Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: Bf6+cF2bcL8WGazmvDJbI8Uw5E3PmAEf+W6RMKsAmI8=
Subject key identifier: 96:46:BA:0D:55:30:8B:88:D5:BD:39:4A:77:E6:D7:57:0A:F9:5D:BB
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019FA2978051FB6B4191421F5744A81E903E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 19D8
Signing time: Mon 27 Jul 2026 08:01:05 +0000
Manifest this update: Mon 27 Jul 2026 08:01:05 +0000
Manifest next update: Tue 28 Jul 2026 08:01:05 +0000
Files and hashes: 1: JkPCW3hZrgqzBOdEJnW7e2RP1G8.roa (hash: q2BHsD4zNAIXxXBTi/hz0TC1Y/B9jk8wfXpL9Wx05JU=)
2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: n5pi/NLVwFuzvWxhywNGDF+6DVbLdrA7w8Rvw35d8Ms=)
3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:80:51:fb:6b:41:91:42:1f:57:44:a8:1e:90:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Jul 27 08:01:05 2026 GMT
Not After : Jul 28 08:01:05 2026 GMT
Subject: CN=9646ba0d55308b88d5bd394a77e6d7570af95dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:b0:b8:31:5b:fa:34:9c:4d:d8:0e:50:97:
72:b6:07:50:00:c1:ad:37:1b:1e:e8:45:18:93:f3:
59:c1:82:18:a2:3e:e3:50:29:27:8f:9e:bd:4e:16:
3f:13:00:65:ea:78:08:15:55:57:7d:58:b8:b6:18:
51:af:e2:c3:e8:e8:54:b9:a4:65:be:a8:b0:85:e4:
e3:44:0e:f5:cd:01:1b:c0:32:f4:6e:31:96:2d:a8:
26:da:7d:0d:d5:ac:04:d9:fe:fd:4c:0c:45:e3:e4:
bf:b5:d7:cd:4e:45:cb:09:9f:38:69:aa:07:73:47:
38:a5:b7:2d:59:9b:70:9f:ce:08:e0:70:a2:5a:a0:
ae:db:da:34:a0:9f:bd:86:45:e8:2e:fd:29:39:af:
d4:bc:e6:96:36:5b:92:25:95:48:b4:bc:b4:a9:15:
55:45:55:7a:8b:9e:f5:b5:e8:f8:8f:48:65:11:ab:
87:10:9e:a4:8c:88:a9:ae:c3:1e:be:12:62:4a:6b:
3c:b7:69:62:7d:17:f7:cf:ed:7c:51:bf:79:34:ed:
fa:84:49:67:59:c3:a1:ac:e0:ec:dd:c4:3e:9b:e7:
d2:72:df:af:b8:23:05:3b:4b:91:69:54:9e:62:46:
31:d7:53:d2:46:a7:20:4e:ba:25:ed:85:74:9c:4e:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:BA:0D:55:30:8B:88:D5:BD:39:4A:77:E6:D7:57:0A:F9:5D:BB
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a0:4c:24:11:cd:58:d4:6d:25:35:56:ba:c1:5d:1d:af:e7:
f4:0f:d4:91:b9:29:7e:71:0f:b0:66:21:4a:a2:00:9e:25:56:
fd:c4:de:69:77:04:33:e8:88:e7:df:e0:da:81:f9:2e:d0:ea:
67:d2:97:da:aa:52:04:be:d3:18:8f:d6:93:df:e6:eb:84:e0:
b5:b3:69:9e:bf:f4:fb:1f:e6:8c:1e:92:ce:aa:b4:dc:b7:7e:
6a:0d:8f:3a:25:78:e1:c0:ff:61:c3:bf:b4:d9:3c:a9:e5:8b:
69:60:74:86:65:95:80:89:0c:dc:62:d9:65:1a:5c:05:e5:e2:
b3:79:77:d2:d7:c8:d3:ac:f9:5c:d9:4b:e1:06:9c:11:7b:44:
d1:d2:e8:6e:49:31:be:7b:be:7f:85:2f:ad:b1:5c:49:7a:22:
e0:b4:d7:2f:93:3a:42:2a:14:b4:31:b1:ba:ed:cf:62:d9:24:
db:45:c2:1d:de:41:72:cd:1d:6c:1b:74:4a:0f:79:10:4b:54:
3a:37:a6:97:8d:a5:ea:99:ec:1f:eb:56:d7:1a:c5:a7:8f:69:
b9:1e:38:fe:2a:62:18:db:0c:dc:13:91:f1:9a:52:e6:69:17:
fe:37:0b:9b:da:92:0a:19:d8:43:88:6c:98:0c:7e:d7:38:a0:
ce:a8:a9:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il4BR+2tBkUIfV0SoHpA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz
YTZhMWUwHhcNMjYwNzI3MDgwMTA1WhcNMjYwNzI4MDgwMTA1WjAzMTEwLwYDVQQD
Eyg5NjQ2YmEwZDU1MzA4Yjg4ZDViZDM5NGE3N2U2ZDc1NzBhZjk1ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KuwuDFb+jScTdgOUJdytgdQAMGt
Nxse6EUYk/NZwYIYoj7jUCknj569ThY/EwBl6ngIFVVXfVi4thhRr+LD6OhUuaRl
vqiwheTjRA71zQEbwDL0bjGWLagm2n0N1awE2f79TAxF4+S/tdfNTkXLCZ84aaoH
c0c4pbctWZtwn84I4HCiWqCu29o0oJ+9hkXoLv0pOa/UvOaWNluSJZVItLy0qRVV
RVV6i571tej4j0hlEauHEJ6kjIiprsMevhJiSms8t2lifRf3z+18Ub95NO36hEln
WcOhrODs3cQ+m+fSct+vuCMFO0uRaVSeYkYx11PSRqcgTrol7YV0nE4SXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZGug1VMIuI1b05Snfm11cK+V27MB8GA1UdIwQY
MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt
YTRmMDhkYmI4NWE1LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1
LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqBMJBHN
WNRtJTVWusFdHa/n9A/UkbkpfnEPsGYhSqIAniVW/cTeaXcEM+iI59/g2oH5LtDq
Z9KX2qpSBL7TGI/Wk9/m64TgtbNpnr/0+x/mjB6Szqq03Ld+ag2POiV44cD/YcO/
tNk8qeWLaWB0hmWVgIkM3GLZZRpcBeXis3l30tfI06z5XNlL4QacEXtE0dLobkkx
vnu+f4UvrbFcSXoi4LTXL5M6QioUtDGxuu3PYtkk20XCHd5Bcs0dbBt0Sg95EEtU
Ojeml42l6pnsH+tW1xrFp49puR44/ipiGNsM3BOR8ZpS5mkX/jcLm9qSChnYQ4hs
mAx+1zigzqip2Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:14 2026 by rpki-client