Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: VUMCs5vO/XWpHuFOJgK+2Vjk50TfUkMd0oWmfXHWqfI=
Subject key identifier: 09:49:D1:34:14:EB:F2:6B:79:03:EB:F9:79:10:0D:58:A4:10:5C:00
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019FA1843A56E6490274CE5F583EFD352B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 03:00:25 +0000
Manifest this update: Mon 27 Jul 2026 03:00:25 +0000
Manifest next update: Tue 28 Jul 2026 03:00:25 +0000
Files and hashes: 1: 6fN9h0BE8aQ9CkNz0FDDwJzJ1WI.roa (hash: lchc3zsBE0dtE9KZlnVKCzZkcOJOv0TaeNSl6grWrKg=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: ZYDrwAlHkFW6R2iJ3JsogEeRNtegdI5J3n9/aSnO3Z0=)
3: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (hash: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8=)
4: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:3a:56:e6:49:02:74:ce:5f:58:3e:fd:35:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Jul 27 03:00:25 2026 GMT
Not After : Jul 28 03:00:25 2026 GMT
Subject: CN=0949d13414ebf26b7903ebf979100d58a4105c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:6c:43:f8:da:d7:b8:2c:0d:29:6a:6e:dd:
a7:64:3a:b3:df:99:74:40:17:ed:e2:be:f0:d7:59:
ff:60:bd:f3:65:20:9f:e8:5b:48:a7:be:21:5b:b8:
ad:df:02:7a:68:bb:8d:a7:91:09:bd:fe:7c:ab:78:
76:c1:3d:52:84:f7:c6:a2:db:1b:e1:07:71:73:4e:
e4:df:ca:f2:f0:a2:d1:cf:29:3c:37:7e:45:8d:59:
e7:06:96:81:56:84:f3:b3:98:3e:26:58:2f:e8:c1:
29:ef:f2:0a:b0:bd:7c:0f:3b:70:38:9f:ff:ce:66:
c0:3a:26:30:44:d4:21:e8:01:ce:de:e7:50:6a:6b:
6a:d9:9a:d4:ad:94:57:54:f0:e7:4c:a2:0f:2e:04:
e9:35:73:89:bc:ec:66:eb:81:72:2e:a0:d5:4a:a8:
a2:f5:42:6c:4d:eb:e9:65:88:af:67:ff:37:49:83:
db:9a:72:60:70:87:16:85:5f:26:fa:77:bb:a9:2c:
ab:6f:0b:0c:c2:f6:6f:f4:0c:db:f4:16:cc:4b:d6:
c0:7a:01:19:8c:e9:8c:97:e0:ee:6e:b5:7a:23:44:
0a:29:89:aa:5b:e9:6e:8a:66:07:3b:70:25:f8:16:
64:ce:f8:84:a1:47:6c:2c:c3:c3:80:81:45:b9:bb:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:D1:34:14:EB:F2:6B:79:03:EB:F9:79:10:0D:58:A4:10:5C:00
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f6:df:25:52:a4:c0:ee:22:a0:0c:1d:0b:9d:88:7a:8c:66:
0e:59:b9:69:a6:07:e8:1a:80:cd:e5:f6:e1:2e:f7:c2:ff:04:
6c:e0:58:9b:17:1a:e1:89:7e:4a:1b:78:ed:74:4a:6f:f3:69:
8d:97:f0:6f:09:22:d0:2c:c3:bc:31:79:75:a1:b3:f9:5e:0a:
ab:38:02:e1:76:f3:54:ed:4c:c0:52:c0:ed:79:9c:9d:0f:90:
45:0c:03:e1:1a:62:39:26:13:00:61:6c:4a:00:6e:20:ed:1f:
bc:46:69:b1:c2:3e:f4:87:ba:39:b3:56:f7:80:5c:b2:77:3f:
ba:95:0f:a3:f5:ff:4a:f7:34:10:66:6c:cf:79:a4:ef:6e:65:
eb:82:0c:e9:9f:b6:82:a7:73:97:53:b7:38:b2:03:37:e5:58:
b2:c3:2e:bc:7c:d2:ff:4c:ab:f9:2a:c0:c1:17:32:20:91:ae:
6c:1b:d3:b7:8e:d2:e2:bc:53:4a:b2:f2:9f:7e:a9:80:22:d5:
d0:bc:a2:3c:9a:61:8b:19:8e:f6:32:a1:f4:c1:49:1d:00:b1:
84:fa:b6:9f:4d:eb:52:66:63:f4:4b:b0:f9:49:28:c3:43:5f:
be:66:ac:e4:15:14:aa:ec:67:63:36:5e:69:f5:ab:c8:a8:8e:
5b:60:17:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhDpW5kkCdM5fWD79NStAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz
ZmRlNWMwHhcNMjYwNzI3MDMwMDI1WhcNMjYwNzI4MDMwMDI1WjAzMTEwLwYDVQQD
EygwOTQ5ZDEzNDE0ZWJmMjZiNzkwM2ViZjk3OTEwMGQ1OGE0MTA1YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDZsQ/ja17gsDSlqbt2nZDqz35l0
QBft4r7w11n/YL3zZSCf6FtIp74hW7it3wJ6aLuNp5EJvf58q3h2wT1ShPfGotsb
4Qdxc07k38ry8KLRzyk8N35FjVnnBpaBVoTzs5g+Jlgv6MEp7/IKsL18DztwOJ//
zmbAOiYwRNQh6AHO3udQamtq2ZrUrZRXVPDnTKIPLgTpNXOJvOxm64FyLqDVSqii
9UJsTevpZYivZ/83SYPbmnJgcIcWhV8m+ne7qSyrbwsMwvZv9Azb9BbMS9bAegEZ
jOmMl+DubrV6I0QKKYmqW+luimYHO3Al+BZkzviEoUdsLMPDgIFFubs7UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlJ0TQU6/JreQPr+XkQDVikEFwAMB8GA1UdIwQY
MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt
NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1
LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfbfJVKk
wO4ioAwdC52IeoxmDlm5aaYH6BqAzeX24S73wv8EbOBYmxca4Yl+Sht47XRKb/Np
jZfwbwki0CzDvDF5daGz+V4KqzgC4XbzVO1MwFLA7XmcnQ+QRQwD4RpiOSYTAGFs
SgBuIO0fvEZpscI+9Ie6ObNW94Bcsnc/upUPo/X/Svc0EGZsz3mk725l64IM6Z+2
gqdzl1O3OLIDN+VYssMuvHzS/0yr+SrAwRcyIJGubBvTt47S4rxTSrLyn36pgCLV
0LyiPJphixmO9jKh9MFJHQCxhPq2n03rUmZj9Euw+Ukow0Nfvmas5BUUquxnYzZe
afWryKiOW2AXyg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:32 2026 by rpki-client