Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: RljXbY2C0A4fGMSUSy03OPPYkLB8mXK5+kOezjT9H1w=
Subject key identifier: 96:40:2E:60:50:8B:C2:CC:D4:A0:D6:0D:59:1A:88:31:C4:0B:AF:B1
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019FACAD0B19650E0B475A0B7E748A17FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 07:00:49 +0000
Manifest this update: Wed 29 Jul 2026 07:00:49 +0000
Manifest next update: Thu 30 Jul 2026 07:00:49 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 5Xm4wL/fJrLpRlcg/X8BmXlRlkWNGwB6UdWr4xNewnc=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:0b:19:65:0e:0b:47:5a:0b:7e:74:8a:17:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jul 29 07:00:49 2026 GMT
Not After : Jul 30 07:00:49 2026 GMT
Subject: CN=96402e60508bc2ccd4a0d60d591a8831c40bafb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:d1:d2:7f:05:42:65:03:a6:63:30:a9:44:
2a:e4:fd:e3:b0:c1:94:eb:4d:14:07:89:60:38:75:
5d:90:88:36:61:39:44:03:43:4d:79:b6:75:d5:82:
5d:71:cf:6f:bc:f4:36:99:1d:0d:d8:39:bf:4f:16:
0b:18:b4:f7:f6:f9:4c:d8:87:80:30:31:64:a7:0a:
86:1b:45:dc:44:38:e3:8d:d9:6a:87:cb:9f:ce:e4:
56:a4:d3:1f:5e:3e:e0:d6:3d:26:89:c0:6d:27:a9:
ac:c6:26:7c:9b:c0:5f:7f:00:4d:5b:1f:d1:a2:02:
ba:3e:1d:e5:8e:85:5f:27:f8:d8:2c:58:8b:e0:ad:
10:21:98:54:91:61:66:05:10:0c:f5:ab:ba:db:b7:
35:49:af:60:a1:6d:37:8c:4f:c3:97:d2:17:27:61:
7b:b4:ce:c9:5e:13:34:77:83:69:47:5f:31:f5:66:
86:aa:8c:95:58:8b:fe:2e:15:b6:7e:68:6b:d2:d7:
20:4d:ea:7a:cf:49:9f:b5:bb:b3:ee:d3:3b:97:fd:
0c:84:14:f1:45:01:29:bb:83:bd:35:d3:57:c3:89:
46:de:aa:4f:84:1f:a3:71:b2:eb:02:55:5e:54:3d:
1d:57:e6:c0:38:c7:39:9d:21:9b:ad:44:79:9b:b8:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:2E:60:50:8B:C2:CC:D4:A0:D6:0D:59:1A:88:31:C4:0B:AF:B1
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:86:d8:6c:52:db:50:6b:5a:49:33:46:ee:00:a1:7f:9b:
7e:be:ed:86:fa:f2:b9:a5:72:e8:48:51:04:89:69:5b:6a:2d:
3f:b6:2e:2f:28:29:d4:4d:f9:8b:e0:14:1e:24:97:b5:59:4b:
06:88:93:8b:cd:c9:09:35:74:ca:96:05:2a:95:b5:50:2f:df:
a7:ba:bc:e8:b1:ef:84:f2:5c:2b:5e:4d:03:c0:64:d1:4e:70:
a4:7e:f8:58:68:3a:f9:e5:b2:4b:72:8a:1d:38:24:c3:a6:24:
59:99:60:b2:a2:e7:e6:69:2e:8b:f9:98:a7:ac:24:d8:49:27:
25:6f:d7:05:40:8e:0d:25:ad:e1:71:1d:93:7c:24:ff:da:4f:
09:80:63:9b:1d:0e:d8:62:eb:1c:37:f8:a1:3c:6f:2d:3a:67:
a1:1e:4b:a0:30:0c:bf:70:fc:20:1e:22:32:10:1d:ae:e5:4e:
10:e0:7e:9e:68:0d:a3:53:25:c0:ab:18:bd:52:b3:24:df:fd:
cc:08:7f:f6:5a:9a:e0:75:a8:99:ef:e8:ae:a4:cd:60:05:f7:
01:ad:a0:c7:cf:c5:0d:8b:00:b5:34:f6:05:c6:74:83:e7:9f:
e2:bc:6c:aa:47:3c:82:06:c1:bf:c4:d0:ed:f6:0f:9a:56:77:
95:09:a7:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srQsZZQ4LR1oLfnSKF/+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjYwNzI5MDcwMDQ5WhcNMjYwNzMwMDcwMDQ5WjAzMTEwLwYDVQQD
Eyg5NjQwMmU2MDUwOGJjMmNjZDRhMGQ2MGQ1OTFhODgzMWM0MGJhZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+HR0n8FQmUDpmMwqUQq5P3jsMGU
600UB4lgOHVdkIg2YTlEA0NNebZ11YJdcc9vvPQ2mR0N2Dm/TxYLGLT39vlM2IeA
MDFkpwqGG0XcRDjjjdlqh8ufzuRWpNMfXj7g1j0micBtJ6msxiZ8m8BffwBNWx/R
ogK6Ph3ljoVfJ/jYLFiL4K0QIZhUkWFmBRAM9au627c1Sa9goW03jE/Dl9IXJ2F7
tM7JXhM0d4NpR18x9WaGqoyVWIv+LhW2fmhr0tcgTep6z0mftbuz7tM7l/0MhBTx
RQEpu4O9NdNXw4lG3qpPhB+jcbLrAlVeVD0dV+bAOMc5nSGbrUR5m7jRUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZALmBQi8LM1KDWDVkaiDHEC6+xMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF32G2GxS
21BrWkkzRu4AoX+bfr7thvryuaVy6EhRBIlpW2otP7YuLygp1E35i+AUHiSXtVlL
BoiTi83JCTV0ypYFKpW1UC/fp7q86LHvhPJcK15NA8Bk0U5wpH74WGg6+eWyS3KK
HTgkw6YkWZlgsqLn5mkui/mYp6wk2EknJW/XBUCODSWt4XEdk3wk/9pPCYBjmx0O
2GLrHDf4oTxvLTpnoR5LoDAMv3D8IB4iMhAdruVOEOB+nmgNo1MlwKsYvVKzJN/9
zAh/9lqa4HWome/orqTNYAX3Aa2gx8/FDYsAtTT2BcZ0g+ef4rxsqkc8ggbBv8TQ
7fYPmlZ3lQmnmA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:40:33 2026 by rpki-client