Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: pMNPHdImGI9l5f0KTk7ozb00BIo3+6+0pjoE4vHiwNs=
Subject key identifier: 13:BE:67:A7:60:B0:D1:13:1C:94:74:9B:6A:FB:78:96:28:0A:00:DD
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 01A0205601888EC16FBC4F1AECD4783D3436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 05ED
Signing time: Thu 20 Aug 2026 18:01:42 +0000
Manifest this update: Thu 20 Aug 2026 18:01:42 +0000
Manifest next update: Fri 21 Aug 2026 18:01:42 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: 5k8i4rux/sDL/lyyRk8pFJtW87WifepfiTzs1dDg9j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:01:88:8e:c1:6f:bc:4f:1a:ec:d4:78:3d:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Aug 20 18:01:42 2026 GMT
Not After : Aug 21 18:01:42 2026 GMT
Subject: CN=13be67a760b0d1131c94749b6afb7896280a00dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:58:8a:b0:29:e0:96:92:f9:d2:cc:ce:42:
9e:b2:60:0a:43:2e:c3:c1:13:6a:10:21:cd:cf:ec:
65:22:69:28:51:4d:85:14:3f:6e:47:cb:c1:10:7f:
54:11:2f:b4:1d:6e:15:ca:ed:3d:71:e1:95:63:d4:
56:8e:c4:50:84:18:20:19:c8:3d:e0:a8:11:a1:d6:
cd:70:46:e2:ba:05:8c:f5:52:7a:87:71:16:78:b8:
35:32:19:b4:54:06:51:5e:6f:61:5c:1e:da:2d:ac:
59:bf:63:3e:63:5f:0b:fc:5a:e5:0b:f4:70:97:62:
2c:16:06:1e:e5:f8:4a:96:db:29:64:cc:b6:31:26:
40:ef:32:da:0e:3c:ff:e5:f2:dd:fa:10:a3:24:22:
f8:5d:ad:c7:ee:9c:b4:92:0a:aa:f8:5f:56:af:84:
3e:48:43:02:8f:41:e2:32:df:1b:43:40:67:a9:70:
06:81:1d:22:6d:13:68:f6:1a:c8:fe:28:df:68:cb:
33:c1:aa:0a:5a:be:39:8b:74:ac:f3:ea:26:a7:97:
bb:bf:34:0c:8d:e1:b6:51:45:40:2d:84:62:c4:3e:
f3:85:9c:af:f4:aa:e0:36:a3:f8:73:32:66:d7:1c:
dd:9b:5e:99:50:ae:7f:3d:d7:8b:c1:0f:b4:16:15:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:67:A7:60:B0:D1:13:1C:94:74:9B:6A:FB:78:96:28:0A:00:DD
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:80:ce:bd:6c:e7:cf:59:4a:c3:e1:bb:81:15:c1:5d:c8:
ce:ed:7e:2b:70:6f:e0:f0:11:17:e5:f7:20:9d:ac:15:6f:33:
b3:ab:0a:19:19:8c:6b:68:23:04:aa:d9:cb:17:9e:7b:d2:e8:
d3:4a:e0:32:7d:84:62:71:e9:d8:63:57:cc:72:85:93:bc:24:
ea:fb:dd:d2:3f:87:a0:07:4f:0e:17:88:62:82:a2:e5:d5:90:
88:86:ad:f9:3a:8d:da:5a:a6:db:00:ef:d3:c6:04:0a:a5:4c:
01:62:7f:35:70:01:c2:5d:af:aa:a3:0c:ec:87:e8:ca:10:7f:
34:e3:f5:9d:a8:65:72:b9:f8:a7:a4:9b:74:20:01:72:d3:de:
df:9a:83:47:64:dd:ba:0e:93:8c:24:98:c7:1b:11:ff:86:0b:
3e:ef:21:8f:57:32:53:57:03:82:34:f7:96:9d:d2:b2:c2:cc:
65:4c:ea:6e:8f:1b:1f:13:88:b4:9f:a9:ed:a6:f2:34:cc:3a:
1d:1a:bc:7f:3f:60:9a:6d:bb:5e:de:ca:92:a5:d0:19:bf:5b:
29:15:06:9b:3b:40:ec:54:23:be:c8:7a:2b:72:67:39:7a:62:
71:b6:29:52:44:c7:38:23:a2:42:36:90:7c:87:c6:12:25:a6:
eb:a5:79:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVgGIjsFvvE8a7NR4PTQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3
MTg0NzgwHhcNMjYwODIwMTgwMTQyWhcNMjYwODIxMTgwMTQyWjAzMTEwLwYDVQQD
EygxM2JlNjdhNzYwYjBkMTEzMWM5NDc0OWI2YWZiNzg5NjI4MGEwMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiBYirAp4JaS+dLMzkKesmAKQy7D
wRNqECHNz+xlImkoUU2FFD9uR8vBEH9UES+0HW4Vyu09ceGVY9RWjsRQhBggGcg9
4KgRodbNcEbiugWM9VJ6h3EWeLg1Mhm0VAZRXm9hXB7aLaxZv2M+Y18L/FrlC/Rw
l2IsFgYe5fhKltspZMy2MSZA7zLaDjz/5fLd+hCjJCL4Xa3H7py0kgqq+F9Wr4Q+
SEMCj0HiMt8bQ0BnqXAGgR0ibRNo9hrI/ijfaMszwaoKWr45i3Ss8+omp5e7vzQM
jeG2UUVALYRixD7zhZyv9KrgNqP4czJm1xzdm16ZUK5/PdeLwQ+0FhXDKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO+Z6dgsNETHJR0m2r7eJYoCgDdMB8GA1UdIwQY
MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt
NDBmNGM2OGU5YTMxLzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx
LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInGAzr1s
589ZSsPhu4EVwV3Izu1+K3Bv4PARF+X3IJ2sFW8zs6sKGRmMa2gjBKrZyxeee9Lo
00rgMn2EYnHp2GNXzHKFk7wk6vvd0j+HoAdPDheIYoKi5dWQiIat+TqN2lqm2wDv
08YECqVMAWJ/NXABwl2vqqMM7IfoyhB/NOP1nahlcrn4p6SbdCABctPe35qDR2Td
ug6TjCSYxxsR/4YLPu8hj1cyU1cDgjT3lp3SssLMZUzqbo8bHxOItJ+p7abyNMw6
HRq8fz9gmm27Xt7KkqXQGb9bKRUGmztA7FQjvsh6K3JnOXpicbYpUkTHOCOiQjaQ
fIfGEiWm66V5tg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:43 2026 by rpki-client