Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
File: rysOIXo1FoOSIGvac85hlTWgLzU.mft (raw, json)
Hash identifier: 2sn4xHEr97K4KfYB5NoqUsBAs/81Fb43Dt7DYAKP0vA=
Subject key identifier: 94:74:AC:EE:7E:17:16:3F:26:DB:AC:60:62:27:0E:85:BB:8E:D8:91
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial: 019FA86259A26941DF960ADCF3DF46320B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
Manifest number: 0E7B
Signing time: Tue 28 Jul 2026 11:00:45 +0000
Manifest this update: Tue 28 Jul 2026 11:00:45 +0000
Manifest next update: Wed 29 Jul 2026 11:00:45 +0000
Files and hashes: 1: QBW11jyT74R8oUHhAinuj7gPXSk.asa (hash: yZJV0811rYsc05YANwSpX99f0QsW0swdHpcFUdFqr0Y=)
2: rysOIXo1FoOSIGvac85hlTWgLzU.crl (hash: mcmDu4K0G7WKkQ6RhTDC4z9TYfIwvO5Kq05V5y8lYkQ=)
3: zakSxSI_wYoHQeaPnt8X9AknTHE.roa (hash: DFDQf/fadQ5V13foLZM1hVw4SY7MFQSi7KXroTzcGGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:59:a2:69:41:df:96:0a:dc:f3:df:46:32:0b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
Validity
Not Before: Jul 28 11:00:45 2026 GMT
Not After : Jul 29 11:00:45 2026 GMT
Subject: CN=9474acee7e17163f26dbac6062270e85bb8ed891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:0d:71:7b:aa:46:07:a6:09:1f:a2:5a:be:
f7:dd:d4:88:8c:bc:68:89:d2:d6:db:3a:aa:92:1a:
16:0f:fb:0f:c8:c7:ed:b8:fc:fc:b1:00:e3:0f:2d:
cb:58:1d:9b:a5:36:08:0e:05:ec:48:db:cd:6e:6a:
41:66:ed:bc:54:99:21:1b:c4:b7:9b:25:75:c0:7c:
24:b4:79:f9:e4:4e:24:65:72:52:f5:49:85:28:2b:
9c:c2:ff:63:f0:ef:ea:85:32:f6:e0:c4:fe:f4:ac:
3e:e6:a8:bc:d3:d8:a1:1f:d8:81:e9:0c:e7:fe:a4:
a8:78:93:c3:37:f6:44:b1:53:07:81:a9:a8:8c:72:
10:81:12:53:15:a7:08:b6:57:cb:e9:af:20:3b:de:
dc:70:ef:32:d9:18:9b:22:2f:c7:d9:82:48:9f:df:
fb:f9:80:fa:93:f4:3f:c0:e6:77:21:5a:c4:70:4c:
43:89:26:32:0b:11:97:96:f0:6e:ab:c6:69:5c:37:
40:fb:1b:4c:72:37:98:9c:d3:c6:82:0a:32:27:4d:
3f:9b:92:5c:b8:9f:fc:f9:70:0f:41:ac:88:d0:98:
b1:d0:47:9d:e2:ab:27:c1:ff:13:0d:2b:c3:5e:e2:
89:f2:40:80:1e:e0:0b:71:b5:b7:71:ac:a2:37:c5:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:AC:EE:7E:17:16:3F:26:DB:AC:60:62:27:0E:85:BB:8E:D8:91
X509v3 Authority Key Identifier:
keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:f9:b5:10:c5:27:b5:05:81:b7:ba:da:62:e9:26:f9:83:
