Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: +U0PJyOkGce1GCZpAp0Xx5EdV3UBPa+M5QHEN3+pDns=
Subject key identifier: E2:6D:F8:24:58:26:20:FA:8D:BC:98:98:AC:9B:7B:72:F9:76:96:76
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 019FA8D02DDF071A247341B012A4C9F3B7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 17B1
Signing time: Tue 28 Jul 2026 13:00:43 +0000
Manifest this update: Tue 28 Jul 2026 13:00:43 +0000
Manifest next update: Wed 29 Jul 2026 13:00:43 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: K4CXB1vXs5jsZ4/Z7KiI2KUf20Pt5NQusooxKRHVTXI=)
2: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (hash: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ=)
3: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (hash: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:2d:df:07:1a:24:73:41:b0:12:a4:c9:f3:b7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Jul 28 13:00:43 2026 GMT
Not After : Jul 29 13:00:43 2026 GMT
Subject: CN=e26df824582620fa8dbc9898ac9b7b72f9769676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:fb:20:05:1b:43:eb:e1:c0:8c:84:fb:bf:
fc:ba:48:df:f1:49:ab:28:48:79:77:8f:1e:4d:c8:
af:69:96:9c:7e:43:a1:f7:ba:07:ea:9f:13:6f:bb:
43:37:f5:28:fb:a2:9d:6c:fb:3d:66:ef:37:5d:01:
e4:2f:9d:c4:0b:8d:d8:ff:fd:8e:31:4b:4e:49:7c:
d6:41:35:39:ec:2e:30:77:53:65:d4:32:33:24:4e:
92:e5:cd:98:85:88:54:42:fd:9c:48:e3:a0:59:40:
e2:a9:ba:42:5e:46:86:5d:ea:fc:29:26:cf:af:30:
d4:42:a6:b1:30:dd:de:21:bb:b3:9d:25:e3:eb:58:
20:8f:98:97:60:0a:ae:c3:80:9d:cb:56:9a:f8:c0:
21:7d:f1:54:74:bc:61:79:e7:30:51:38:25:60:6e:
e4:08:2f:4e:72:7e:60:a9:da:4b:48:dc:f7:69:ef:
60:9a:43:e7:fc:25:fd:a2:49:37:f4:5a:91:cb:b6:
8a:8d:5e:ae:2e:2b:6b:81:99:d8:db:f2:d4:56:f3:
07:6a:8c:05:de:23:38:4e:ee:99:38:f0:33:6c:64:
4e:d3:83:4e:2d:c0:96:3b:57:30:62:c6:df:76:0c:
c5:48:d2:75:a4:23:94:ae:15:a8:33:b8:8e:61:bd:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6D:F8:24:58:26:20:FA:8D:BC:98:98:AC:9B:7B:72:F9:76:96:76
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:48:2e:65:39:46:43:f5:bf:6e:e4:b1:25:a4:38:20:20:
bf:13:08:6b:c5:6a:d3:e2:7e:40:97:96:ed:d9:0e:5f:d8:7a:
b3:7f:4d:49:1f:f4:b6:b1:c3:cd:f5:08:48:ca:56:58:b5:22:
c7:21:3e:68:b3:64:e2:ed:57:9f:fc:7f:f5:d7:ce:60:17:fa:
fd:08:00:d8:1c:87:de:40:31:34:a3:ef:13:e4:dc:b6:3a:43:
4a:c1:23:c9:30:36:72:e9:17:46:31:38:f8:0d:1a:fb:22:b7:
07:b2:e4:e5:e0:c8:ff:25:27:56:2d:1f:ab:d0:70:11:c0:5e:
3e:37:4b:62:f7:94:6c:82:32:14:bc:22:b8:db:b4:0d:a9:99:
34:55:1b:5e:6b:d7:37:c7:95:74:d7:ed:45:87:1f:28:d1:db:
c0:2a:35:a9:b5:3b:a0:5b:0f:63:d9:b5:18:fc:e1:8d:30:a9:
12:bd:f2:bf:60:b9:96:af:97:60:ee:c1:e2:ff:e3:a1:21:87:
f9:d7:a8:cb:cd:a2:23:7a:0d:20:8d:96:f5:29:f6:ed:55:3b:
4f:1a:cc:7c:39:5b:8c:7a:af:90:f2:ce:14:49:8f:1f:68:b9:
ca:93:a3:df:a1:61:1d:2b:59:cc:06:58:70:d3:5c:bf:20:5d:
28:d8:3e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0C3fBxokc0GwEqTJ87e2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjViZDIxYzY4MzIwN2RhMGMzOWZiMzc5ODUzNWFmNDll
MGJmZjUwHhcNMjYwNzI4MTMwMDQzWhcNMjYwNzI5MTMwMDQzWjAzMTEwLwYDVQQD
EyhlMjZkZjgyNDU4MjYyMGZhOGRiYzk4OThhYzliN2I3MmY5NzY5Njc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWD7IAUbQ+vhwIyE+7/8ukjf8Umr
KEh5d48eTcivaZacfkOh97oH6p8Tb7tDN/Uo+6KdbPs9Zu83XQHkL53EC43Y//2O
MUtOSXzWQTU57C4wd1Nl1DIzJE6S5c2YhYhUQv2cSOOgWUDiqbpCXkaGXer8KSbP
rzDUQqaxMN3eIbuznSXj61ggj5iXYAquw4Cdy1aa+MAhffFUdLxheecwUTglYG7k
CC9Ocn5gqdpLSNz3ae9gmkPn/CX9okk39FqRy7aKjV6uLitrgZnY2/LUVvMHaowF
3iM4Tu6ZOPAzbGRO04NOLcCWO1cwYsbfdgzFSNJ1pCOUrhWoM7iOYb3n/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJt+CRYJiD6jbyYmKybe3L5dpZ2MB8GA1UdIwQY
MBaAFA9lvSHGgyB9oMOfs3mFNa9J4L/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgt
ZTIzZjEwZTRiOTFjLzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgtZTIzZjEwZTRiOTFj
LzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOlILmU5
RkP1v27ksSWkOCAgvxMIa8Vq0+J+QJeW7dkOX9h6s39NSR/0trHDzfUISMpWWLUi
xyE+aLNk4u1Xn/x/9dfOYBf6/QgA2ByH3kAxNKPvE+TctjpDSsEjyTA2cukXRjE4
+A0a+yK3B7Lk5eDI/yUnVi0fq9BwEcBePjdLYveUbIIyFLwiuNu0DamZNFUbXmvX
N8eVdNftRYcfKNHbwCo1qbU7oFsPY9m1GPzhjTCpEr3yv2C5lq+XYO7B4v/joSGH
+deoy82iI3oNII2W9Sn27VU7TxrMfDlbjHqvkPLOFEmPH2i5ypOj36FhHStZzAZY
cNNcvyBdKNg+7Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:19 2026 by rpki-client