Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: Oz++8AmNLIuOAVaq8bZc8bzccA2Lrwm5z+uBdhXKxmI=
Subject key identifier: 90:46:F2:0B:1C:D8:91:9A:B5:6E:B8:6F:1A:8C:7E:80:52:93:C0:17
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019FAD1AD0868006CCC6C3D5227F4BE4C701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 19E1
Signing time: Wed 29 Jul 2026 09:00:43 +0000
Manifest this update: Wed 29 Jul 2026 09:00:43 +0000
Manifest next update: Thu 30 Jul 2026 09:00:43 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: XbSYBsykX6RsiypRKL5aWfpvFXR4EhQfYiqRJhpQhsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:d0:86:80:06:cc:c6:c3:d5:22:7f:4b:e4:c7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jul 29 09:00:43 2026 GMT
Not After : Jul 30 09:00:43 2026 GMT
Subject: CN=9046f20b1cd8919ab56eb86f1a8c7e805293c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:eb:48:c7:a0:6d:2b:d0:ce:68:d4:bb:8d:
a4:0b:1b:55:65:72:66:a1:78:6c:49:72:38:81:32:
75:b3:d6:a4:f4:ea:01:e3:cc:2e:b6:6d:83:9f:ba:
cf:5e:9f:c8:3a:02:69:86:a1:97:db:07:1b:98:8f:
a2:35:f8:61:1b:f6:d1:42:e6:47:ec:28:c1:94:24:
06:c1:fc:fd:61:85:2e:f2:97:57:a8:29:46:38:2c:
cf:05:0c:8e:40:6f:5d:96:01:4f:47:e5:79:ab:c6:
a6:8e:ab:b1:ee:71:db:af:ef:f0:ba:13:c4:d3:bb:
18:b6:4d:27:4a:47:19:b2:8a:77:2e:f5:ec:8c:c9:
15:ea:95:30:99:49:db:0b:32:98:0c:9a:cf:4f:63:
34:bc:de:99:2b:1f:96:2d:42:48:70:f7:bd:59:58:
ef:8f:d6:15:35:c5:2e:80:96:62:84:7d:81:17:39:
90:ca:f2:1c:44:5a:9e:58:48:e4:b7:64:ab:09:77:
d5:c2:08:68:57:50:d8:0a:b9:e4:1a:fe:b2:15:5d:
bf:b3:84:4b:9d:2f:f1:7a:35:52:ce:6d:60:9a:e6:
e2:16:71:c0:e8:cb:f7:8b:72:4d:f2:12:b7:09:ae:
da:b8:7f:57:2a:87:94:b1:18:c3:60:23:4c:35:80:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:F2:0B:1C:D8:91:9A:B5:6E:B8:6F:1A:8C:7E:80:52:93:C0:17
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:06:34:23:d6:4e:b1:f9:a6:46:b7:6a:10:c9:0e:ad:bf:
3a:6c:72:25:af:f7:0e:c2:ec:b3:67:0d:63:10:57:f9:3a:b4:
d6:9b:d7:b5:48:97:38:b3:dd:eb:fb:d9:1f:62:94:81:39:10:
a9:41:fc:95:67:33:40:3f:90:69:59:c4:b1:08:aa:65:56:f2:
96:8d:ce:c4:ad:1d:fc:62:7f:a5:13:f4:16:c7:75:db:6b:b9:
a9:18:cb:84:36:f8:b6:95:b3:8a:e6:a6:be:f6:ee:19:e6:60:
6c:d9:22:fa:bb:08:40:20:fe:df:22:1d:c8:03:b7:73:3c:03:
bb:72:16:14:19:27:ce:96:80:1e:73:77:1e:2a:c3:50:9c:ae:
df:31:a1:39:1e:e6:58:fc:1f:6b:6f:07:d0:80:09:8a:c5:25:
d2:37:64:85:54:5a:bf:be:6f:b6:2d:97:c5:4a:89:fc:ec:97:
ff:ec:c2:80:1f:6d:72:f7:f7:50:74:8f:5a:77:26:8c:40:e1:
6c:c6:c9:cd:3f:b2:56:89:a9:12:8f:b4:1a:89:8f:6e:13:a2:
9f:1c:91:2e:d0:47:cb:78:fc:5e:11:44:e9:a0:07:d9:c3:28:
3d:e2:dd:a5:0b:7c:db:17:64:4c:a4:df:c8:71:a0:bc:9b:4e:
5c:55:61:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGtCGgAbMxsPVIn9L5McBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjYwNzI5MDkwMDQzWhcNMjYwNzMwMDkwMDQzWjAzMTEwLwYDVQQD
Eyg5MDQ2ZjIwYjFjZDg5MTlhYjU2ZWI4NmYxYThjN2U4MDUyOTNjMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTrrSMegbSvQzmjUu42kCxtVZXJm
oXhsSXI4gTJ1s9ak9OoB48wutm2Dn7rPXp/IOgJphqGX2wcbmI+iNfhhG/bRQuZH
7CjBlCQGwfz9YYUu8pdXqClGOCzPBQyOQG9dlgFPR+V5q8amjqux7nHbr+/wuhPE
07sYtk0nSkcZsop3LvXsjMkV6pUwmUnbCzKYDJrPT2M0vN6ZKx+WLUJIcPe9WVjv
j9YVNcUugJZihH2BFzmQyvIcRFqeWEjkt2SrCXfVwghoV1DYCrnkGv6yFV2/s4RL
nS/xejVSzm1gmubiFnHA6Mv3i3JN8hK3Ca7auH9XKoeUsRjDYCNMNYDMLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBG8gsc2JGatW64bxqMfoBSk8AXMB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW4GNCPW
TrH5pka3ahDJDq2/OmxyJa/3DsLss2cNYxBX+Tq01pvXtUiXOLPd6/vZH2KUgTkQ
qUH8lWczQD+QaVnEsQiqZVbylo3OxK0d/GJ/pRP0Fsd122u5qRjLhDb4tpWziuam
vvbuGeZgbNki+rsIQCD+3yIdyAO3czwDu3IWFBknzpaAHnN3HirDUJyu3zGhOR7m
WPwfa28H0IAJisUl0jdkhVRav75vti2XxUqJ/OyX/+zCgB9tcvf3UHSPWncmjEDh
bMbJzT+yVompEo+0GomPbhOinxyRLtBHy3j8XhFE6aAH2cMoPeLdpQt82xdkTKTf
yHGgvJtOXFVhKg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:27 2026 by rpki-client