Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: atM37YkKoZ7YVYXVmOHuokaLHFcuFTzNSMJvkG2iNtE=
Subject key identifier: 5E:80:AB:B9:39:40:27:88:81:C4:92:0A:1E:B1:0F:8C:40:F9:BC:CF
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019FAA87F66CFB0DE0AEE1801BA272FA7E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:01:04 +0000
Manifest this update: Tue 28 Jul 2026 21:01:04 +0000
Manifest next update: Wed 29 Jul 2026 21:01:04 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: jTmbA1xohSDl+7e5h4GmawJNEg9Xc165szNVs5c7YQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f6:6c:fb:0d:e0:ae:e1:80:1b:a2:72:fa:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jul 28 21:01:04 2026 GMT
Not After : Jul 29 21:01:04 2026 GMT
Subject: CN=5e80abb93940278881c4920a1eb10f8c40f9bccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:b7:a6:4a:5f:83:95:0f:c2:ca:bd:8c:7b:
6e:65:b0:f1:2a:b4:e0:0c:19:70:82:4f:21:c9:54:
35:48:1c:48:7a:cc:00:9e:2d:cc:38:e8:a8:91:b2:
e9:ce:fe:d2:7b:ce:34:c4:29:a2:6f:6e:40:fd:79:
05:61:a4:8e:17:55:98:0c:75:c2:12:e3:32:ac:2d:
f1:cf:16:ec:82:71:33:10:b8:e5:ec:13:05:46:fc:
6e:b8:b1:4d:dd:5a:b8:5d:a3:ec:f5:d8:af:e4:51:
cc:58:67:ef:c3:86:9a:bb:12:2f:8e:4d:c3:06:fa:
3c:58:ab:e7:ee:53:0d:6a:d6:cc:2a:5d:8e:3b:93:
b1:85:6a:49:79:25:b7:bb:b7:e1:4c:25:f2:0e:3e:
a6:37:f9:e3:5f:89:20:ca:35:33:f4:28:61:5f:a3:
4e:77:da:a7:cf:8a:84:1b:ec:90:87:b6:ef:67:ba:
b6:37:f1:6d:31:7e:da:ca:3a:67:ff:b0:b3:4c:04:
ad:59:6c:87:d6:ea:d2:b7:9b:0d:a0:75:fb:33:d0:
e2:b0:e1:50:aa:69:87:d9:18:d3:d7:dd:33:c5:62:
cd:47:a5:7d:c2:3b:04:0e:90:3f:54:3e:95:e0:b2:
64:dc:19:da:d3:d8:bf:b1:b8:de:c1:ea:48:ea:40:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:AB:B9:39:40:27:88:81:C4:92:0A:1E:B1:0F:8C:40:F9:BC:CF
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:24:5e:c0:58:ec:68:27:ec:97:d6:09:7e:42:d1:d8:62:f2:
cd:fa:4d:f1:f6:c0:02:31:e6:dc:17:9c:0b:a8:4f:a5:be:0c:
64:70:63:42:6b:93:30:43:bd:36:37:1b:81:d9:3b:5b:c9:2d:
9d:be:f0:29:4c:8f:a3:fe:c2:98:90:09:66:13:59:26:68:31:
3e:37:4d:a4:bb:ac:0b:ca:ea:45:1f:ee:75:89:25:20:15:81:
ef:71:1d:d7:29:aa:21:b9:7d:bf:15:b3:0a:e0:26:0e:1c:2a:
88:f6:0d:4f:e3:13:6a:94:04:8b:d2:6d:49:a8:d6:cc:a3:31:
aa:9c:1e:5b:1d:6e:47:bd:7a:bc:71:75:45:3d:02:a1:e9:bf:
a9:2c:ff:6a:36:42:53:33:61:2d:aa:1e:a1:be:aa:67:51:f2:
3f:9b:9e:23:6f:e9:1b:55:58:82:c5:45:08:6e:6e:c7:b0:b8:
d9:67:2f:99:36:d4:b3:f4:0b:88:0b:d0:32:26:25:ac:ce:38:
2d:54:22:3f:8f:34:e9:20:6a:41:0d:ca:60:4d:0c:e6:8d:d5:
04:4b:ea:e1:79:a3:81:79:98:41:86:a5:1c:64:8d:4c:5f:36:
53:1c:d0:23:cb:3a:87:85:37:bd:85:d8:d4:53:a7:b2:1b:b4:
71:6d:f9:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh/Zs+w3gruGAG6Jy+n5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1
NjVhODEwHhcNMjYwNzI4MjEwMTA0WhcNMjYwNzI5MjEwMTA0WjAzMTEwLwYDVQQD
Eyg1ZTgwYWJiOTM5NDAyNzg4ODFjNDkyMGExZWIxMGY4YzQwZjliY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02m3pkpfg5UPwsq9jHtuZbDxKrTg
DBlwgk8hyVQ1SBxIeswAni3MOOiokbLpzv7Se840xCmib25A/XkFYaSOF1WYDHXC
EuMyrC3xzxbsgnEzELjl7BMFRvxuuLFN3Vq4XaPs9div5FHMWGfvw4aauxIvjk3D
Bvo8WKvn7lMNatbMKl2OO5OxhWpJeSW3u7fhTCXyDj6mN/njX4kgyjUz9ChhX6NO
d9qnz4qEG+yQh7bvZ7q2N/FtMX7ayjpn/7CzTAStWWyH1urSt5sNoHX7M9DisOFQ
qmmH2RjT190zxWLNR6V9wjsEDpA/VD6V4LJk3Bna09i/sbjewepI6kDvSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6Aq7k5QCeIgcSSCh6xD4xA+bzPMB8GA1UdIwQY
MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt
MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw
LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCRewFjs
aCfsl9YJfkLR2GLyzfpN8fbAAjHm3BecC6hPpb4MZHBjQmuTMEO9Njcbgdk7W8kt
nb7wKUyPo/7CmJAJZhNZJmgxPjdNpLusC8rqRR/udYklIBWB73Ed1ymqIbl9vxWz
CuAmDhwqiPYNT+MTapQEi9JtSajWzKMxqpweWx1uR716vHF1RT0Coem/qSz/ajZC
UzNhLaoeob6qZ1HyP5ueI2/pG1VYgsVFCG5ux7C42WcvmTbUs/QLiAvQMiYlrM44
LVQiP4806SBqQQ3KYE0M5o3VBEvq4XmjgXmYQYalHGSNTF82UxzQI8s6h4U3vYXY
1FOnshu0cW35Hw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:15 2026 by rpki-client