0o9wyt+u6yIhZe0YlfyYbCfN42M
WHPG9wbjTi3JE2LxYy0ZIWhyGTR5cSxSfW9Gk+P9r6z0I0Qnx9vk3aNcdG6GbjYp
54mne+bQJ61TIQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:25 2026 by rpki-client