Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: CJTRwykZl1M3YHutFKmkPlla/NP68VPACoDICR4Dxgs=
Subject key identifier: A7:6F:33:60:E4:F1:FA:DC:46:3B:EA:E9:33:73:16:A9:67:7A:81:C8
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019FA899B8885EF02CCFE92C182A4AD7D2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 12:01:14 +0000
Manifest this update: Tue 28 Jul 2026 12:01:14 +0000
Manifest next update: Wed 29 Jul 2026 12:01:14 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 39K1NxykflAuaQ6uiL3gyD5zEcjNwMcnLUatY5MKRlg=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:b8:88:5e:f0:2c:cf:e9:2c:18:2a:4a:d7:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jul 28 12:01:14 2026 GMT
Not After : Jul 29 12:01:14 2026 GMT
Subject: CN=a76f3360e4f1fadc463beae9337316a9677a81c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:de:ae:02:02:58:d0:53:f4:28:a6:5d:d2:
ba:ac:3e:79:64:54:fd:43:2d:c2:05:a6:de:a5:86:
92:63:b5:ad:53:47:ac:41:f2:63:e5:f2:34:7c:3b:
c9:ad:a0:2c:85:fa:bd:88:46:af:92:24:30:8d:45:
72:04:81:17:7d:98:a3:e7:4f:46:ba:69:19:45:0d:
ef:e2:dc:92:90:30:69:7a:48:e0:65:0e:5e:af:74:
c7:ef:8d:8d:ea:af:fd:23:d1:d4:9c:f9:75:11:ea:
a4:a5:7f:b1:d7:16:c8:c4:dd:cc:87:98:5b:6e:67:
fd:ad:77:39:1f:9c:43:e4:29:e4:6d:63:2b:b0:21:
de:4a:a5:d7:7a:28:42:48:94:1a:89:31:c6:dd:5d:
9b:7d:3c:df:a4:a8:fb:df:fb:23:e6:3f:06:09:fd:
d1:84:57:02:0e:2c:58:e3:62:7d:93:6e:cc:74:ed:
f1:fd:1d:7e:55:fe:7e:60:19:bb:cc:b6:1c:dc:4c:
e2:70:c7:c2:be:4b:72:c1:07:62:12:63:fa:64:a6:
e3:1f:fc:e0:6b:d7:91:a3:01:96:b2:58:81:fa:eb:
55:b2:14:c4:c6:21:c2:4f:43:08:95:b1:08:0b:fa:
d9:b8:a7:48:21:fb:dc:ff:34:75:26:7d:c7:7f:91:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:33:60:E4:F1:FA:DC:46:3B:EA:E9:33:73:16:A9:67:7A:81:C8
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:95:e1:c6:46:e8:83:4b:c9:ef:cd:9e:2d:6b:d4:af:28:e4:
dc:19:1d:52:06:52:ea:e5:3a:51:cf:e0:6d:6b:b1:f5:43:44:
f2:90:7f:7e:7e:21:a8:31:92:27:10:c0:e1:52:9c:8c:1c:b3:
6a:a9:7f:f2:0f:6c:39:e3:1b:e2:31:84:cc:cc:c1:d3:02:dc:
0c:0b:f5:ee:a1:81:6f:db:75:60:a3:b8:38:f2:54:ec:31:f3:
7f:b1:dc:63:ca:fa:56:2e:34:0d:fa:44:37:d9:f7:10:54:4e:
1f:6b:4c:c2:59:5f:f2:4c:94:47:bf:f9:0d:f8:f2:7a:b9:c4:
55:1f:0a:58:cf:ec:d1:ed:01:62:68:a2:9a:96:91:b8:53:fb:
31:60:37:80:3f:83:29:4c:ee:0a:2f:67:c3:19:b8:4c:e9:a7:
ce:b2:0d:2b:9e:96:65:52:db:cf:55:73:62:a8:c4:80:4b:c1:
a5:f0:c1:d2:ea:53:72:a2:be:e0:db:3f:26:1d:c5:07:4e:01:
5a:7e:8a:9d:8c:43:a6:15:09:f0:24:42:85:27:2e:b2:76:fd:
7f:ba:3c:ae:5f:11:1c:c8:86:0f:3b:a8:88:60:d8:ea:d5:aa:
92:ce:f7:1d:da:d1:61:ac:da:27:11:0d:f6:43:23:3d:31:aa:
f0:46:2e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ombiIXvAsz+ksGCpK19LCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjYwNzI4MTIwMTE0WhcNMjYwNzI5MTIwMTE0WjAzMTEwLwYDVQQD
EyhhNzZmMzM2MGU0ZjFmYWRjNDYzYmVhZTkzMzczMTZhOTY3N2E4MWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi/ergICWNBT9CimXdK6rD55ZFT9
Qy3CBabepYaSY7WtU0esQfJj5fI0fDvJraAshfq9iEavkiQwjUVyBIEXfZij509G
umkZRQ3v4tySkDBpekjgZQ5er3TH742N6q/9I9HUnPl1EeqkpX+x1xbIxN3Mh5hb
bmf9rXc5H5xD5CnkbWMrsCHeSqXXeihCSJQaiTHG3V2bfTzfpKj73/sj5j8GCf3R
hFcCDixY42J9k27MdO3x/R1+Vf5+YBm7zLYc3EzicMfCvktywQdiEmP6ZKbjH/zg
a9eRowGWsliB+utVshTExiHCT0MIlbEIC/rZuKdIIfvc/zR1Jn3Hf5FpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdvM2Dk8frcRjvq6TNzFqlneoHIMB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5Xhxkbo
g0vJ782eLWvUryjk3BkdUgZS6uU6Uc/gbWux9UNE8pB/fn4hqDGSJxDA4VKcjByz
aql/8g9sOeMb4jGEzMzB0wLcDAv17qGBb9t1YKO4OPJU7DHzf7HcY8r6Vi40DfpE
N9n3EFROH2tMwllf8kyUR7/5DfjyernEVR8KWM/s0e0BYmiimpaRuFP7MWA3gD+D
KUzuCi9nwxm4TOmnzrINK56WZVLbz1VzYqjEgEvBpfDB0upTcqK+4Ns/Jh3FB04B
Wn6KnYxDphUJ8CRChScusnb9f7o8rl8RHMiGDzuoiGDY6tWqks73HdrRYazaJxEN
9kMjPTGq8EYuWQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:40 2026 by rpki-client