Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: Ana1Drtd30V55uOedOcwdcIqMtk3b7pAKmCc4smg784=
Subject key identifier: B8:48:B2:DE:13:1F:11:49:28:66:F4:44:DC:BE:77:D1:F5:E8:1C:C3
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 019F85314670461A18B0C85E35F627AEC90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 07DD
Signing time: Tue 21 Jul 2026 15:00:26 +0000
Manifest this update: Tue 21 Jul 2026 15:00:26 +0000
Manifest next update: Wed 22 Jul 2026 15:00:26 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: VKOrtnLBGmZnnPwbJechYr02ut4qprNor1eCMIskjh4=)
2: nS12X_FMQVUUwkWnLYmgJW732kk.roa (hash: GXbiX9J7KWPFCiPzKs7zINZFOvfmZgRDxvmBON8Kk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:46:70:46:1a:18:b0:c8:5e:35:f6:27:ae:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Jul 21 15:00:26 2026 GMT
Not After : Jul 22 15:00:26 2026 GMT
Subject: CN=b848b2de131f11492866f444dcbe77d1f5e81cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:02:e2:10:38:69:ee:37:1b:d0:9c:12:ed:
07:a2:2a:60:b0:eb:19:c2:2c:e0:5c:c8:c3:c0:df:
9d:15:e3:c7:52:70:d7:0a:be:11:24:34:0b:79:1a:
51:b1:14:4c:17:61:7d:7b:a5:86:48:5d:11:5e:9e:
7a:68:10:e7:e1:ac:55:aa:1b:0d:15:49:ac:64:c8:
78:9b:32:4e:c2:21:c7:35:56:3e:c7:0e:66:1e:15:
c5:ae:f1:e0:1b:ef:df:82:ee:70:f3:70:19:54:1a:
be:bc:cd:94:71:41:33:00:86:f6:fb:2c:ad:cf:68:
1d:69:88:d1:a9:67:12:5e:ba:5f:bf:07:42:7b:63:
20:f6:84:1c:95:90:30:15:47:ba:9a:77:61:22:ef:
37:c4:d3:c7:40:46:93:53:a9:4b:78:af:9f:a2:f8:
34:d7:cb:5f:9e:bb:ba:d2:db:a1:3a:b5:0a:7f:87:
3d:5c:01:e7:de:b1:b3:66:17:79:93:9d:2d:7c:e7:
ab:6c:82:2d:69:b5:b8:b2:8e:5f:e3:37:48:dd:3f:
bc:17:2d:65:00:fe:71:1e:38:8c:b7:11:e1:f0:37:
ea:85:cd:c8:5c:cb:a7:a0:5d:57:fa:4c:ef:19:4c:
84:18:38:ab:61:32:e7:34:8b:24:6b:85:23:0a:f6:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:B2:DE:13:1F:11:49:28:66:F4:44:DC:BE:77:D1:F5:E8:1C:C3
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:ae:ce:31:85:2b:77:93:1a:d3:d0:49:8d:90:61:94:0a:
fd:7e:f6:ef:75:4d:29:f2:fd:64:b3:20:c0:bb:c8:80:6e:24:
41:3c:94:a7:25:94:59:92:1b:49:fe:b2:35:dc:5f:68:99:2e:
2c:5e:5a:5f:d9:5b:be:99:d1:12:59:59:8b:3e:7b:13:e8:5e:
72:5f:1b:86:c6:fe:46:5b:01:09:be:c3:f8:82:8e:45:2a:61:
3d:d8:31:48:96:3c:25:34:35:17:b6:bd:23:01:55:3b:16:d4:
f6:9a:a2:5d:c5:4d:ec:9a:87:94:6b:7f:63:21:58:21:d2:02:
24:dc:35:29:e9:e5:e0:a9:8f:82:5e:9f:d3:7d:1b:a7:d6:78:
7e:92:bb:49:87:8f:46:b2:33:ed:09:90:3a:ea:f6:27:1d:d3:
ae:2f:44:2e:09:89:d6:8f:61:b6:91:5c:73:5a:9a:3e:32:63:
d1:df:f5:4e:82:7b:92:8b:9c:43:a7:84:5d:6c:88:61:b2:57:
b0:0f:a3:c2:3e:5e:18:22:74:34:58:bf:e1:aa:95:32:d7:26:
93:c4:8a:89:b6:2b:c6:1f:12:a8:7d:58:b1:7a:c5:0f:73:ed:
ca:fa:cf:e7:d2:ce:f7:bf:ee:37:26:17:6f:a8:9e:0b:35:2c:
d6:be:47:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMUZwRhoYsMheNfYnrskPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzM5ZjA4NDQyZTIyNDQ2NjIxYjg5YTU3NjM5YjM1NDJi
YTM0ZGMwHhcNMjYwNzIxMTUwMDI2WhcNMjYwNzIyMTUwMDI2WjAzMTEwLwYDVQQD
EyhiODQ4YjJkZTEzMWYxMTQ5Mjg2NmY0NDRkY2JlNzdkMWY1ZTgxY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6QC4hA4ae43G9CcEu0HoipgsOsZ
wizgXMjDwN+dFePHUnDXCr4RJDQLeRpRsRRMF2F9e6WGSF0RXp56aBDn4axVqhsN
FUmsZMh4mzJOwiHHNVY+xw5mHhXFrvHgG+/fgu5w83AZVBq+vM2UcUEzAIb2+yyt
z2gdaYjRqWcSXrpfvwdCe2Mg9oQclZAwFUe6mndhIu83xNPHQEaTU6lLeK+fovg0
18tfnru60tuhOrUKf4c9XAHn3rGzZhd5k50tfOerbIItabW4so5f4zdI3T+8Fy1l
AP5xHjiMtxHh8Dfqhc3IXMunoF1X+kzvGUyEGDirYTLnNIska4UjCvbtWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhIst4THxFJKGb0RNy+d9H16BzDMB8GA1UdIwQY
MBaAFOdznwhELiJEZiG4mldjmzVCujTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMjBkNTktNDQ1NC00ZWM4LTk2Nzct
NWYyYmYyMmUxODlkLzEvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMjBkNTktNDQ1NC00ZWM4LTk2NzctNWYyYmYyMmUxODlk
LzEvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEa2uzjGF
K3eTGtPQSY2QYZQK/X7273VNKfL9ZLMgwLvIgG4kQTyUpyWUWZIbSf6yNdxfaJku
LF5aX9lbvpnREllZiz57E+hecl8bhsb+RlsBCb7D+IKORSphPdgxSJY8JTQ1F7a9
IwFVOxbU9pqiXcVN7JqHlGt/YyFYIdICJNw1Kenl4KmPgl6f030bp9Z4fpK7SYeP
RrIz7QmQOur2Jx3Tri9ELgmJ1o9htpFcc1qaPjJj0d/1ToJ7koucQ6eEXWyIYbJX
sA+jwj5eGCJ0NFi/4aqVMtcmk8SKibYrxh8SqH1YsXrFD3PtyvrP59LO97/uNyYX
b6ieCzUs1r5HOw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:39 2026 by rpki-client