Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: RhwjX6y1RUqd6GXPieMLfWDuNr1t+OlHQ/LTM7fs2I0=
Subject key identifier: 2C:02:08:63:E6:2E:90:AB:96:5E:2B:E3:C6:0B:50:B3:FE:34:BD:44
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019FABD1962E6B1EA82BB03434B1B30CD8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 19DF
Signing time: Wed 29 Jul 2026 03:01:07 +0000
Manifest this update: Wed 29 Jul 2026 03:01:07 +0000
Manifest next update: Thu 30 Jul 2026 03:01:07 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: LPfiivmXZAnwWXAetQmIUJElOaSwglh4l+fCM1Idpcw=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:96:2e:6b:1e:a8:2b:b0:34:34:b1:b3:0c:d8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jul 29 03:01:07 2026 GMT
Not After : Jul 30 03:01:07 2026 GMT
Subject: CN=2c020863e62e90ab965e2be3c60b50b3fe34bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:90:9e:a8:f9:a5:7f:99:41:8e:55:5d:55:
61:d0:67:26:c7:2a:43:cd:09:28:a8:c0:6c:f0:ac:
a4:06:d1:9d:09:66:c1:f3:9d:1c:7c:72:8c:7c:6c:
c1:c5:a2:cf:e7:1e:b5:68:9a:6f:45:d1:f6:31:e4:
98:4e:0e:d0:7e:31:f6:87:0c:05:77:cb:38:33:71:
40:ab:75:03:ec:9f:fd:d4:ac:24:39:9f:43:62:c6:
1c:77:be:d0:dc:20:98:54:e9:03:46:47:7a:47:f6:
20:bd:a3:b5:6c:14:05:cc:2a:61:9c:5b:23:85:bc:
ef:03:c5:c7:1b:44:16:66:18:0c:3a:25:ab:49:5d:
85:c8:21:a1:cf:91:9a:fa:b4:3f:cd:6a:6b:b4:b2:
b4:5f:08:b4:ca:a2:5c:2f:81:7c:fa:65:8f:b9:9d:
c4:2b:ae:4f:86:bb:f1:53:09:87:90:22:5e:e8:a2:
64:f8:28:ca:b3:bf:e1:1a:5d:eb:96:4b:88:f8:69:
0a:e3:ca:cb:ac:29:8e:2a:d4:c6:df:e7:96:23:fd:
38:bb:1a:d4:d6:63:36:81:c2:bc:9f:40:c9:13:24:
12:eb:82:f9:03:5a:3b:f4:e6:ac:76:67:f2:95:9b:
10:1b:9e:db:dd:ad:a3:76:53:b3:fc:5f:e7:69:26:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:08:63:E6:2E:90:AB:96:5E:2B:E3:C6:0B:50:B3:FE:34:BD:44
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:ee:96:19:bc:67:78:30:cf:5e:91:0d:05:d6:7b:91:91:
97:15:f2:d2:31:1d:7e:86:c6:a4:55:0f:32:9b:62:8e:c2:2b:
84:e7:c9:3e:b8:82:e1:2f:59:85:db:e2:fa:8a:83:dc:a7:82:
78:9e:b1:76:39:31:1a:72:84:1b:30:13:9b:5a:af:5d:e8:81:
3f:d4:ad:1f:7f:5a:2b:9b:8d:19:a0:fd:c1:73:a0:40:73:90:
7f:48:db:9f:c7:1b:be:20:4a:c9:a2:10:a1:34:d5:93:f2:97:
6b:06:4b:65:2f:fb:53:dc:d4:5c:78:10:86:a2:22:c9:60:00:
c9:c2:fe:3c:ab:ad:59:ce:a8:54:d9:96:7f:bf:06:fb:e9:ad:
a3:3f:91:ad:01:72:55:8e:40:5b:4f:85:d9:f8:3e:01:e9:0f:
bc:32:8e:1e:f9:f6:8f:6d:36:ac:59:62:24:ad:df:c2:dd:5e:
82:b7:82:00:37:93:ca:53:ce:f7:97:f2:f9:ff:a0:e9:4c:7b:
46:de:09:ac:5e:74:be:3d:ad:e8:ae:c3:72:6d:cd:56:0c:d7:
78:b9:b5:a5:9e:5e:65:9a:46:ec:be:84:fb:1a:50:2c:fb:ef:
1e:9a:8b:89:48:2b:9a:96:93:d8:cd:96:aa:20:fe:b0:d9:cf:
8f:0d:7b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0ZYuax6oK7A0NLGzDNjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjYwNzI5MDMwMTA3WhcNMjYwNzMwMDMwMTA3WjAzMTEwLwYDVQQD
EygyYzAyMDg2M2U2MmU5MGFiOTY1ZTJiZTNjNjBiNTBiM2ZlMzRiZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10yQnqj5pX+ZQY5VXVVh0GcmxypD
zQkoqMBs8KykBtGdCWbB850cfHKMfGzBxaLP5x61aJpvRdH2MeSYTg7QfjH2hwwF
d8s4M3FAq3UD7J/91KwkOZ9DYsYcd77Q3CCYVOkDRkd6R/YgvaO1bBQFzCphnFsj
hbzvA8XHG0QWZhgMOiWrSV2FyCGhz5Ga+rQ/zWprtLK0Xwi0yqJcL4F8+mWPuZ3E
K65PhrvxUwmHkCJe6KJk+CjKs7/hGl3rlkuI+GkK48rLrCmOKtTG3+eWI/04uxrU
1mM2gcK8n0DJEyQS64L5A1o79OasdmfylZsQG57b3a2jdlOz/F/naSY6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwCCGPmLpCrll4r48YLULP+NL1EMB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLvulhm8
Z3gwz16RDQXWe5GRlxXy0jEdfobGpFUPMptijsIrhOfJPriC4S9Zhdvi+oqD3KeC
eJ6xdjkxGnKEGzATm1qvXeiBP9StH39aK5uNGaD9wXOgQHOQf0jbn8cbviBKyaIQ
oTTVk/KXawZLZS/7U9zUXHgQhqIiyWAAycL+PKutWc6oVNmWf78G++mtoz+RrQFy
VY5AW0+F2fg+AekPvDKOHvn2j202rFliJK3fwt1egreCADeTylPO95fy+f+g6Ux7
Rt4JrF50vj2t6K7Dcm3NVgzXeLm1pZ5eZZpG7L6E+xpQLPvvHpqLiUgrmpaT2M2W
qiD+sNnPjw17FA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:18 2026 by rpki-client