Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: KOfQYjvzbWdehJJ/by7wd6DLmMMPeExUklksXMmfUyc=
Subject key identifier: 30:5A:EE:BA:FD:83:E2:D5:4F:99:8B:F8:F4:72:DB:DB:D6:59:F6:E4
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019F860D870D0C6C87B2D2514F1B00F5B704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0CD0
Signing time: Tue 21 Jul 2026 19:01:01 +0000
Manifest this update: Tue 21 Jul 2026 19:01:01 +0000
Manifest next update: Wed 22 Jul 2026 19:01:01 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: 5PwjHucKmwCSxcMEGYFaCNmaosbQvLpho8e3w1zw758=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:87:0d:0c:6c:87:b2:d2:51:4f:1b:00:f5:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jul 21 19:01:01 2026 GMT
Not After : Jul 22 19:01:01 2026 GMT
Subject: CN=305aeebafd83e2d54f998bf8f472dbdbd659f6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:9a:c9:22:ce:cb:08:94:cc:ef:37:52:b5:
c5:4c:a9:2e:94:21:5e:96:25:95:7a:2e:3f:2a:7d:
38:6f:f7:3d:15:14:0f:9b:b1:b1:f0:cf:e4:1e:a1:
e8:54:c2:c6:cd:9a:71:df:fc:0b:1e:d8:64:b2:2b:
3c:c9:fb:1f:b7:a6:9a:36:7b:1f:b9:be:d8:c0:1e:
42:31:8c:e4:f0:5b:21:8d:68:b9:ca:b9:21:c0:64:
37:d7:16:23:ac:0e:32:cd:f3:89:41:5d:46:d8:04:
24:c7:20:7d:9a:26:c4:a1:c5:98:a8:49:ee:03:a6:
8c:77:e4:bd:4f:1b:d6:ae:02:63:db:b6:9d:89:b9:
a6:03:bc:9a:05:05:4c:03:e0:69:cd:89:9e:03:50:
4e:ee:30:f2:1b:a6:ca:a5:10:1f:46:05:d1:b9:55:
37:a2:7c:d2:02:21:18:63:80:0d:16:63:d6:60:94:
28:d0:a9:d1:a2:f6:71:92:c8:25:bb:66:af:eb:c8:
94:10:36:ad:5f:a4:58:33:50:c1:92:65:ca:11:99:
1f:3d:ff:67:b8:86:76:cf:69:36:bf:dd:aa:33:35:
d2:1f:f2:f5:04:eb:ac:3b:2e:f7:a0:d9:d1:e7:7a:
17:d5:c9:28:0f:5e:df:a3:60:3c:42:ec:9d:3b:0b:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:EE:BA:FD:83:E2:D5:4F:99:8B:F8:F4:72:DB:DB:D6:59:F6:E4
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:31:cc:a3:3a:c1:cc:14:12:62:40:94:45:98:d5:75:2f:b2:
58:8f:de:a1:98:44:e2:f5:75:49:2d:1f:e4:9c:1e:ad:39:d9:
fe:e7:d1:4d:87:5f:17:cc:56:78:ef:ff:aa:7a:1f:ef:d6:21:
9b:5b:b3:fc:bb:f3:aa:af:78:7f:90:4b:b6:8b:06:82:8a:85:
ec:a7:3b:38:e2:56:a5:fd:63:f4:61:bc:95:40:84:d8:05:f6:
b1:21:b5:80:f9:af:2a:78:43:db:59:dc:04:81:23:39:cd:df:
c6:db:ae:cf:5d:c3:7e:3a:06:79:40:eb:f9:e6:38:ff:95:79:
e2:27:f7:e2:b9:15:27:0c:a3:04:e4:2d:d6:09:91:dc:cd:e8:
b9:95:6d:b5:3a:46:2c:fe:2b:b9:dd:0b:a4:f3:5b:14:f8:49:
ea:5b:2f:92:ae:e7:40:70:80:fd:aa:70:2f:2a:91:a8:f1:e2:
1d:a7:a8:d8:2d:e1:27:88:9d:22:eb:38:3e:df:34:81:5c:ac:
e7:88:9e:fa:2d:9b:7d:9f:56:99:76:70:cf:13:7c:c0:c3:ca:
2f:39:f8:a2:13:bd:fa:bd:35:db:b0:d1:69:7a:6f:21:cc:1e:
84:ba:48:65:c4:b8:ba:4f:b7:f3:52:3f:9f:29:95:c4:38:29:
9f:1f:77:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDYcNDGyHstJRTxsA9bcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjYwNzIxMTkwMTAxWhcNMjYwNzIyMTkwMTAxWjAzMTEwLwYDVQQD
EygzMDVhZWViYWZkODNlMmQ1NGY5OThiZjhmNDcyZGJkYmQ2NTlmNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyWaySLOywiUzO83UrXFTKkulCFe
liWVei4/Kn04b/c9FRQPm7Gx8M/kHqHoVMLGzZpx3/wLHthksis8yfsft6aaNnsf
ub7YwB5CMYzk8FshjWi5yrkhwGQ31xYjrA4yzfOJQV1G2AQkxyB9mibEocWYqEnu
A6aMd+S9TxvWrgJj27adibmmA7yaBQVMA+BpzYmeA1BO7jDyG6bKpRAfRgXRuVU3
onzSAiEYY4ANFmPWYJQo0KnRovZxksglu2av68iUEDatX6RYM1DBkmXKEZkfPf9n
uIZ2z2k2v92qMzXSH/L1BOusOy73oNnR53oX1ckoD17fo2A8QuydOwtKAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBa7rr9g+LVT5mL+PRy29vWWfbkMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTHMozrB
zBQSYkCURZjVdS+yWI/eoZhE4vV1SS0f5JwerTnZ/ufRTYdfF8xWeO//qnof79Yh
m1uz/Lvzqq94f5BLtosGgoqF7Kc7OOJWpf1j9GG8lUCE2AX2sSG1gPmvKnhD21nc
BIEjOc3fxtuuz13DfjoGeUDr+eY4/5V54if34rkVJwyjBOQt1gmR3M3ouZVttTpG
LP4rud0LpPNbFPhJ6lsvkq7nQHCA/apwLyqRqPHiHaeo2C3hJ4idIus4Pt80gVys
54ie+i2bfZ9WmXZwzxN8wMPKLzn4ohO9+r0127DRaXpvIcwehLpIZcS4uk+381I/
nymVxDgpnx93QA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:57 2026 by rpki-client