Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: xuRkbe/8OS5oNCSE6UO4iF4c322YKDUSR3NyKeo8RAk=
Subject key identifier: C3:DD:68:3A:A1:38:30:E6:DC:95:77:1C:0C:04:BB:83:76:B3:8D:96
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019FA37280EEE80D44E3081768A4003A0C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 19D4
Signing time: Mon 27 Jul 2026 12:00:18 +0000
Manifest this update: Mon 27 Jul 2026 12:00:18 +0000
Manifest next update: Tue 28 Jul 2026 12:00:18 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: D8Yulqtkx+4nbGya9LiYHzTaFoUXh+DWncxwhyMTyhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:80:ee:e8:0d:44:e3:08:17:68:a4:00:3a:0c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jul 27 12:00:18 2026 GMT
Not After : Jul 28 12:00:18 2026 GMT
Subject: CN=c3dd683aa13830e6dc95771c0c04bb8376b38d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:ca:91:7b:2d:be:1d:f4:4a:71:d8:18:ec:
32:84:f9:ab:87:ff:92:57:4e:1d:1c:3f:09:54:0d:
03:a4:fa:8f:8c:2e:9a:bf:14:55:57:fd:e6:62:f3:
d8:38:22:2b:dd:73:05:f4:c1:a1:d8:11:7d:6b:6b:
0b:0a:16:56:4c:d6:41:8f:ae:be:94:61:b5:6e:50:
bf:d4:e3:62:a0:42:ac:63:0a:df:e5:44:88:b9:c8:
8b:ef:b6:c8:a5:1f:8c:84:46:18:d0:ce:e9:1e:4a:
5c:69:c7:5b:3e:cc:b0:90:33:36:d9:0a:48:9d:77:
7f:a3:34:73:72:31:8f:0b:39:85:5d:a6:b3:8e:d8:
43:49:f5:74:44:46:bd:7e:5f:50:c6:14:87:c8:f9:
b6:66:21:76:fc:cc:19:98:a8:07:33:42:12:d3:7f:
cc:a5:27:b6:e6:50:b7:5e:b9:2f:aa:34:19:36:8d:
40:e4:1e:c3:ac:f6:8e:f8:9a:47:26:15:d0:0e:6a:
d8:e2:8f:f8:8b:62:fa:60:d9:ef:00:8c:29:84:db:
42:49:a7:af:43:5d:95:87:cd:fa:99:5c:e3:a3:28:
d9:e3:b2:83:db:93:b1:32:67:d2:06:e8:d4:9a:c3:
2d:33:86:85:34:40:74:ed:4a:4c:5a:b0:13:44:4a:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DD:68:3A:A1:38:30:E6:DC:95:77:1C:0C:04:BB:83:76:B3:8D:96
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:89:82:9b:6b:50:9e:ae:c7:9e:0e:44:21:db:96:70:54:
9c:34:31:ad:8a:2a:18:15:84:11:76:b4:f9:3d:d9:4d:6a:d6:
b8:5d:49:f8:bf:9e:26:5f:4f:5f:cb:9c:52:4d:36:bd:1d:36:
6c:41:1a:96:87:14:e2:52:8f:e3:71:80:aa:2f:b4:a8:54:a2:
1b:5c:6b:95:a1:26:29:58:f8:81:49:75:e0:69:ed:b6:b0:55:
0d:e0:5c:17:4f:1b:42:98:20:23:a6:7d:a1:06:2d:ff:04:b4:
34:57:0a:c2:77:06:6c:68:b8:38:29:d9:0c:63:58:55:02:e8:
35:04:42:d4:e5:eb:67:0c:a8:ee:2b:0e:7b:ed:0e:db:1b:15:
e4:24:ea:aa:38:6c:3a:3e:3e:aa:e4:65:e6:f5:4e:09:43:e3:
9f:89:5b:58:6b:28:be:02:5c:af:19:54:2f:88:5a:36:33:ef:
dc:bb:9f:c6:9d:42:95:e0:24:68:91:a9:fd:8e:44:ed:fa:1a:
9f:19:b2:88:1e:32:a4:9b:34:50:46:11:76:bd:0e:d2:7f:93:
ac:f8:ea:2b:70:73:a3:ae:ca:de:87:bf:9d:33:c4:0f:b0:17:
3a:4e:ac:37:20:5e:44:9f:7b:ec:01:37:51:3c:47:fb:ba:97:
ed:3a:89:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcoDu6A1E4wgXaKQAOgybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjYwNzI3MTIwMDE4WhcNMjYwNzI4MTIwMDE4WjAzMTEwLwYDVQQD
EyhjM2RkNjgzYWExMzgzMGU2ZGM5NTc3MWMwYzA0YmI4Mzc2YjM4ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFHKkXstvh30SnHYGOwyhPmrh/+S
V04dHD8JVA0DpPqPjC6avxRVV/3mYvPYOCIr3XMF9MGh2BF9a2sLChZWTNZBj66+
lGG1blC/1ONioEKsYwrf5USIuciL77bIpR+MhEYY0M7pHkpcacdbPsywkDM22QpI
nXd/ozRzcjGPCzmFXaazjthDSfV0REa9fl9QxhSHyPm2ZiF2/MwZmKgHM0IS03/M
pSe25lC3XrkvqjQZNo1A5B7DrPaO+JpHJhXQDmrY4o/4i2L6YNnvAIwphNtCSaev
Q12Vh836mVzjoyjZ47KD25OxMmfSBujUmsMtM4aFNEB07UpMWrATREriEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPdaDqhODDm3JV3HAwEu4N2s42WMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8qJgptr
UJ6ux54ORCHblnBUnDQxrYoqGBWEEXa0+T3ZTWrWuF1J+L+eJl9PX8ucUk02vR02
bEEalocU4lKP43GAqi+0qFSiG1xrlaEmKVj4gUl14GnttrBVDeBcF08bQpggI6Z9
oQYt/wS0NFcKwncGbGi4OCnZDGNYVQLoNQRC1OXrZwyo7isOe+0O2xsV5CTqqjhs
Oj4+quRl5vVOCUPjn4lbWGsovgJcrxlUL4haNjPv3Lufxp1CleAkaJGp/Y5E7foa
nxmyiB4ypJs0UEYRdr0O0n+TrPjqK3Bzo67K3oe/nTPED7AXOk6sNyBeRJ977AE3
UTxH+7qX7TqJbQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:34 2026 by rpki-client