e8:e5:0c:44:07:9b:20:53:cc:80:ad:ec:24:4e:57:ef:b0:41:
e9:ae:eb:14:ee:71:3b:e7:13:e4:bc:fa:a9:6c:b7:c6:35:ca:
9b:2e:4e:7f:f8:13:0f:1f:14:a8:c7:ee:6b:fc:26:e9:05:75:
e1:0e:00:93:39:af:c5:60:d5:b6:f2:53:2f:a8:16:65:cb:a6:
c7:3f:f2:15:70:20:6f:f3:a7:7e:b2:89:1d:00:43:3c:f4:6c:
61:c9:e8:1c:52:63:0f:2c:11:b6:30:b1:43:dd:81:3b:cd:93:
2f:b0:96:6d:f2:75:6d:81:c8:df:de:4d:f5:03:de:9e:cc:33:
80:7a:e9:70:ed:3f:f0:0d:3a:38:40:27:5e:b0:47:45:09:d4:
b7:a8:47:12:cf:a5:e0:e8:91:45:08:d6:6a:dc:6b:b6:c7:25:
9d:c1:14:f9:74:c9:af:52:37:ed:a1:22:dc:2c:fb:a8:6a:03:
eb:f7:af:b7:df:5a:cb:49:a7:16:0e:ef:0d:fc:cb:a2:a7:b3:
dd:d8:84:b8:a8:f3:ee:e2:7d:56:b4:c4:55:38:b4:eb:d7:fd:
73:b4:98:af:f9:34:a7:cf:98:b8:be:ac:15:a6:30:96:da:2d:
9f:ae:e8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYlmiaUHflgrc899GMgsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmIwZTIxN2EzNTE2ODM5MjIwNmJkYTczY2U2MTk1MzVh
MDJmMzUwHhcNMjYwNzI4MTEwMDQ1WhcNMjYwNzI5MTEwMDQ1WjAzMTEwLwYDVQQD
Eyg5NDc0YWNlZTdlMTcxNjNmMjZkYmFjNjA2MjI3MGU4NWJiOGVkODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlsNcXuqRgemCR+iWr733dSIjLxo
idLW2zqqkhoWD/sPyMftuPz8sQDjDy3LWB2bpTYIDgXsSNvNbmpBZu28VJkhG8S3
myV1wHwktHn55E4kZXJS9UmFKCucwv9j8O/qhTL24MT+9Kw+5qi809ihH9iB6Qzn
/qSoeJPDN/ZEsVMHgamojHIQgRJTFacItlfL6a8gO97ccO8y2RibIi/H2YJIn9/7
+YD6k/Q/wOZ3IVrEcExDiSYyCxGXlvBuq8ZpXDdA+xtMcjeYnNPGggoyJ00/m5Jc
uJ/8+XAPQayI0Jix0Eed4qsnwf8TDSvDXuKJ8kCAHuALcbW3cayiN8U7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR0rO5+FxY/JtusYGInDoW7jtiRMB8GA1UdIwQY
MBaAFK8rDiF6NRaDkiBr2nPOYZU1oC81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMjU0MWUtNzU5Ny00ODIwLWJlZDct
ZjBkMTk4MDk4NzRhLzEvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kMjU0MWUtNzU5Ny00ODIwLWJlZDctZjBkMTk4MDk4NzRh
LzEvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/b5tRDF
J7UFgbe62mLpJvmD6OUMRAebIFPMgK3sJE5X77BB6a7rFO5xO+cT5Lz6qWy3xjXK
my5Of/gTDx8UqMfua/wm6QV14Q4AkzmvxWDVtvJTL6gWZcumxz/yFXAgb/OnfrKJ
HQBDPPRsYcnoHFJjDywRtjCxQ92BO82TL7CWbfJ1bYHI395N9QPenswzgHrpcO0/
8A06OEAnXrBHRQnUt6hHEs+l4OiRRQjWatxrtsclncEU+XTJr1I37aEi3Cz7qGoD
6/evt99ay0mnFg7vDfzLoqez3diEuKjz7uJ9VrTEVTi069f9c7SYr/k0p8+YuL6s
FaYwltotn67ohg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:49:29 2026 by rpki-client