Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: NOZBLNSXKyP3b5SgWK+vx9DFH4wN2uplKESKjeiuaPc=
Subject key identifier: 7B:BF:E1:CB:34:22:2C:91:66:A9:C1:95:0A:9A:23:B3:22:DC:41:3A
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 019FA89A4B3739EE1B05C561A032C32DC08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 0371
Signing time: Tue 28 Jul 2026 12:01:51 +0000
Manifest this update: Tue 28 Jul 2026 12:01:51 +0000
Manifest next update: Wed 29 Jul 2026 12:01:51 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: 4+XoXfGnE2PXjiOAmMubpsTIzOCnNyj5LBRwB1kfOqA=)
2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:4b:37:39:ee:1b:05:c5:61:a0:32:c3:2d:c0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Jul 28 12:01:51 2026 GMT
Not After : Jul 29 12:01:51 2026 GMT
Subject: CN=7bbfe1cb34222c9166a9c1950a9a23b322dc413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:0e:4e:26:c4:05:cf:51:1d:40:9e:4a:37:
18:d2:db:7f:ce:e7:f7:73:d8:f9:66:a9:3b:50:0e:
03:87:51:2d:46:97:08:ab:bd:9b:af:88:df:5a:06:
89:3a:39:76:f1:0f:52:57:19:b3:57:56:84:91:93:
a4:8f:7d:72:55:f6:20:46:91:bc:10:3b:df:d4:61:
0f:3a:4c:d1:d7:d8:49:c6:7f:17:7f:74:e1:f3:8d:
93:b4:83:5f:10:a6:8c:f1:9f:5b:d2:7e:06:94:f5:
24:31:c7:67:79:e5:f0:22:07:4b:69:63:0a:85:ec:
07:5b:36:dc:ef:22:3b:2a:10:bb:ad:cb:e0:7e:c4:
a5:e2:1b:81:12:ab:0b:43:cf:8a:ac:4e:8e:60:43:
04:a3:13:a8:b4:3d:d2:7b:b9:9e:e1:c7:ac:61:c0:
da:ac:fd:0e:67:53:09:43:93:ba:6f:7a:64:67:c9:
2e:4f:b9:b8:6b:08:1c:d8:da:f6:e3:c8:4e:45:ea:
b5:b3:28:cc:fa:1b:15:4a:c1:55:1d:f3:ce:93:ce:
72:4d:45:8c:ac:a6:43:2b:80:75:82:03:1e:a8:d8:
28:f3:35:82:ad:08:42:48:ec:1c:54:f2:cd:93:dd:
d9:99:c2:16:14:74:d5:6a:a2:84:ea:aa:da:54:08:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:E1:CB:34:22:2C:91:66:A9:C1:95:0A:9A:23:B3:22:DC:41:3A
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:45:52:f0:13:db:7c:2b:b1:7e:4a:f3:68:cd:7f:4c:9f:cf:
e2:0c:c4:38:7b:fe:26:11:8b:bc:5c:f6:ff:3b:e7:87:f9:cb:
ba:d8:0d:8c:68:36:22:63:fe:e6:f5:b8:45:86:0a:ae:85:b0:
e9:21:14:b2:8b:7f:5f:e8:1e:dd:ee:ed:aa:7a:c4:ad:3f:e3:
40:e9:4d:ab:2a:ec:2f:66:ca:bf:53:95:12:a7:18:e4:21:fd:
f2:72:a6:86:57:e7:21:13:2e:63:90:12:b3:a9:0e:03:b1:1a:
69:7e:93:3c:43:1a:cd:b2:c7:26:cb:32:60:f0:82:6b:c1:12:
71:84:9d:02:de:08:9a:b1:a4:22:7c:2b:b7:31:4c:9e:ca:11:
a9:fb:05:9f:12:15:6b:85:cb:e6:4f:98:48:ce:45:8e:79:4b:
81:81:d8:9f:ef:ee:1c:ac:37:3d:7a:23:b0:f9:ba:a9:4b:28:
74:ac:27:23:37:d8:a6:70:6a:d2:c7:46:ce:52:92:05:10:c1:
ad:e3:56:69:7b:e0:d1:08:ec:12:c0:2c:67:72:5d:d2:c9:7a:
52:41:02:b1:09:e7:8a:77:86:ae:d7:a9:47:b1:59:5d:89:35:
f5:24:44:a5:89:38:65:10:b1:68:86:22:ab:fa:c5:0f:3e:2a:
de:ac:26:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omks3Oe4bBcVhoDLDLcCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDZiMWQ5MGVkNGJmMTY1MWFhMjI3MGU2ZWNiYWMyZDg3
OTIyYWMwHhcNMjYwNzI4MTIwMTUxWhcNMjYwNzI5MTIwMTUxWjAzMTEwLwYDVQQD
Eyg3YmJmZTFjYjM0MjIyYzkxNjZhOWMxOTUwYTlhMjNiMzIyZGM0MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0IOTibEBc9RHUCeSjcY0tt/zuf3
c9j5Zqk7UA4Dh1EtRpcIq72br4jfWgaJOjl28Q9SVxmzV1aEkZOkj31yVfYgRpG8
EDvf1GEPOkzR19hJxn8Xf3Th842TtINfEKaM8Z9b0n4GlPUkMcdneeXwIgdLaWMK
hewHWzbc7yI7KhC7rcvgfsSl4huBEqsLQ8+KrE6OYEMEoxOotD3Se7me4cesYcDa
rP0OZ1MJQ5O6b3pkZ8kuT7m4awgc2Nr248hOReq1syjM+hsVSsFVHfPOk85yTUWM
rKZDK4B1ggMeqNgo8zWCrQhCSOwcVPLNk93ZmcIWFHTVaqKE6qraVAjUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu/4cs0IiyRZqnBlQqaI7Mi3EE6MB8GA1UdIwQY
MBaAFPXWsdkO1L8WUaoicObsusLYeSKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWIt
MDE0MmZlZjY3MmVjLzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWItMDE0MmZlZjY3MmVj
LzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUVS8BPb
fCuxfkrzaM1/TJ/P4gzEOHv+JhGLvFz2/zvnh/nLutgNjGg2ImP+5vW4RYYKroWw
6SEUsot/X+ge3e7tqnrErT/jQOlNqyrsL2bKv1OVEqcY5CH98nKmhlfnIRMuY5AS
s6kOA7EaaX6TPEMazbLHJssyYPCCa8EScYSdAt4ImrGkInwrtzFMnsoRqfsFnxIV
a4XL5k+YSM5FjnlLgYHYn+/uHKw3PXojsPm6qUsodKwnIzfYpnBq0sdGzlKSBRDB
reNWaXvg0QjsEsAsZ3Jd0sl6UkECsQnnineGrtepR7FZXYk19SREpYk4ZRCxaIYi
q/rFDz4q3qwmlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:32 2026 by rpki-client