Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: sb1bqlxKRfQSqtRH+H3k3g91rEmHAqKONCQGMvqzbmY=
Subject key identifier: 00:A5:8D:A9:75:45:DD:9B:BF:07:B0:72:C5:81:4E:00:60:98:FB:30
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019FAC3EE2414793F27279259E1B69ACFFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:30 +0000
Manifest this update: Wed 29 Jul 2026 05:00:30 +0000
Manifest next update: Thu 30 Jul 2026 05:00:30 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: NKSJXkEHiU8dxbWIMmHGLCVVbG+UcG7XshI45KTtvgY=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:e2:41:47:93:f2:72:79:25:9e:1b:69:ac:ff:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jul 29 05:00:30 2026 GMT
Not After : Jul 30 05:00:30 2026 GMT
Subject: CN=00a58da97545dd9bbf07b072c5814e006098fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:d8:16:e5:7a:0b:6b:69:7b:71:3c:83:7c:
4d:9e:a1:af:8d:67:91:e7:cd:c2:d8:f6:41:cb:b1:
b9:07:c7:ba:fa:11:65:30:56:80:cd:50:d9:61:19:
8b:d7:48:bb:3f:df:41:fd:f4:c2:11:0b:81:db:19:
f6:11:21:dd:43:4c:1d:0f:a5:e3:c6:c2:3f:cd:9d:
ed:29:55:76:6d:20:ad:17:2a:4d:35:bc:8f:fe:9b:
fb:e2:ed:8f:33:e6:35:28:d6:3c:75:0b:29:4a:fc:
d2:08:48:28:bb:89:0b:e7:89:19:69:5a:11:13:c0:
ec:e8:2b:a4:08:05:d3:95:4b:dc:0f:3e:55:68:96:
4f:db:6d:2a:75:47:d1:62:b2:5a:b8:b0:5a:9b:4a:
19:f9:f8:62:b8:45:95:14:b8:b1:f0:62:84:13:82:
9e:64:29:07:75:1e:2c:23:bf:c2:e3:30:a8:ab:ca:
ca:a8:2c:5c:89:da:d4:cb:5d:1c:46:4b:96:fa:52:
24:94:9e:6d:3d:c9:60:f2:56:67:2f:77:04:04:88:
0f:21:f2:de:86:13:ad:9a:cf:77:40:2d:07:ed:8a:
65:16:ef:6d:75:52:38:aa:d2:0d:2e:96:5a:f7:4b:
28:07:ed:1c:15:c8:c4:23:44:e3:c3:3e:bb:75:da:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:8D:A9:75:45:DD:9B:BF:07:B0:72:C5:81:4E:00:60:98:FB:30
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:04:2b:c8:28:d9:25:3b:e8:b7:76:12:08:4c:e5:bd:dc:
69:c0:6b:36:bd:9c:be:cd:51:4e:5b:bd:3c:3c:55:5b:03:55:
1f:10:f9:6d:25:9c:0a:1f:79:58:6f:cb:46:c1:41:e8:5f:73:
be:95:40:2c:67:0b:ad:87:6f:0b:1e:ff:3d:e2:6b:a6:0c:12:
4c:74:24:53:f9:1b:c9:c4:33:0e:e9:ac:84:f9:10:47:c8:e3:
72:ee:72:15:41:85:4f:c2:54:5f:df:ec:d7:ea:c8:ae:1c:b3:
7e:8c:72:62:fe:c2:09:0b:c2:b2:b3:dc:27:5c:fd:01:a9:74:
65:07:6f:c4:19:18:b0:09:a7:42:af:dd:9c:0d:14:cc:8b:c8:
41:65:c1:93:9f:f9:eb:ee:a4:13:09:02:02:09:28:da:ae:58:
1b:44:7b:6e:43:e7:2e:2b:b8:00:9c:a7:4b:7c:de:cf:9e:04:
f7:ab:29:b3:eb:56:c4:17:ba:0e:ce:fa:ca:07:32:20:cb:d0:
48:cf:81:5c:8e:db:d6:01:ad:24:01:46:84:e8:0c:79:e0:e8:
bc:89:ad:62:54:35:21:d6:f0:e7:35:26:43:d5:60:4c:97:9a:
77:af:6d:e0:29:a3:f4:62:cc:f2:6c:39:e9:20:f4:a6:4c:a2:
a7:45:2e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPuJBR5PycnklnhtprP/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy
YjAzYzIwHhcNMjYwNzI5MDUwMDMwWhcNMjYwNzMwMDUwMDMwWjAzMTEwLwYDVQQD
EygwMGE1OGRhOTc1NDVkZDliYmYwN2IwNzJjNTgxNGUwMDYwOThmYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b7YFuV6C2tpe3E8g3xNnqGvjWeR
583C2PZBy7G5B8e6+hFlMFaAzVDZYRmL10i7P99B/fTCEQuB2xn2ESHdQ0wdD6Xj
xsI/zZ3tKVV2bSCtFypNNbyP/pv74u2PM+Y1KNY8dQspSvzSCEgou4kL54kZaVoR
E8Ds6CukCAXTlUvcDz5VaJZP220qdUfRYrJauLBam0oZ+fhiuEWVFLix8GKEE4Ke
ZCkHdR4sI7/C4zCoq8rKqCxcidrUy10cRkuW+lIklJ5tPclg8lZnL3cEBIgPIfLe
hhOtms93QC0H7YplFu9tdVI4qtINLpZa90soB+0cFcjEI0Tjwz67ddpYNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACljal1Rd2bvwewcsWBTgBgmPswMB8GA1UdIwQY
MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt
Y2U4ZmM5M2FkYjIxLzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx
LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDUEK8go
2SU76Ld2EghM5b3cacBrNr2cvs1RTlu9PDxVWwNVHxD5bSWcCh95WG/LRsFB6F9z
vpVALGcLrYdvCx7/PeJrpgwSTHQkU/kbycQzDumshPkQR8jjcu5yFUGFT8JUX9/s
1+rIrhyzfoxyYv7CCQvCsrPcJ1z9Aal0ZQdvxBkYsAmnQq/dnA0UzIvIQWXBk5/5
6+6kEwkCAgko2q5YG0R7bkPnLiu4AJynS3zez54E96sps+tWxBe6Ds76ygcyIMvQ
SM+BXI7b1gGtJAFGhOgMeeDovImtYlQ1Idbw5zUmQ9VgTJead69t4Cmj9GLM8mw5
6SD0pkyip0UuPg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:58 2026 by rpki-client