Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: S5vIO+rd7xsmbLF9mJnroRARcv9D3YKog6++nUEqAnk=
Subject key identifier: C2:56:83:67:53:C6:6B:6B:91:02:33:0C:1F:D2:A9:D5:B9:CA:38:90
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019FA93E19BFB51318E056442085A04BA652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0FDB
Signing time: Tue 28 Jul 2026 15:00:47 +0000
Manifest this update: Tue 28 Jul 2026 15:00:47 +0000
Manifest next update: Wed 29 Jul 2026 15:00:47 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: EDn6UhN4JkS+WbBItX6WlX5mL/JfC5v8tupgbNfreJU=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:19:bf:b5:13:18:e0:56:44:20:85:a0:4b:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jul 28 15:00:47 2026 GMT
Not After : Jul 29 15:00:47 2026 GMT
Subject: CN=c256836753c66b6b9102330c1fd2a9d5b9ca3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:1c:b9:ac:90:a1:ed:df:77:74:dc:52:de:
32:a0:f7:d2:87:34:e0:75:b7:25:7c:cb:c4:c0:8a:
cc:b3:86:81:99:32:66:fb:10:79:35:f5:94:dd:c6:
0e:13:1b:0c:2a:15:3c:67:3b:ae:f2:eb:0b:24:54:
74:15:b9:41:84:57:ba:e6:7a:27:78:7b:c7:70:74:
b1:2c:df:b8:06:83:f6:13:a6:f4:7b:3a:93:9d:44:
7d:db:9a:a9:69:e4:49:4a:b2:91:88:d8:a5:3e:63:
c4:05:32:1b:f6:a9:d0:2d:26:6c:0b:08:6e:c2:3f:
de:f8:78:46:c2:30:f5:50:94:70:78:2e:95:86:04:
fe:b7:c0:f0:cf:e1:52:4d:9d:ae:54:6c:c5:7e:93:
75:48:77:90:48:29:98:d8:1c:c8:ac:fe:a0:a3:6e:
3c:40:65:e1:9a:7a:10:f7:31:a1:6c:9f:03:37:d4:
63:71:14:a3:84:b4:5f:55:da:9f:b7:f7:bd:0c:51:
d0:6e:38:28:2f:94:e4:66:74:94:b1:0d:81:9f:45:
b3:b0:b0:29:43:e2:af:79:b7:0c:21:bc:4a:24:a5:
4b:72:d4:c9:1d:30:c4:fa:bd:15:00:1e:97:dc:38:
d7:cb:d0:5e:8c:32:58:d3:11:e7:a4:1e:e3:77:05:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:56:83:67:53:C6:6B:6B:91:02:33:0C:1F:D2:A9:D5:B9:CA:38:90
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:78:7a:aa:c3:5b:e0:93:c5:44:7d:43:07:00:2f:25:7f:de:
a6:7f:69:ba:fc:f2:a6:c9:57:fa:68:1c:38:47:bb:6b:c6:ad:
8c:86:f3:6a:5b:1f:e1:ad:cc:78:41:72:96:57:f4:b9:ff:c5:
f8:2c:8d:4f:f4:f4:5e:6b:7f:b2:36:09:23:0d:59:43:69:76:
5d:d0:ed:ad:3b:6d:39:9c:e6:e0:43:76:65:93:8f:8c:7d:30:
44:d7:c4:cb:69:35:fd:f6:e9:9d:67:db:d1:8e:ce:1d:44:c2:
6c:3b:5f:18:39:9b:bd:8e:7e:48:ec:49:a2:c3:7b:8c:b4:f3:
0b:8d:08:2f:71:26:03:51:cc:cd:4b:14:6d:21:c4:d0:a0:7f:
19:dc:6a:c4:05:af:ed:f4:b5:0b:7b:94:da:84:ce:57:be:11:
a7:eb:7f:fb:1a:cf:23:d1:d4:d2:7c:03:a4:d8:78:4a:9c:82:
61:0f:83:2e:87:4a:67:e5:8e:23:26:83:bd:ea:b5:14:33:5a:
64:7a:d7:c3:31:47:c4:fd:fc:57:f8:2c:db:12:57:9e:af:52:
18:c5:db:65:b7:9c:64:94:86:16:32:f8:19:56:a6:33:90:fd:
e3:d5:a6:84:30:f3:d9:c1:7a:ec:7e:c2:c5:f6:69:29:b2:44:
07:57:36:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPhm/tRMY4FZEIIWgS6ZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjYwNzI4MTUwMDQ3WhcNMjYwNzI5MTUwMDQ3WjAzMTEwLwYDVQQD
EyhjMjU2ODM2NzUzYzY2YjZiOTEwMjMzMGMxZmQyYTlkNWI5Y2EzODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12scuayQoe3fd3TcUt4yoPfShzTg
dbclfMvEwIrMs4aBmTJm+xB5NfWU3cYOExsMKhU8Zzuu8usLJFR0FblBhFe65non
eHvHcHSxLN+4BoP2E6b0ezqTnUR925qpaeRJSrKRiNilPmPEBTIb9qnQLSZsCwhu
wj/e+HhGwjD1UJRweC6VhgT+t8Dwz+FSTZ2uVGzFfpN1SHeQSCmY2BzIrP6go248
QGXhmnoQ9zGhbJ8DN9RjcRSjhLRfVdqft/e9DFHQbjgoL5TkZnSUsQ2Bn0WzsLAp
Q+KvebcMIbxKJKVLctTJHTDE+r0VAB6X3DjXy9BejDJY0xHnpB7jdwUF7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJWg2dTxmtrkQIzDB/SqdW5yjiQMB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXh6qsNb
4JPFRH1DBwAvJX/epn9puvzypslX+mgcOEe7a8atjIbzalsf4a3MeEFyllf0uf/F
+CyNT/T0Xmt/sjYJIw1ZQ2l2XdDtrTttOZzm4EN2ZZOPjH0wRNfEy2k1/fbpnWfb
0Y7OHUTCbDtfGDmbvY5+SOxJosN7jLTzC40IL3EmA1HMzUsUbSHE0KB/GdxqxAWv
7fS1C3uU2oTOV74Rp+t/+xrPI9HU0nwDpNh4SpyCYQ+DLodKZ+WOIyaDveq1FDNa
ZHrXwzFHxP38V/gs2xJXnq9SGMXbZbecZJSGFjL4GVamM5D949WmhDDz2cF67H7C
xfZpKbJEB1c2Mg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:41 2026 by rpki-client