Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: zNXXw87q7hmQ7iRrQqv0t2PfmRc0iYOlDRZr9eFNcsI=
Subject key identifier: 35:71:9C:F6:76:68:53:9E:41:D4:38:13:94:32:49:C0:BE:E2:D7:91
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019FAAF54FACD03FDF86C48E8CC10ECDACB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 23:00:31 +0000
Manifest this update: Tue 28 Jul 2026 23:00:31 +0000
Manifest next update: Wed 29 Jul 2026 23:00:31 +0000
Files and hashes: 1: 13v4LR-kEjAIRzbDQkbfPRC2xqA.roa (hash: I9za9QTYUmGMdQFI8DmW9yvA4iSaksBWoeOdAw7Bnjc=)
2: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: +JaqurOT+3lQc08Bny8qAiqvLnmEIETrKIMSzJvYe+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:4f:ac:d0:3f:df:86:c4:8e:8c:c1:0e:cd:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jul 28 23:00:31 2026 GMT
Not After : Jul 29 23:00:31 2026 GMT
Subject: CN=35719cf67668539e41d43813943249c0bee2d791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:5f:ad:b5:d7:39:b0:f1:c5:76:cc:41:ce:
14:06:6c:09:01:80:9f:3e:63:ec:51:b2:9c:e0:ec:
da:60:06:40:5d:9c:24:75:9e:b5:a4:e5:7d:5a:06:
1b:e2:bb:23:55:22:61:9b:3a:eb:b6:34:58:c9:11:
23:e3:37:3b:45:31:29:a7:48:dc:43:68:33:9b:48:
2e:14:99:09:47:97:45:83:a6:9d:7e:c1:c3:08:c7:
9f:91:ad:5c:20:79:9b:27:27:c6:1c:68:a5:95:89:
0f:32:92:87:91:52:37:b5:95:f0:e3:89:22:8a:27:
f5:85:b7:ec:6d:74:2d:d7:87:3d:44:b1:48:79:c8:
20:46:92:c3:79:f2:8a:cc:eb:5e:eb:ba:8c:41:33:
b2:d1:29:ed:cd:a1:60:fd:dc:1f:6e:bb:c8:6e:eb:
40:0d:a6:58:0c:2c:1b:de:03:8b:ee:d5:b6:14:ce:
14:32:55:c3:31:c4:40:e9:66:93:f4:d6:2b:74:3f:
01:6d:52:aa:e1:2b:69:67:ad:f6:f5:0b:f3:fa:35:
ab:f6:73:9a:16:33:f6:78:4e:3d:47:b3:bd:c2:c5:
98:d3:79:0b:2f:7b:30:a2:fa:be:93:02:6c:90:05:
b4:83:fc:89:b0:1d:14:5b:91:be:8a:ec:d4:49:76:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:71:9C:F6:76:68:53:9E:41:D4:38:13:94:32:49:C0:BE:E2:D7:91
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:42:c6:30:ec:1c:62:41:ef:a5:d3:bd:a1:d7:f9:85:0f:
4e:72:cb:62:67:c1:19:26:cc:ea:97:15:9a:55:f1:e0:b6:50:
8f:f7:d9:51:8e:32:c8:8d:0a:ef:d9:ab:a6:5c:1c:aa:b8:f6:
49:28:d1:2c:51:d6:1b:cb:bf:fd:78:78:ca:a5:4a:28:10:8a:
d5:2c:ff:e4:92:95:f9:72:d1:ab:51:32:98:eb:dc:c0:23:7b:
56:1c:2c:b6:13:86:1e:f7:4f:31:bf:61:0f:d2:98:d6:8e:c8:
52:d7:7b:b7:74:53:8b:2a:9f:a6:9a:cd:89:30:2c:0b:30:a0:
cc:0f:d4:59:c1:30:9d:5a:9c:89:58:0b:bf:26:df:89:9f:6a:
cc:2e:1e:6f:c2:40:80:8b:e8:36:63:68:1e:35:68:a5:88:5a:
12:a5:34:1d:d3:40:32:4f:13:db:b6:de:4b:07:16:3c:a3:c9:
51:b8:d5:39:d1:e5:80:27:d8:f5:c8:71:fb:69:f0:ff:07:16:
06:8c:d7:6f:98:d9:8e:15:8c:12:d0:53:45:7a:db:29:6f:a1:
cc:96:32:ac:f1:fc:03:b9:07:c6:00:38:77:a2:90:75:23:65:
92:0a:8b:1f:7c:57:6f:9d:03:4b:3f:e0:a6:d4:2f:46:e8:1e:
6b:1f:e4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9U+s0D/fhsSOjMEOzayxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwNzI4MjMwMDMxWhcNMjYwNzI5MjMwMDMxWjAzMTEwLwYDVQQD
EygzNTcxOWNmNjc2Njg1MzllNDFkNDM4MTM5NDMyNDljMGJlZTJkNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvlfrbXXObDxxXbMQc4UBmwJAYCf
PmPsUbKc4OzaYAZAXZwkdZ61pOV9WgYb4rsjVSJhmzrrtjRYyREj4zc7RTEpp0jc
Q2gzm0guFJkJR5dFg6adfsHDCMefka1cIHmbJyfGHGillYkPMpKHkVI3tZXw44ki
iif1hbfsbXQt14c9RLFIecggRpLDefKKzOte67qMQTOy0SntzaFg/dwfbrvIbutA
DaZYDCwb3gOL7tW2FM4UMlXDMcRA6WaT9NYrdD8BbVKq4StpZ6329Qvz+jWr9nOa
FjP2eE49R7O9wsWY03kLL3swovq+kwJskAW0g/yJsB0UW5G+iuzUSXaEjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVxnPZ2aFOeQdQ4E5QyScC+4teRMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdZCxjDs
HGJB76XTvaHX+YUPTnLLYmfBGSbM6pcVmlXx4LZQj/fZUY4yyI0K79mrplwcqrj2
SSjRLFHWG8u//Xh4yqVKKBCK1Sz/5JKV+XLRq1EymOvcwCN7VhwsthOGHvdPMb9h
D9KY1o7IUtd7t3RTiyqfpprNiTAsCzCgzA/UWcEwnVqciVgLvybfiZ9qzC4eb8JA
gIvoNmNoHjVopYhaEqU0HdNAMk8T27beSwcWPKPJUbjVOdHlgCfY9chx+2nw/wcW
BozXb5jZjhWMEtBTRXrbKW+hzJYyrPH8A7kHxgA4d6KQdSNlkgqLH3xXb50DSz/g
ptQvRugeax/kAg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:43 2026 by rpki-client