Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: o02xxJAZexiIPUQ+4Pm1m6RdALI/59puVX60xjbHqeg=
Subject key identifier: 08:D9:EA:B2:69:8C:F1:5A:C4:8D:41:6B:22:B4:F5:E4:6A:7F:27:EB
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 019FAD1ADF9FE41848D5660431E30C850CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 1889
Signing time: Wed 29 Jul 2026 09:00:47 +0000
Manifest this update: Wed 29 Jul 2026 09:00:47 +0000
Manifest next update: Thu 30 Jul 2026 09:00:47 +0000
Files and hashes: 1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: CYBWtGUxZp/rKizVawXcACf+6KwsG3DTyKtXs5LOVIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:df:9f:e4:18:48:d5:66:04:31:e3:0c:85:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Jul 29 09:00:47 2026 GMT
Not After : Jul 30 09:00:47 2026 GMT
Subject: CN=08d9eab2698cf15ac48d416b22b4f5e46a7f27eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:0e:b0:59:67:e7:de:e8:78:01:14:e2:98:
18:dd:73:6f:f2:44:e3:a6:e9:a0:8f:62:5b:c6:11:
1e:28:a0:80:60:f4:08:79:ed:9d:d1:69:80:37:51:
7c:94:9d:fd:ec:b7:9c:1d:08:fe:fa:08:3c:21:0d:
b5:fa:0e:41:9d:78:6d:2a:10:c0:68:89:89:8d:d9:
62:61:4c:2f:fd:1d:4a:a7:19:d5:22:dd:0b:db:59:
86:3d:a0:b9:e9:8d:7d:f5:3b:c7:e5:1b:bb:28:94:
ce:a7:53:fe:41:25:6d:35:92:c3:6b:35:a1:f8:bb:
f9:28:9d:74:63:9e:f3:b6:54:54:9d:56:60:83:b4:
9e:8b:9b:3a:e5:08:4f:e1:29:6a:00:7c:e3:45:28:
30:31:da:d1:94:67:4a:6f:fe:27:e6:fb:34:17:09:
91:00:7b:7a:ed:cc:aa:10:0f:da:b5:f2:fa:c6:57:
df:bf:61:d8:81:4e:b5:51:95:91:72:ee:14:16:f1:
c0:be:1b:c7:b2:a8:a2:be:f5:61:88:34:47:dc:1b:
7e:ad:ef:56:fd:ea:ba:fc:09:dd:b6:55:a3:26:7e:
e1:14:7f:2b:ac:0f:ce:e8:e3:1f:43:34:16:cc:25:
d2:2f:be:4f:0c:07:cd:04:e1:ef:9a:66:4b:f4:1b:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:EA:B2:69:8C:F1:5A:C4:8D:41:6B:22:B4:F5:E4:6A:7F:27:EB
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2a:8b:6b:ec:f4:97:14:39:73:a6:7b:60:28:9a:f9:cb:6a:
8d:3d:80:86:66:a7:05:06:14:98:8b:c6:7b:28:11:eb:f0:54:
07:3f:26:ef:62:7c:12:b3:73:69:92:67:b6:42:99:4e:a9:a5:
48:60:8a:73:fa:cc:5e:c4:15:06:d2:1e:d3:25:69:ca:b5:c1:
cd:8a:70:1b:a9:bf:09:2a:91:2b:63:7c:16:fc:2b:df:bd:77:
9d:ef:c4:d6:0b:b7:fd:97:77:85:e5:48:24:3a:5a:34:a3:e3:
2c:d1:23:de:42:98:a8:17:14:e1:e3:e0:f9:18:4a:c5:da:08:
31:90:4b:98:ad:a4:c4:b3:ca:1b:02:32:97:4a:dc:d9:bc:43:
f6:4e:9b:74:43:f2:33:a5:51:1e:2d:ec:b7:54:6b:5d:d5:94:
0b:d4:e2:4e:91:70:57:32:1a:74:b0:42:24:6a:9f:5a:88:e7:
d8:db:bc:11:1b:36:d2:ae:f3:dd:08:9b:39:90:b8:f2:b8:2a:
24:c5:cd:f5:0b:e1:21:5e:c8:88:af:92:82:64:10:75:ee:e1:
e4:ec:a7:91:3f:7a:d0:69:42:71:d5:9c:c1:17:9a:a7:f4:9c:
0f:7b:19:7d:75:4b:9f:10:41:c5:d9:c5:3b:18:64:b0:20:22:
f7:c8:e3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGt+f5BhI1WYEMeMMhQzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjBkZjc3MTE0NzQxZTEzYTE3ZDcyMTNlNjk1NmJmOTYy
N2I1NTgwHhcNMjYwNzI5MDkwMDQ3WhcNMjYwNzMwMDkwMDQ3WjAzMTEwLwYDVQQD
EygwOGQ5ZWFiMjY5OGNmMTVhYzQ4ZDQxNmIyMmI0ZjVlNDZhN2YyN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/gOsFln597oeAEU4pgY3XNv8kTj
pumgj2JbxhEeKKCAYPQIee2d0WmAN1F8lJ397LecHQj++gg8IQ21+g5BnXhtKhDA
aImJjdliYUwv/R1KpxnVIt0L21mGPaC56Y199TvH5Ru7KJTOp1P+QSVtNZLDazWh
+Lv5KJ10Y57ztlRUnVZgg7Sei5s65QhP4SlqAHzjRSgwMdrRlGdKb/4n5vs0FwmR
AHt67cyqEA/atfL6xlffv2HYgU61UZWRcu4UFvHAvhvHsqiivvVhiDRH3Bt+re9W
/eq6/AndtlWjJn7hFH8rrA/O6OMfQzQWzCXSL75PDAfNBOHvmmZL9Btp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjZ6rJpjPFaxI1BayK09eRqfyfrMB8GA1UdIwQY
MBaAFK3w33cRR0HhOhfXIT5pVr+WJ7VYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEt
ZTFlZjI3NzcyZWFmLzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEtZTFlZjI3NzcyZWFm
LzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCqLa+z0
lxQ5c6Z7YCia+ctqjT2AhmanBQYUmIvGeygR6/BUBz8m72J8ErNzaZJntkKZTqml
SGCKc/rMXsQVBtIe0yVpyrXBzYpwG6m/CSqRK2N8Fvwr3713ne/E1gu3/Zd3heVI
JDpaNKPjLNEj3kKYqBcU4ePg+RhKxdoIMZBLmK2kxLPKGwIyl0rc2bxD9k6bdEPy
M6VRHi3st1RrXdWUC9TiTpFwVzIadLBCJGqfWojn2Nu8ERs20q7z3QibOZC48rgq
JMXN9QvhIV7IiK+SgmQQde7h5OynkT960GlCcdWcwReap/ScD3sZfXVLnxBBxdnF
OxhksCAi98jjEg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:15 2026 by rpki-client