Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: G6mB6lOSBVuT+eOqqMubJVxYU2DkQdct56GhTehDokw=
Subject key identifier: 7C:BE:52:D7:30:9D:ED:52:56:44:08:DB:1F:BD:57:DD:63:D2:36:CD
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019FAB9A8C61D605DF67DCBE6ED368EFCA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:01:00 +0000
Manifest this update: Wed 29 Jul 2026 02:01:00 +0000
Manifest next update: Thu 30 Jul 2026 02:01:00 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: QAZ+bt73rTnvvuB+DGv84q4FHRZ+8I5WCi5JbWCtr5w=)
3: hbeIEnlJLGCUvc-bfFDQtYlNuoI.roa (hash: lsxRlcpEOwKSepvmoUR1XtdYnRnB8rc4Z/mYeHXQHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:8c:61:d6:05:df:67:dc:be:6e:d3:68:ef:ca:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jul 29 02:01:00 2026 GMT
Not After : Jul 30 02:01:00 2026 GMT
Subject: CN=7cbe52d7309ded52564408db1fbd57dd63d236cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:aa:b0:dd:b2:90:22:2e:d2:e6:cb:e0:d6:
11:b4:f5:74:19:13:6e:8e:f7:ac:81:f8:95:d9:8c:
c6:2e:f2:0e:fd:2f:0e:e6:bb:81:3b:ba:a5:a8:78:
17:ad:e7:30:b9:7a:b3:72:69:95:a9:2e:60:15:a5:
07:e8:21:a2:3d:e4:db:1e:cb:55:c8:07:68:95:c5:
31:d2:ed:44:a5:3e:2e:b4:7f:c8:d3:64:20:f7:b1:
a3:95:33:47:fc:f1:d0:af:e2:2a:b3:bf:2c:5d:98:
14:5a:c4:7b:aa:0f:3b:f8:22:9d:6f:e2:b1:ea:c0:
b1:ac:a6:e5:e9:aa:e5:79:4b:3a:b5:00:1b:eb:d4:
5e:13:0b:d3:51:26:8a:1f:87:a2:d2:d9:ae:3c:cb:
a9:46:27:cb:ae:c1:4c:5b:f3:29:d4:bb:40:48:f0:
4b:14:bc:e2:ab:72:d3:10:61:ca:df:db:62:3f:aa:
ef:70:72:72:5e:0b:ce:84:50:99:46:0f:54:57:4d:
48:77:7d:56:c8:55:f3:23:d4:c1:d8:b0:7a:64:66:
5d:78:c3:14:cf:dc:75:fd:c5:9d:8b:12:f9:48:40:
5f:c5:e5:b3:6a:55:ab:19:eb:4f:39:c2:cf:ea:3d:
e5:ba:6a:6b:a0:d7:9c:78:b5:25:d6:15:27:cf:35:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:52:D7:30:9D:ED:52:56:44:08:DB:1F:BD:57:DD:63:D2:36:CD
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8a:89:2d:76:a8:c9:71:2e:05:58:74:0c:1b:e4:09:66:91:
1e:39:3c:84:a1:d1:19:ba:26:f7:fd:ea:2e:22:cd:54:5b:f8:
ac:52:e7:d1:2f:bd:6d:76:b6:4d:35:6a:fc:64:1b:63:0c:dc:
db:e3:b7:90:bf:b4:09:d4:35:6d:de:92:b0:0f:13:a9:e7:3f:
6d:af:44:20:0e:69:bf:18:0e:36:5d:42:8b:7a:78:72:35:29:
33:93:57:64:ce:9e:e5:11:a9:2d:24:73:29:f1:56:41:38:d3:
f9:04:bc:bb:b8:45:18:9f:a4:a6:9b:a6:ab:a5:08:fb:b4:e1:
71:73:97:59:24:bb:72:d6:6b:00:22:d5:42:a1:90:4b:b5:0a:
17:dc:c1:db:76:f8:0d:e4:99:ba:b3:58:ba:06:af:2f:15:48:
8d:82:66:76:57:85:a5:67:2b:f4:2b:2b:b6:82:a8:9d:d3:24:
c1:9a:08:3c:7a:50:0d:07:b6:57:e9:94:a4:62:c3:f0:3d:63:
98:5f:a7:95:8e:5b:58:8a:ce:93:a0:44:1e:ee:9e:ec:5d:37:
b8:32:2d:7e:8f:bf:e1:f7:35:09:64:3b:df:06:d5:1b:cf:4e:
a5:5c:7e:fd:1a:f2:7f:3a:20:6e:52:2e:c3:77:27:cc:87:d3:
4d:ff:af:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmoxh1gXfZ9y+btNo78pFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj
MGFjYTYwHhcNMjYwNzI5MDIwMTAwWhcNMjYwNzMwMDIwMTAwWjAzMTEwLwYDVQQD
Eyg3Y2JlNTJkNzMwOWRlZDUyNTY0NDA4ZGIxZmJkNTdkZDYzZDIzNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08aqsN2ykCIu0ubL4NYRtPV0GRNu
jvesgfiV2YzGLvIO/S8O5ruBO7qlqHgXrecwuXqzcmmVqS5gFaUH6CGiPeTbHstV
yAdolcUx0u1EpT4utH/I02Qg97GjlTNH/PHQr+Iqs78sXZgUWsR7qg87+CKdb+Kx
6sCxrKbl6arleUs6tQAb69ReEwvTUSaKH4ei0tmuPMupRifLrsFMW/Mp1LtASPBL
FLziq3LTEGHK39tiP6rvcHJyXgvOhFCZRg9UV01Id31WyFXzI9TB2LB6ZGZdeMMU
z9x1/cWdixL5SEBfxeWzalWrGetPOcLP6j3lumproNeceLUl1hUnzzVa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy+Utcwne1SVkQI2x+9V91j0jbNMB8GA1UdIwQY
MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt
OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh
LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIqJLXao
yXEuBVh0DBvkCWaRHjk8hKHRGbom9/3qLiLNVFv4rFLn0S+9bXa2TTVq/GQbYwzc
2+O3kL+0CdQ1bd6SsA8Tqec/ba9EIA5pvxgONl1Ci3p4cjUpM5NXZM6e5RGpLSRz
KfFWQTjT+QS8u7hFGJ+kppumq6UI+7ThcXOXWSS7ctZrACLVQqGQS7UKF9zB23b4
DeSZurNYugavLxVIjYJmdleFpWcr9CsrtoKondMkwZoIPHpQDQe2V+mUpGLD8D1j
mF+nlY5bWIrOk6BEHu6e7F03uDItfo+/4fc1CWQ73wbVG89OpVx+/RryfzogblIu
w3cnzIfTTf+vfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:31:02 2026 by rpki-client