Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: NCd30GcxPigDtF1be3caqKJFcX/g4MEoCXqBh4gPeIw=
Subject key identifier: 44:F9:8C:42:BC:F4:53:C1:6C:0C:36:0D:7D:48:26:07:46:37:CE:04
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019FAB9A036D3C8E28E119A3D2F73BC59A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 19D0
Signing time: Wed 29 Jul 2026 02:00:25 +0000
Manifest this update: Wed 29 Jul 2026 02:00:25 +0000
Manifest next update: Thu 30 Jul 2026 02:00:25 +0000
Files and hashes: 1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: rGa6an4ul8+BbkcGHJsCAd1FjHU8GVVV2bm8SyI4tjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:03:6d:3c:8e:28:e1:19:a3:d2:f7:3b:c5:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Jul 29 02:00:25 2026 GMT
Not After : Jul 30 02:00:25 2026 GMT
Subject: CN=44f98c42bcf453c16c0c360d7d4826074637ce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:0b:27:92:16:2d:ef:8d:24:a2:7c:c6:c6:
20:dd:d2:2b:6f:82:7b:48:09:6f:67:c6:cf:22:97:
3d:ed:3a:05:a8:1c:67:e1:f9:82:0a:af:b8:e2:55:
4c:6b:8c:9f:16:f5:91:19:b4:0e:4a:a8:3a:a4:b3:
85:24:af:51:b1:49:5c:90:d4:36:1d:a5:65:47:e5:
28:74:e0:cb:8c:86:91:1c:ae:d4:20:4b:52:75:cc:
1c:d6:a6:36:de:16:64:be:7c:36:08:36:b3:06:94:
0e:bd:53:86:28:63:b0:fb:c7:0f:4e:62:01:53:1a:
3a:39:55:1c:fd:7b:92:bf:56:e5:44:8b:2a:a8:5a:
67:c0:cc:55:a0:85:ce:aa:a3:98:d1:29:e9:5c:82:
71:c1:9f:4a:c7:66:8b:17:1d:5f:c0:6c:0a:1f:bf:
29:4a:4d:9e:be:ca:90:19:2e:4f:e4:c0:45:fa:57:
b6:2a:13:7e:84:a4:e0:ed:b3:11:4d:bd:32:ef:d9:
70:97:4e:0b:c9:43:76:a9:a2:c8:cb:01:2d:a3:74:
73:d7:6f:fb:ec:bd:86:4a:12:dd:2a:79:fa:94:92:
ff:d2:49:b1:19:12:0c:cd:4b:0e:3b:39:2e:cc:80:
01:3a:e6:43:f9:e5:a6:30:61:39:57:bd:67:63:8b:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:8C:42:BC:F4:53:C1:6C:0C:36:0D:7D:48:26:07:46:37:CE:04
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:26:c6:4c:0a:7b:eb:80:45:b1:e4:aa:b6:f9:4c:c3:e8:91:
ff:d1:07:36:04:fe:cf:d8:8a:17:bf:13:7d:e6:68:58:4a:f3:
10:92:11:9f:ed:49:57:b3:a7:6c:29:c6:04:60:ad:00:9b:c5:
86:54:dd:bd:c9:c7:df:6b:8e:8c:5f:c9:a2:f1:44:1e:71:1d:
46:9d:dd:8c:bc:b4:9b:5e:21:97:8d:01:a7:27:0e:01:6c:4b:
68:50:4e:3b:1a:e4:af:0f:e9:fa:f9:a3:1a:f2:b0:2b:ad:0e:
6e:63:2a:0a:df:a9:c5:06:a9:5e:97:f9:08:cc:7d:7e:99:ae:
a6:b2:43:18:4c:24:ad:b3:d8:68:23:6e:e6:ab:63:e0:c9:fd:
08:ee:97:18:37:ad:07:d7:38:cd:7b:20:70:1c:76:ec:2b:0c:
22:ac:f5:fa:4d:9a:96:d1:3d:ed:0a:bc:bb:b8:3c:17:06:95:
7c:d2:0c:41:36:fb:03:47:3f:b5:4e:89:e2:a2:8d:bf:32:51:
56:d4:5d:12:43:68:b2:1f:eb:69:82:4e:b9:09:f7:12:ef:58:
d8:b5:8c:be:9d:94:6e:b8:10:21:c8:3f:bb:c5:91:54:9a:e8:
17:1d:83:06:ac:07:40:8c:55:53:57:e0:88:08:96:39:a5:49:
78:0e:0f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmgNtPI4o4Rmj0vc7xZp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWYzODQ0MjkzYmFkNjUxZmZkODU3YzkxYWYwYmU1NjBh
ZWNkNjEwHhcNMjYwNzI5MDIwMDI1WhcNMjYwNzMwMDIwMDI1WjAzMTEwLwYDVQQD
Eyg0NGY5OGM0MmJjZjQ1M2MxNmMwYzM2MGQ3ZDQ4MjYwNzQ2MzdjZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0cLJ5IWLe+NJKJ8xsYg3dIrb4J7
SAlvZ8bPIpc97ToFqBxn4fmCCq+44lVMa4yfFvWRGbQOSqg6pLOFJK9RsUlckNQ2
HaVlR+UodODLjIaRHK7UIEtSdcwc1qY23hZkvnw2CDazBpQOvVOGKGOw+8cPTmIB
Uxo6OVUc/XuSv1blRIsqqFpnwMxVoIXOqqOY0SnpXIJxwZ9Kx2aLFx1fwGwKH78p
Sk2evsqQGS5P5MBF+le2KhN+hKTg7bMRTb0y79lwl04LyUN2qaLIywEto3Rz12/7
7L2GShLdKnn6lJL/0kmxGRIMzUsOOzkuzIABOuZD+eWmMGE5V71nY4uhOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET5jEK89FPBbAw2DX1IJgdGN84EMB8GA1UdIwQY
MBaAFK/vOEQpO61lH/2FfJGvC+Vgrs1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUt
YTliNDYxNGYwNzQ0LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUtYTliNDYxNGYwNzQ0
LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACbGTAp7
64BFseSqtvlMw+iR/9EHNgT+z9iKF78TfeZoWErzEJIRn+1JV7OnbCnGBGCtAJvF
hlTdvcnH32uOjF/JovFEHnEdRp3djLy0m14hl40BpycOAWxLaFBOOxrkrw/p+vmj
GvKwK60ObmMqCt+pxQapXpf5CMx9fpmuprJDGEwkrbPYaCNu5qtj4Mn9CO6XGDet
B9c4zXsgcBx27CsMIqz1+k2altE97Qq8u7g8FwaVfNIMQTb7A0c/tU6J4qKNvzJR
VtRdEkNosh/raYJOuQn3Eu9Y2LWMvp2UbrgQIcg/u8WRVJroFx2DBqwHQIxVU1fg
iAiWOaVJeA4P5A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:08 2026 by rpki-client