Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: 6Q6MYKSFU7jx5GaDQrletn9Oxb0BmeTdY+Yij9ZJXwU=
Subject key identifier: 2D:61:05:A5:58:C1:86:76:1A:D2:97:81:83:F1:96:17:C8:85:DF:32
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019F8569263147E575BCFF799085F9F03134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 19D0
Signing time: Tue 21 Jul 2026 16:01:28 +0000
Manifest this update: Tue 21 Jul 2026 16:01:28 +0000
Manifest next update: Wed 22 Jul 2026 16:01:28 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: CIIpQ57xrDKF5MCHDh4P1yNwoKyRiQp74fGlEe49CtE=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:26:31:47:e5:75:bc:ff:79:90:85:f9:f0:31:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jul 21 16:01:28 2026 GMT
Not After : Jul 22 16:01:28 2026 GMT
Subject: CN=2d6105a558c186761ad2978183f19617c885df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:e6:64:15:49:44:fb:14:4b:a4:e3:4e:84:
ec:b4:5d:89:61:d8:27:27:d5:98:5e:8d:69:4d:86:
32:b3:2a:27:1b:6a:83:fd:44:a2:9f:e1:1f:17:59:
cc:53:e1:ec:32:25:f3:0f:7e:18:d2:f0:4c:3b:a1:
f2:d6:e7:16:fa:15:87:1e:fb:5a:de:30:d7:b1:e6:
42:1f:2e:8c:e5:dc:a3:1c:12:d1:a4:30:95:56:0b:
d0:62:52:5a:28:ef:04:db:a3:06:ca:64:ed:e7:c5:
fc:09:10:95:65:6f:54:1b:06:64:14:c1:59:bb:46:
af:75:d2:db:58:31:cc:6f:b4:86:9e:2f:2b:79:e8:
0f:c0:25:01:13:5e:9a:05:74:43:7c:66:bc:14:9f:
b2:87:62:4a:0f:0e:b2:22:be:cb:e4:a0:98:4c:7b:
ef:ff:13:7c:e2:f2:fe:a2:64:8c:3e:ae:3f:a9:dc:
ce:39:d4:52:1e:68:10:be:15:e3:2f:34:02:ab:9e:
bd:c9:9e:f2:f5:4d:ed:f5:6a:d5:a6:54:71:1e:96:
d0:9d:7f:50:42:c5:81:2c:8e:8c:12:5b:74:35:12:
92:66:f0:d9:1b:b2:25:7b:65:75:f7:67:fd:7c:bf:
30:6e:15:52:17:93:9f:4c:ba:82:ed:9f:00:58:87:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:05:A5:58:C1:86:76:1A:D2:97:81:83:F1:96:17:C8:85:DF:32
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:e0:84:c8:26:4e:38:9a:37:7e:3a:c9:6a:e6:9e:0e:60:
b0:fd:af:47:2d:d9:28:37:af:15:04:6c:ca:54:38:de:c5:53:
bc:29:21:b6:29:9c:fe:21:c5:26:c9:f6:94:9a:98:00:e6:74:
0e:52:f4:7f:90:41:07:12:c3:92:8a:71:81:53:99:f3:65:e3:
90:e3:b0:a8:bb:ba:0b:5a:9c:50:0c:e1:6c:92:e3:dc:b4:f0:
f3:48:26:be:6d:98:43:b1:fb:47:40:a9:9b:b7:00:cb:08:55:
4d:aa:3a:cb:8d:14:42:b0:cf:32:ba:d4:ef:3a:8f:06:95:e5:
11:95:37:cb:da:77:89:1a:a5:a2:46:eb:80:a8:db:41:82:02:
ca:88:dc:e6:1a:5c:84:a7:21:14:b5:1b:75:27:03:d1:2b:d7:
a5:62:d7:9b:5d:d2:b6:72:1b:0b:c1:2e:1a:a2:d1:fc:67:47:
01:54:4d:e4:35:f0:28:12:64:6c:92:3f:6f:57:23:b3:57:e2:
43:60:f7:a1:8d:78:e2:23:74:7e:35:ce:a6:fd:93:3e:24:96:
0b:6e:b3:71:e7:3a:d5:a7:af:e6:77:5b:79:c9:44:99:78:02:
6e:22:17:73:23:f0:53:30:38:d1:cf:ce:10:c3:e0:c4:88:d2:
6b:e0:df:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaSYxR+V1vP95kIX58DE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjYwNzIxMTYwMTI4WhcNMjYwNzIyMTYwMTI4WjAzMTEwLwYDVQQD
EygyZDYxMDVhNTU4YzE4Njc2MWFkMjk3ODE4M2YxOTYxN2M4ODVkZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtTmZBVJRPsUS6TjToTstF2JYdgn
J9WYXo1pTYYysyonG2qD/USin+EfF1nMU+HsMiXzD34Y0vBMO6Hy1ucW+hWHHvta
3jDXseZCHy6M5dyjHBLRpDCVVgvQYlJaKO8E26MGymTt58X8CRCVZW9UGwZkFMFZ
u0avddLbWDHMb7SGni8reegPwCUBE16aBXRDfGa8FJ+yh2JKDw6yIr7L5KCYTHvv
/xN84vL+omSMPq4/qdzOOdRSHmgQvhXjLzQCq569yZ7y9U3t9WrVplRxHpbQnX9Q
QsWBLI6MElt0NRKSZvDZG7Ile2V192f9fL8wbhVSF5OfTLqC7Z8AWIfiNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1hBaVYwYZ2GtKXgYPxlhfIhd8yMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjujghMgm
TjiaN346yWrmng5gsP2vRy3ZKDevFQRsylQ43sVTvCkhtimc/iHFJsn2lJqYAOZ0
DlL0f5BBBxLDkopxgVOZ82XjkOOwqLu6C1qcUAzhbJLj3LTw80gmvm2YQ7H7R0Cp
m7cAywhVTao6y40UQrDPMrrU7zqPBpXlEZU3y9p3iRqlokbrgKjbQYICyojc5hpc
hKchFLUbdScD0SvXpWLXm13StnIbC8EuGqLR/GdHAVRN5DXwKBJkbJI/b1cjs1fi
Q2D3oY144iN0fjXOpv2TPiSWC26zcec61aev5ndbeclEmXgCbiIXcyPwUzA40c/O
EMPgxIjSa+Df0w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:23 2026 by rpki-client