Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: ZC7C9LcPswGS4whwYZfawV6XFy4AESqhx8bytGQfTk0=
Subject key identifier: AD:7E:B7:E7:08:A5:20:39:DB:EC:D3:FB:6E:6F:94:39:63:E7:93:05
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 019FAAF61C3629C70FA592D07DA73EDF1190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0A17
Signing time: Tue 28 Jul 2026 23:01:23 +0000
Manifest this update: Tue 28 Jul 2026 23:01:23 +0000
Manifest next update: Wed 29 Jul 2026 23:01:23 +0000
Files and hashes: 1: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: VIp14lJoEJO4hu4rqYEAn8Fm9Y6U50Qn9mP3Hu8Lqp4=)
2: hhh3z06Bpe2m47ehC44Gk6XsxWY.roa (hash: D+hS8HY9ljD+1P/aopr0G/yuhchBVZY0zZMSPMrBOWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:1c:36:29:c7:0f:a5:92:d0:7d:a7:3e:df:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Jul 28 23:01:23 2026 GMT
Not After : Jul 29 23:01:23 2026 GMT
Subject: CN=ad7eb7e708a52039dbecd3fb6e6f943963e79305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:4f:f1:22:99:83:cb:7d:5f:63:cd:4d:76:
b4:a4:2a:fa:28:07:cd:a6:76:7f:84:6b:1f:5f:ba:
4f:e1:95:a7:aa:44:25:56:a9:66:25:a9:26:36:72:
76:18:45:21:c0:4b:6c:cd:d3:de:49:4a:40:98:a3:
2e:3e:15:d8:2b:87:23:98:65:11:53:f0:49:8c:50:
df:fd:15:38:c6:d0:8a:b9:2e:52:47:3a:4b:05:45:
35:70:a2:b2:fe:2c:5f:52:bb:e7:ea:b1:87:45:81:
8e:72:70:51:b2:58:10:b4:6b:db:64:92:17:14:f3:
f4:59:4b:f0:c9:53:06:d3:27:cc:c8:c9:42:fa:43:
df:93:75:06:dd:87:38:2a:3c:3f:58:ef:c3:92:6e:
38:eb:09:2e:21:64:0e:fc:27:aa:ad:58:40:d5:58:
62:07:3a:48:80:63:32:85:19:e8:d9:90:7f:c3:97:
2f:f8:5c:2f:11:ce:ad:bd:d9:b3:52:cc:60:5d:53:
ea:ad:28:2e:ec:bc:b8:b5:f8:d4:71:72:7d:2f:34:
e3:bd:6a:57:0b:67:67:fe:16:dd:03:0d:76:d3:e3:
25:ee:9d:bd:dc:66:21:a4:48:9a:cb:89:05:91:14:
83:c6:99:c4:ce:74:7b:cf:63:f1:ad:54:81:87:b5:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:B7:E7:08:A5:20:39:DB:EC:D3:FB:6E:6F:94:39:63:E7:93:05
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:63:56:dc:3e:2a:34:36:cb:71:07:33:6d:a1:75:c4:65:
18:4a:65:22:f6:c2:27:0e:6f:8d:93:58:ab:cd:54:99:d6:0f:
28:58:e4:24:39:c7:fd:62:bf:7f:11:98:50:cd:ba:03:a4:6c:
17:8d:7b:e4:f7:d5:6e:b4:a2:ba:26:ba:c0:06:30:49:b7:b7:
7f:52:75:01:aa:16:db:27:fb:c7:fc:c1:78:4b:41:37:2f:fa:
40:02:e3:77:04:9e:41:9f:57:ee:5a:ec:dd:8e:30:3c:1a:36:
d1:ec:e2:0b:62:f9:6f:9c:14:cc:28:69:cf:8e:87:6d:d2:42:
b5:86:2f:60:b4:e0:53:cd:77:0c:ed:1f:7a:54:6e:c2:e4:a5:
a4:22:01:c7:df:a7:48:68:59:ab:57:0f:71:1d:df:5a:e8:94:
1e:58:6e:60:4c:4f:6a:32:e2:27:97:b6:6c:12:20:9d:d1:00:
7e:e3:90:7a:6a:71:d2:18:19:9d:06:57:09:2d:a0:e5:2a:06:
f5:61:a3:97:7b:69:84:d5:bc:7e:8d:5a:b0:e1:d7:93:c7:cd:
36:bf:f9:23:de:ff:c1:df:1f:36:5b:de:89:3c:7d:9b:cb:4d:
3d:71:a4:5d:67:e8:67:fc:7f:a8:59:98:f4:f1:77:f4:cc:f3:
6c:27:9b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9hw2KccPpZLQfac+3xGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNzBjZTdhNGU2ZTRhYjNhNGVhOWYwODFmNTkyZWE1ZjZk
MmI5YWEwHhcNMjYwNzI4MjMwMTIzWhcNMjYwNzI5MjMwMTIzWjAzMTEwLwYDVQQD
EyhhZDdlYjdlNzA4YTUyMDM5ZGJlY2QzZmI2ZTZmOTQzOTYzZTc5MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjJP8SKZg8t9X2PNTXa0pCr6KAfN
pnZ/hGsfX7pP4ZWnqkQlVqlmJakmNnJ2GEUhwEtszdPeSUpAmKMuPhXYK4cjmGUR
U/BJjFDf/RU4xtCKuS5SRzpLBUU1cKKy/ixfUrvn6rGHRYGOcnBRslgQtGvbZJIX
FPP0WUvwyVMG0yfMyMlC+kPfk3UG3Yc4Kjw/WO/Dkm446wkuIWQO/CeqrVhA1Vhi
BzpIgGMyhRno2ZB/w5cv+FwvEc6tvdmzUsxgXVPqrSgu7Ly4tfjUcXJ9LzTjvWpX
C2dn/hbdAw120+Ml7p293GYhpEiay4kFkRSDxpnEznR7z2PxrVSBh7V3CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1+t+cIpSA52+zT+25vlDlj55MFMB8GA1UdIwQY
MBaAFNtwznpObkqzpOqfCB9ZLqX20rmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ZGE2MDEtNjM1ZS00ZDA3LTgwOTYt
MmNiMTdiN2JjNjE4LzEvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85ZGE2MDEtNjM1ZS00ZDA3LTgwOTYtMmNiMTdiN2JjNjE4
LzEvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGahjVtw+
KjQ2y3EHM22hdcRlGEplIvbCJw5vjZNYq81UmdYPKFjkJDnH/WK/fxGYUM26A6Rs
F4175PfVbrSiuia6wAYwSbe3f1J1AaoW2yf7x/zBeEtBNy/6QALjdwSeQZ9X7lrs
3Y4wPBo20eziC2L5b5wUzChpz46HbdJCtYYvYLTgU813DO0felRuwuSlpCIBx9+n
SGhZq1cPcR3fWuiUHlhuYExPajLiJ5e2bBIgndEAfuOQempx0hgZnQZXCS2g5SoG
9WGjl3tphNW8fo1asOHXk8fNNr/5I97/wd8fNlveiTx9m8tNPXGkXWfoZ/x/qFmY
9PF39MzzbCebuw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:04 2026 by rpki-client