Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft (raw, json)
Hash identifier: B+IbO4FsqAo660bUnJvQJcQl9QR9o+CECfjWlohTZAA=
Subject key identifier: 62:32:2C:47:D3:D9:2E:86:3E:D1:CF:60:CA:90:A7:18:CE:E2:5F:F5
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 019FAA885B9BB5827C668EAD945450EC31D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:30 +0000
Manifest this update: Tue 28 Jul 2026 21:01:30 +0000
Manifest next update: Wed 29 Jul 2026 21:01:30 +0000
Files and hashes: 1: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (hash: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=)
2: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl (hash: /KsaKhNvh42E1QwaHQtGU3G5LflqQnWkZOD0HH8i6H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:5b:9b:b5:82:7c:66:8e:ad:94:54:50:ec:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Jul 28 21:01:30 2026 GMT
Not After : Jul 29 21:01:30 2026 GMT
Subject: CN=62322c47d3d92e863ed1cf60ca90a718cee25ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:fa:4e:c7:a3:0f:75:f5:51:b5:e4:df:c3:00:
ae:a7:18:d9:5c:66:0c:97:5a:7a:d3:36:e7:d4:8c:
ab:9a:5d:61:de:96:f5:81:a5:cc:46:ff:2b:0f:8f:
1e:11:17:d5:49:ee:43:a2:2f:49:db:97:2e:82:5b:
1a:e7:bd:1e:7d:e8:15:2d:74:21:b9:ef:3a:e6:4e:
b4:3c:a8:12:6e:86:89:fd:9e:d5:d7:16:38:32:d2:
09:31:42:8f:6a:3b:c4:92:d9:78:9f:94:9b:fe:b0:
bb:e0:da:56:7d:04:46:99:89:66:32:c5:09:df:87:
b6:df:be:a2:1d:07:68:60:19:f0:96:09:1e:53:be:
0b:a2:9d:68:b4:17:ca:43:6b:e7:56:1f:fb:a8:26:
e9:4a:18:59:03:df:bc:f2:73:fa:d0:e2:9a:77:7b:
28:10:dc:9e:3e:ea:0a:ac:6e:30:ed:6a:a3:d1:96:
47:f4:a3:dc:cf:ec:7c:20:a9:8f:08:ba:96:12:9f:
8c:28:d9:d2:d1:84:d0:a4:b0:36:24:9f:e9:2f:df:
78:73:ae:5b:ff:1c:2b:72:12:a0:72:e9:5c:0c:45:
eb:0e:53:a2:c6:25:b2:7f:ca:bd:bb:68:ac:dd:ba:
bf:13:1c:25:e8:75:3a:3d:2f:6b:02:8b:33:5c:cc:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:32:2C:47:D3:D9:2E:86:3E:D1:CF:60:CA:90:A7:18:CE:E2:5F:F5
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c7:5f:40:d2:d0:73:9c:db:13:2a:01:4e:19:51:bb:01:f8:
d2:41:c4:8f:3e:27:50:b4:e2:48:cf:4f:09:39:11:01:95:f2:
2f:cd:b2:5b:7e:37:f9:b8:a0:af:00:c5:99:91:40:de:87:9b:
ee:d9:99:4a:7b:66:63:a4:0b:d7:a6:c4:22:f9:6d:77:e1:6a:
61:42:6d:b8:22:da:e3:ee:82:83:b1:6f:d8:dc:c9:8d:5c:e0:
9c:35:50:30:fa:33:46:73:97:89:fa:f8:e0:d5:d7:d6:f1:8e:
6a:59:0c:40:2f:cf:62:11:f3:7b:72:e3:03:a7:8d:7b:56:0e:
d1:0d:6a:f7:5f:fc:08:37:ad:56:c0:1c:1f:b8:14:92:66:d4:
ef:ee:cf:fd:23:de:51:69:93:61:2e:dd:00:02:c6:de:f2:cc:
17:34:59:55:d6:e2:47:9c:af:8b:b7:5e:17:cf:e5:51:a1:da:
eb:57:aa:0e:46:15:08:6f:c6:8d:83:c7:3e:27:e4:df:a9:b4:
65:be:ed:c5:90:20:33:a4:ea:12:7e:2b:6d:48:bc:59:07:51:
f7:de:11:2d:ae:87:d9:8b:5c:1f:cc:c3:d1:5a:be:b7:e2:c4:
5c:26:b9:09:a5:17:78:de:de:9b:d7:ff:f7:fb:1b:a0:aa:e9:
35:b6:a1:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiFubtYJ8Zo6tlFRQ7DHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTNiMzNhYTI3YjYzODQ2MjI1MjBhNjE5YTc5OTlmMzRi
YmUxYzkwHhcNMjYwNzI4MjEwMTMwWhcNMjYwNzI5MjEwMTMwWjAzMTEwLwYDVQQD
Eyg2MjMyMmM0N2QzZDkyZTg2M2VkMWNmNjBjYTkwYTcxOGNlZTI1ZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/PpOx6MPdfVRteTfwwCupxjZXGYM
l1p60zbn1Iyrml1h3pb1gaXMRv8rD48eERfVSe5Doi9J25cuglsa570efegVLXQh
ue865k60PKgSboaJ/Z7V1xY4MtIJMUKPajvEktl4n5Sb/rC74NpWfQRGmYlmMsUJ
34e2376iHQdoYBnwlgkeU74Lop1otBfKQ2vnVh/7qCbpShhZA9+88nP60OKad3so
ENyePuoKrG4w7Wqj0ZZH9KPcz+x8IKmPCLqWEp+MKNnS0YTQpLA2JJ/pL994c65b
/xwrchKgculcDEXrDlOixiWyf8q9u2is3bq/Exwl6HU6PS9rAoszXMxFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIyLEfT2S6GPtHPYMqQpxjO4l/1MB8GA1UdIwQY
MBaAFKdTszqie2OEYiUgphmnmZ80u+HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFPek9xSjdZNFJpSlNDbUdhZVpuelM3NGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQt
N2NjYTY3NzM2MDFhLzEvcDFPek9xSjdZNFJpSlNDbUdhZVpuelM3NGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQtN2NjYTY3NzM2MDFh
LzEvcDFPek9xSjdZNFJpSlNDbUdhZVpuelM3NGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8dfQNLQ
c5zbEyoBThlRuwH40kHEjz4nULTiSM9PCTkRAZXyL82yW343+bigrwDFmZFA3oeb
7tmZSntmY6QL16bEIvltd+FqYUJtuCLa4+6Cg7Fv2NzJjVzgnDVQMPozRnOXifr4
4NXX1vGOalkMQC/PYhHze3LjA6eNe1YO0Q1q91/8CDetVsAcH7gUkmbU7+7P/SPe
UWmTYS7dAALG3vLMFzRZVdbiR5yvi7deF8/lUaHa61eqDkYVCG/GjYPHPifk36m0
Zb7txZAgM6TqEn4rbUi8WQdR994RLa6H2YtcH8zD0Vq+t+LEXCa5CaUXeN7em9f/
9/sboKrpNbahOQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:51 2026 by rpki-client