Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: vEF0b0A0EJ7efSeBaJetd0O4zO9uGBK/f5v9qpsVEuU=
Subject key identifier: 98:4D:33:3A:6E:EB:D6:24:0C:44:7F:B8:99:19:8E:69:CC:0F:BB:34
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019F856862B9473C73BEE1FFA7D3F7BA7937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 16:00:38 +0000
Manifest this update: Tue 21 Jul 2026 16:00:38 +0000
Manifest next update: Wed 22 Jul 2026 16:00:38 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: jjFoB3D+/bidh8or9ZAFA3SGJKlrvx4YDsySugRbcxk=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:62:b9:47:3c:73:be:e1:ff:a7:d3:f7:ba:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jul 21 16:00:38 2026 GMT
Not After : Jul 22 16:00:38 2026 GMT
Subject: CN=984d333a6eebd6240c447fb899198e69cc0fbb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:01:c3:71:8d:47:fd:6e:13:a7:00:97:a1:
61:09:b9:ef:67:13:69:a9:dd:01:c0:37:35:36:53:
5e:d9:ce:d2:e6:13:99:43:aa:a3:22:32:ef:a5:dc:
7e:0a:71:c4:ef:01:84:65:8e:f2:00:2d:2c:56:ec:
e9:e6:9e:5b:bf:cc:9b:aa:12:53:6f:a6:2e:ea:92:
3e:a2:e7:1d:e3:ce:e2:80:f3:af:2f:d0:7e:87:41:
68:5b:d7:37:5f:8f:f8:51:0e:8e:e1:c7:f2:04:ab:
d2:6d:29:62:62:87:aa:9b:55:1c:74:56:80:f2:c9:
cc:8a:ac:59:17:79:09:01:85:61:1d:e5:b8:8f:aa:
b1:f4:99:14:76:c2:11:5a:76:4a:dc:b6:0e:af:fd:
cd:1b:3c:38:99:b5:5f:f1:d0:e8:e0:a1:fb:f4:ff:
ee:c4:ba:3d:0c:83:e8:8b:03:b1:dc:6a:59:08:ed:
cf:c3:0c:4a:15:5c:f7:68:54:ca:82:6d:15:89:8c:
59:c5:dd:ef:df:e9:d4:e8:c1:0f:33:32:11:8e:e9:
6a:40:a3:10:7b:61:f8:51:9c:7d:b9:e3:de:77:51:
e0:79:f4:3d:bf:6e:82:65:63:a0:e7:24:70:0d:09:
56:e9:6c:41:c0:fb:06:d1:86:2b:67:67:98:58:6d:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:33:3A:6E:EB:D6:24:0C:44:7F:B8:99:19:8E:69:CC:0F:BB:34
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bc:e8:9f:09:97:06:0c:ca:ba:c9:74:38:a9:a9:15:77:cb:
cf:0a:53:c1:08:36:85:28:ee:34:94:19:83:c2:ad:66:e2:0a:
df:76:be:96:b4:61:2f:e1:fb:48:9e:47:14:07:40:e7:5c:20:
3c:97:79:da:8a:bb:8f:f2:e7:39:71:bc:16:e1:ec:ed:07:5c:
fc:86:16:a8:60:93:f3:f1:8a:c7:2e:3d:30:15:5b:3b:d3:64:
6e:08:22:0a:4d:21:54:0b:84:0a:df:d9:e2:37:18:ad:42:d4:
63:6d:a7:20:45:64:6a:6f:7f:2f:e0:25:c4:2e:5c:e6:39:9c:
d5:bf:90:93:b8:ec:18:33:a2:b0:f0:7a:1d:3a:ac:78:08:fe:
99:19:12:21:e4:b3:36:58:5b:98:63:d8:41:d1:77:14:65:8f:
60:f3:33:80:b9:b6:82:98:4e:98:f9:c9:fe:cf:14:80:a9:85:
d3:57:1c:d3:b9:cb:23:ee:d8:fc:f9:0d:e7:98:1a:ee:77:2e:
66:b8:92:00:91:6d:b5:0d:4e:5b:fb:92:ea:ef:2d:ab:ad:93:
f1:37:7a:80:78:e8:ea:80:a3:8c:a5:5a:15:d6:2b:ec:ba:49:
1f:e4:2b:fe:e2:37:a9:5d:f7:60:16:96:e2:67:43:2e:39:eb:
89:14:89:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaGK5RzxzvuH/p9P3unk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl
NTI2ZDIwHhcNMjYwNzIxMTYwMDM4WhcNMjYwNzIyMTYwMDM4WjAzMTEwLwYDVQQD
Eyg5ODRkMzMzYTZlZWJkNjI0MGM0NDdmYjg5OTE5OGU2OWNjMGZiYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsEBw3GNR/1uE6cAl6FhCbnvZxNp
qd0BwDc1NlNe2c7S5hOZQ6qjIjLvpdx+CnHE7wGEZY7yAC0sVuzp5p5bv8ybqhJT
b6Yu6pI+oucd487igPOvL9B+h0FoW9c3X4/4UQ6O4cfyBKvSbSliYoeqm1UcdFaA
8snMiqxZF3kJAYVhHeW4j6qx9JkUdsIRWnZK3LYOr/3NGzw4mbVf8dDo4KH79P/u
xLo9DIPoiwOx3GpZCO3PwwxKFVz3aFTKgm0ViYxZxd3v3+nU6MEPMzIRjulqQKMQ
e2H4UZx9uePed1HgefQ9v26CZWOg5yRwDQlW6WxBwPsG0YYrZ2eYWG1PBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhNMzpu69YkDER/uJkZjmnMD7s0MB8GA1UdIwQY
MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt
YTk5ZWE5MWNiNWI5LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5
LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLzonwmX
BgzKusl0OKmpFXfLzwpTwQg2hSjuNJQZg8KtZuIK33a+lrRhL+H7SJ5HFAdA51wg
PJd52oq7j/LnOXG8FuHs7Qdc/IYWqGCT8/GKxy49MBVbO9NkbggiCk0hVAuECt/Z
4jcYrULUY22nIEVkam9/L+AlxC5c5jmc1b+Qk7jsGDOisPB6HTqseAj+mRkSIeSz
NlhbmGPYQdF3FGWPYPMzgLm2gphOmPnJ/s8UgKmF01cc07nLI+7Y/PkN55ga7ncu
ZriSAJFttQ1OW/uS6u8tq62T8Td6gHjo6oCjjKVaFdYr7LpJH+Qr/uI3qV33YBaW
4mdDLjnriRSJQQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:52 2026 by rpki-client