Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: kuxq84ZcrAQEGIMVLyzoQ8GBjFgj8FPFfFDBgSpadOw=
Subject key identifier: DC:B8:29:A5:00:38:5C:D4:3F:D0:D8:06:16:81:9B:BD:EA:31:D1:57
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019FA1BB9ECB1AD960744517317EA171A79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0CC8
Signing time: Mon 27 Jul 2026 04:00:55 +0000
Manifest this update: Mon 27 Jul 2026 04:00:55 +0000
Manifest next update: Tue 28 Jul 2026 04:00:55 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: BUNfKvVJukobmXxs1ymF3UTFmf2rVaHeXbcZN2Hs47A=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:9e:cb:1a:d9:60:74:45:17:31:7e:a1:71:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jul 27 04:00:55 2026 GMT
Not After : Jul 28 04:00:55 2026 GMT
Subject: CN=dcb829a500385cd43fd0d80616819bbdea31d157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:ff:33:b2:88:3a:9a:6a:93:6a:19:8f:ca:
b5:79:2e:62:27:a4:22:1d:7a:0b:6c:55:09:b2:78:
29:8e:55:97:b7:4f:aa:81:ac:d1:ef:da:81:c3:3c:
83:49:ad:35:c7:e1:95:23:50:7f:84:8a:6e:0d:4d:
ee:6d:eb:ff:ca:71:c7:ce:48:5a:53:28:31:ba:7e:
43:9b:a3:5c:10:4b:3b:89:d4:34:08:1e:06:08:04:
ec:f2:6d:eb:fe:94:aa:7d:75:91:4f:99:9d:12:7a:
fb:0e:98:67:13:ea:07:f2:9b:5d:75:74:75:66:52:
e1:5d:6d:98:c5:fd:55:9f:8e:06:3e:ac:ba:ab:dd:
7d:40:ab:48:72:89:b4:e4:55:c0:70:6f:5a:32:a4:
2e:77:22:49:a6:c1:f7:d8:1d:f4:d7:98:66:b8:e9:
85:c4:b6:d3:2f:fc:71:ca:5f:b2:74:87:7d:a5:cd:
9f:78:41:6b:70:57:a6:c9:4d:b3:41:ef:b6:41:b4:
70:b8:1c:ce:ae:e5:60:2d:0e:0f:20:06:66:ed:d5:
d8:1f:41:03:57:1b:0e:c0:87:28:db:df:87:fc:70:
7c:96:65:9a:26:89:20:a4:01:95:84:64:da:d6:0a:
2b:aa:e5:48:60:34:56:d9:68:14:1f:50:58:85:67:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B8:29:A5:00:38:5C:D4:3F:D0:D8:06:16:81:9B:BD:EA:31:D1:57
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:96:ef:a6:e7:16:d9:e8:ef:5c:a1:22:23:54:cb:fd:2e:
28:ba:ed:4b:54:41:05:43:aa:90:56:b9:d7:bd:41:43:5f:d7:
26:88:08:cc:d9:a7:69:af:84:16:4d:64:13:64:56:19:c5:1d:
cd:b1:ad:cc:9f:cb:f6:f6:5a:36:85:df:b7:b4:74:c1:89:e4:
d7:50:a3:3c:47:80:ad:ea:43:77:17:f7:1f:e5:d9:21:78:53:
29:c2:3a:0f:90:3c:26:88:84:b6:cc:ab:47:3a:96:ef:ad:ae:
ad:7a:5d:fc:6e:ef:ae:a7:21:e4:aa:0f:96:9b:14:3b:dc:a0:
5a:04:d5:a1:65:28:f4:8d:85:4f:97:30:1e:22:10:20:e5:10:
2b:d5:d2:1f:38:63:25:9a:69:59:1e:59:30:5e:d2:e1:04:ba:
57:c9:29:80:a0:12:86:59:3e:48:31:76:f2:19:3e:c0:98:d9:
80:60:1a:b9:a8:56:68:13:66:b7:38:df:a0:c4:2b:d8:be:75:
1b:c0:a8:ce:08:9a:ba:eb:c5:68:2e:ac:c4:42:6a:b0:b1:4c:
af:7e:2b:94:cf:55:15:b5:da:b8:86:50:5c:44:1f:e2:c1:46:
45:b5:5e:f6:d6:a3:f9:e8:17:32:59:bc:8b:54:bc:82:50:78:
2e:a5:f2:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu57LGtlgdEUXMX6hcaedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4
NjIwNmIwHhcNMjYwNzI3MDQwMDU1WhcNMjYwNzI4MDQwMDU1WjAzMTEwLwYDVQQD
EyhkY2I4MjlhNTAwMzg1Y2Q0M2ZkMGQ4MDYxNjgxOWJiZGVhMzFkMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJb/M7KIOppqk2oZj8q1eS5iJ6Qi
HXoLbFUJsngpjlWXt0+qgazR79qBwzyDSa01x+GVI1B/hIpuDU3ubev/ynHHzkha
Uygxun5Dm6NcEEs7idQ0CB4GCATs8m3r/pSqfXWRT5mdEnr7DphnE+oH8ptddXR1
ZlLhXW2Yxf1Vn44GPqy6q919QKtIcom05FXAcG9aMqQudyJJpsH32B3015hmuOmF
xLbTL/xxyl+ydId9pc2feEFrcFemyU2zQe+2QbRwuBzOruVgLQ4PIAZm7dXYH0ED
VxsOwIco29+H/HB8lmWaJokgpAGVhGTa1gorquVIYDRW2WgUH1BYhWdBTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy4KaUAOFzUP9DYBhaBm73qMdFXMB8GA1UdIwQY
MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt
YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4
LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyyW76bn
Ftno71yhIiNUy/0uKLrtS1RBBUOqkFa5171BQ1/XJogIzNmnaa+EFk1kE2RWGcUd
zbGtzJ/L9vZaNoXft7R0wYnk11CjPEeArepDdxf3H+XZIXhTKcI6D5A8JoiEtsyr
RzqW762urXpd/G7vrqch5KoPlpsUO9ygWgTVoWUo9I2FT5cwHiIQIOUQK9XSHzhj
JZppWR5ZMF7S4QS6V8kpgKAShlk+SDF28hk+wJjZgGAauahWaBNmtzjfoMQr2L51
G8CozgiauuvFaC6sxEJqsLFMr34rlM9VFbXauIZQXEQf4sFGRbVe9taj+egXMlm8
i1S8glB4LqXy2Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:40 2026 by rpki-client