Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: WVpx70Vj/43CNZ0J1m8IsfMe7wo+SfMf3kcTP2jK0g4=
Subject key identifier: 1C:4C:49:EC:33:33:57:C9:4B:EE:4F:D9:7C:D0:AC:A7:AD:BE:61:9A
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 019FB0F78F6D85EAB500B2071C4FC9D64330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 06B4
Signing time: Thu 30 Jul 2026 03:00:41 +0000
Manifest this update: Thu 30 Jul 2026 03:00:41 +0000
Manifest next update: Fri 31 Jul 2026 03:00:41 +0000
Files and hashes: 1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: e7n2yyzqSrv+PpFmDHP1WQon61UuhiQrGD9Myx1EKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:f7:8f:6d:85:ea:b5:00:b2:07:1c:4f:c9:d6:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Jul 30 03:00:41 2026 GMT
Not After : Jul 31 03:00:41 2026 GMT
Subject: CN=1c4c49ec333357c94bee4fd97cd0aca7adbe619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:35:e9:03:ff:26:4d:e9:af:a1:45:f3:6f:
fc:b4:d7:4a:1b:f3:29:1e:ce:bf:df:c3:a8:94:d7:
7f:70:9d:9a:5d:7e:4c:ba:39:05:58:82:f8:22:d1:
38:a5:83:44:2b:8c:a6:97:c0:8f:a3:f1:4c:b3:95:
dc:21:35:b3:62:6e:f6:68:6e:2b:e1:20:ca:02:78:
65:dd:37:bf:6c:06:a3:4a:83:c7:87:96:5a:9b:76:
71:08:b5:1d:e8:a9:7f:7c:4b:08:fd:17:f9:93:16:
45:d0:1e:1d:6f:06:e7:99:c5:0c:7d:68:24:37:4c:
3e:57:4c:88:4f:5f:98:18:d1:33:65:e9:cf:08:5f:
e0:2e:05:5b:ec:b8:6e:dc:80:f8:d4:2c:21:7c:6d:
70:a1:32:14:30:99:c0:d9:bc:20:07:01:d3:ae:30:
8c:62:ad:e9:c0:a4:4a:f7:62:53:82:7e:17:03:2e:
af:fb:d0:37:fb:98:4a:b2:03:1f:8f:40:2e:df:2c:
80:ee:2b:5e:86:e2:60:58:19:2b:24:95:70:9f:a2:
69:8d:fd:66:2e:35:19:de:1c:16:50:6a:56:ec:0a:
a6:a9:37:d7:47:af:fc:75:1d:e2:f2:dc:0b:a4:0f:
e0:4b:5e:4f:02:d0:6c:e5:4e:84:f8:dd:16:b5:84:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:49:EC:33:33:57:C9:4B:EE:4F:D9:7C:D0:AC:A7:AD:BE:61:9A
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d6:3c:97:36:d5:73:cf:6f:f5:7c:73:e2:54:d0:9a:b8:68:
cd:dc:5f:6a:82:48:c4:ba:20:c7:dc:ce:02:88:5c:24:db:f8:
9f:05:08:05:57:7a:f2:56:c7:87:1a:72:09:71:20:14:46:03:
10:be:82:05:7d:70:5d:08:5d:50:84:1d:8b:c4:e1:32:c5:24:
60:60:8f:eb:6a:25:9c:de:91:e2:33:b1:b6:6e:ea:c9:ff:63:
f3:3c:d7:32:2e:3d:b2:4e:07:a0:ec:e5:24:09:d3:27:5d:a5:
bd:5e:03:ee:ff:70:5b:1b:ce:ad:19:1d:ad:ae:72:f7:5d:29:
ad:45:94:09:b2:4c:59:5b:fd:b0:8d:90:32:e7:ff:f9:7b:7a:
fb:c4:00:80:ee:be:a7:e5:88:7f:26:e5:87:d3:a2:41:5b:51:
9c:80:38:4f:93:c2:40:bb:de:e8:d1:79:f8:cb:3e:2d:2c:a6:
66:04:14:8f:d3:bd:f2:2e:7c:bc:ce:b6:32:9e:03:73:d9:7e:
7f:c7:69:8d:a5:c7:2c:e9:92:38:72:15:49:1f:e3:08:fc:4c:
ac:35:71:51:cd:74:3b:78:d6:f0:e7:f1:f0:0d:12:45:1d:1c:
f5:26:2d:a1:a5:be:34:4c:18:59:51:6b:71:6e:eb:5e:32:f7:
79:20:38:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+w949theq1ALIHHE/J1kMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWIyY2VmZTM4OWExYWU0OTc1NmVkYzJiMzI5M2U1ODgz
MGNiODIwHhcNMjYwNzMwMDMwMDQxWhcNMjYwNzMxMDMwMDQxWjAzMTEwLwYDVQQD
EygxYzRjNDllYzMzMzM1N2M5NGJlZTRmZDk3Y2QwYWNhN2FkYmU2MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6016QP/Jk3pr6FF82/8tNdKG/Mp
Hs6/38OolNd/cJ2aXX5MujkFWIL4ItE4pYNEK4yml8CPo/FMs5XcITWzYm72aG4r
4SDKAnhl3Te/bAajSoPHh5Zam3ZxCLUd6Kl/fEsI/Rf5kxZF0B4dbwbnmcUMfWgk
N0w+V0yIT1+YGNEzZenPCF/gLgVb7Lhu3ID41CwhfG1woTIUMJnA2bwgBwHTrjCM
Yq3pwKRK92JTgn4XAy6v+9A3+5hKsgMfj0Au3yyA7itehuJgWBkrJJVwn6Jpjf1m
LjUZ3hwWUGpW7AqmqTfXR6/8dR3i8twLpA/gS15PAtBs5U6E+N0WtYTnhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxMSewzM1fJS+5P2XzQrKetvmGaMB8GA1UdIwQY
MBaAFK+bLO/jiaGuSXVu3Csyk+WIMMuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEt
NDY5NjE5ZDRlY2RiLzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEtNDY5NjE5ZDRlY2Ri
LzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNY8lzbV
c89v9Xxz4lTQmrhozdxfaoJIxLogx9zOAohcJNv4nwUIBVd68lbHhxpyCXEgFEYD
EL6CBX1wXQhdUIQdi8ThMsUkYGCP62olnN6R4jOxtm7qyf9j8zzXMi49sk4HoOzl
JAnTJ12lvV4D7v9wWxvOrRkdra5y910prUWUCbJMWVv9sI2QMuf/+Xt6+8QAgO6+
p+WIfyblh9OiQVtRnIA4T5PCQLve6NF5+Ms+LSymZgQUj9O98i58vM62Mp4Dc9l+
f8dpjaXHLOmSOHIVSR/jCPxMrDVxUc10O3jW8Ofx8A0SRR0c9SYtoaW+NEwYWVFr
cW7rXjL3eSA4vQ==
-----END CERTIFICATE-----
Generated at Thu Jul 30 11:20:13 2026 by rpki-client