Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: 1twAF/aTrbL6pQ2l3AB/e25EOy6Qyg7lj2B7j6MYcGo=
Subject key identifier: B9:CA:52:20:44:06:37:2A:9D:35:CC:17:E3:BD:F4:6B:4E:A1:E3:DD
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019FAD52051A2432A9A67C55B65F73F54067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0A29
Signing time: Wed 29 Jul 2026 10:01:01 +0000
Manifest this update: Wed 29 Jul 2026 10:01:01 +0000
Manifest next update: Thu 30 Jul 2026 10:01:01 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: xhs+eB4i6PNA7atlsdsxCCIzgwQJF2RLIz1nH/inr8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:05:1a:24:32:a9:a6:7c:55:b6:5f:73:f5:40:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Jul 29 10:01:01 2026 GMT
Not After : Jul 30 10:01:01 2026 GMT
Subject: CN=b9ca52204406372a9d35cc17e3bdf46b4ea1e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:cc:ac:73:b9:46:f1:b2:d2:90:a9:de:b0:
e3:ac:38:42:c1:f4:a8:b3:9a:bc:8a:d9:53:03:b8:
2c:22:48:32:f8:60:eb:7c:a2:0b:3d:0c:3f:11:a5:
e2:e1:de:57:00:bf:a6:a2:b6:54:d9:7c:b1:e7:b3:
8f:32:86:07:7f:7a:c6:31:99:59:13:e2:0a:04:f9:
02:d1:d7:3e:87:e8:62:6d:35:9e:c7:17:46:4f:79:
eb:4c:bf:a7:53:1f:a5:20:a3:f3:ba:fa:12:32:d6:
43:31:8d:df:0f:1a:9c:f4:d9:59:cd:ac:3f:be:95:
86:55:74:f4:cb:5e:55:32:0b:6b:d3:92:bd:a2:57:
04:6a:81:28:40:10:b7:b3:fc:0a:5a:3f:e1:38:26:
e3:2f:9e:99:ba:dc:e4:51:6c:0f:4c:7c:06:1e:f4:
30:ff:e8:e0:e4:e9:e6:38:79:ee:43:4c:07:72:e8:
7d:cb:a4:86:49:b5:b3:92:ef:bb:3c:a1:ec:ef:6b:
37:fb:68:1d:a8:e7:af:8e:91:ee:c4:a0:fa:fe:e4:
a7:0c:1e:5d:05:ea:c1:9e:55:17:ed:ae:c0:6b:ec:
27:d1:1c:c0:ea:48:f1:bf:b2:39:d2:c6:0e:ba:73:
c6:4e:51:ab:74:56:89:db:1d:4e:af:cf:89:42:f9:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:52:20:44:06:37:2A:9D:35:CC:17:E3:BD:F4:6B:4E:A1:E3:DD
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:67:d7:8d:e9:59:bc:31:76:26:c2:a7:5d:bf:15:bf:ef:96:
e6:f3:ad:dd:7a:b4:74:34:89:bc:24:df:c4:f2:3c:7b:62:1e:
0b:26:53:74:02:8e:18:33:99:9b:c7:9e:6f:fc:b4:99:f4:3c:
d6:26:d3:fe:b9:28:38:d5:17:f5:98:47:81:3e:8c:3e:fb:44:
77:13:75:54:41:ce:aa:1c:ae:f4:db:7e:ff:26:95:1e:f7:19:
a3:9b:9a:80:5e:cf:db:96:7c:81:7f:05:66:c8:91:92:d1:f6:
9f:d5:53:db:a4:d6:b2:dc:36:06:92:69:e5:73:6b:75:35:e8:
86:1f:c6:bf:04:e1:5e:1a:fb:ef:f6:3d:7f:c2:56:71:de:83:
60:b5:b3:a2:82:a9:0c:fa:a6:b7:b7:de:36:56:bc:15:a2:20:
39:71:a2:7a:f4:e1:8c:5e:d3:50:33:11:70:b3:78:32:30:61:
1b:1c:c0:d1:f6:a1:bb:15:b5:c4:d0:b0:17:83:6c:5a:45:af:
0d:f3:4a:c7:e4:89:98:42:bc:a0:47:f5:d5:ec:ba:24:9d:09:
d6:44:fd:15:b3:58:a5:b5:29:66:d7:09:d7:aa:e4:b7:f1:f6:
7d:25:9f:ce:02:3c:2b:04:a1:3a:7f:cb:57:c5:78:85:c7:19:
7d:05:15:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUgUaJDKppnxVtl9z9UBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm
N2ZlMDIwHhcNMjYwNzI5MTAwMTAxWhcNMjYwNzMwMTAwMTAxWjAzMTEwLwYDVQQD
EyhiOWNhNTIyMDQ0MDYzNzJhOWQzNWNjMTdlM2JkZjQ2YjRlYTFlM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycfMrHO5RvGy0pCp3rDjrDhCwfSo
s5q8itlTA7gsIkgy+GDrfKILPQw/EaXi4d5XAL+morZU2Xyx57OPMoYHf3rGMZlZ
E+IKBPkC0dc+h+hibTWexxdGT3nrTL+nUx+lIKPzuvoSMtZDMY3fDxqc9NlZzaw/
vpWGVXT0y15VMgtr05K9olcEaoEoQBC3s/wKWj/hOCbjL56ZutzkUWwPTHwGHvQw
/+jg5OnmOHnuQ0wHcuh9y6SGSbWzku+7PKHs72s3+2gdqOevjpHuxKD6/uSnDB5d
BerBnlUX7a7Aa+wn0RzA6kjxv7I50sYOunPGTlGrdFaJ2x1Or8+JQvlAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnKUiBEBjcqnTXMF+O99GtOoePdMB8GA1UdIwQY
MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt
ZDVhNzg1NTE3YmJmLzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm
LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWfXjelZ
vDF2JsKnXb8Vv++W5vOt3Xq0dDSJvCTfxPI8e2IeCyZTdAKOGDOZm8eeb/y0mfQ8
1ibT/rkoONUX9ZhHgT6MPvtEdxN1VEHOqhyu9Nt+/yaVHvcZo5uagF7P25Z8gX8F
ZsiRktH2n9VT26TWstw2BpJp5XNrdTXohh/GvwThXhr77/Y9f8JWcd6DYLWzooKp
DPqmt7feNla8FaIgOXGievThjF7TUDMRcLN4MjBhGxzA0fahuxW1xNCwF4NsWkWv
DfNKx+SJmEK8oEf11ey6JJ0J1kT9FbNYpbUpZtcJ16rkt/H2fSWfzgI8KwShOn/L
V8V4hccZfQUVKA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:22:52 2026 by rpki-client