Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: HkCFujSQmnmcCjxvMt2dKoOi/E6HVS12JNg4jqIzpOQ=
Subject key identifier: A0:5C:D4:68:B6:08:4F:A0:0D:09:CF:64:12:1E:E2:D5:41:43:0A:01
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019FA33C6C65F9BFDD154A380C5D75047A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 11:01:13 +0000
Manifest this update: Mon 27 Jul 2026 11:01:13 +0000
Manifest next update: Tue 28 Jul 2026 11:01:13 +0000
Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: aSmcMsAjGEgIMtHG1hlT9PRlxNFd+snB+zMqrfY3H5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:6c:65:f9:bf:dd:15:4a:38:0c:5d:75:04:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Jul 27 11:01:13 2026 GMT
Not After : Jul 28 11:01:13 2026 GMT
Subject: CN=a05cd468b6084fa00d09cf64121ee2d541430a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:c3:d2:6e:8c:b8:5f:41:95:d8:04:77:47:
11:87:8d:dc:f5:a3:f2:a4:a6:f3:6f:19:41:91:8d:
0c:81:4b:0a:40:f8:f1:8c:61:5d:85:c6:4e:a7:d8:
00:0f:d5:c4:ed:82:0d:84:19:32:1a:d8:68:7e:e4:
43:43:35:6e:b5:a6:fb:2b:cf:8c:5b:f7:98:67:3a:
be:9a:a6:d5:fe:58:c9:de:4e:cd:c0:d2:96:66:0a:
ce:af:57:df:b6:40:a1:4e:23:8b:48:6c:19:09:8d:
00:71:86:b0:b7:e3:aa:54:09:60:e0:ea:52:91:1a:
91:49:4c:89:3b:d1:c0:5b:0e:e0:b5:38:eb:7a:e7:
b2:ea:c4:88:a3:af:84:29:42:30:8d:b0:d1:ec:95:
65:01:2e:c6:1e:df:ca:28:28:75:9c:e6:a5:d3:c0:
b2:2a:9b:ec:15:91:3d:c5:f4:c5:77:7c:85:cb:04:
fc:eb:23:c2:75:77:eb:a7:4d:42:f0:40:5c:91:15:
a8:95:a3:40:88:14:b8:ac:61:e9:63:43:1a:08:02:
c2:35:d8:3c:0c:bd:dc:97:56:c4:b1:15:07:81:42:
4c:fc:d6:5a:4f:74:dd:9c:d1:f5:7a:8e:ed:b6:69:
cf:5c:4f:17:e5:de:f5:16:96:0e:9f:68:58:44:17:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:D4:68:B6:08:4F:A0:0D:09:CF:64:12:1E:E2:D5:41:43:0A:01
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:41:a8:0c:57:14:31:95:ad:a9:60:5e:b0:9a:9e:82:42:36:
e6:bb:bd:4f:d3:86:2f:90:62:30:06:77:fe:cc:28:44:75:c5:
e9:b6:dc:88:2c:e9:19:13:31:82:49:bc:33:a4:c1:53:25:c3:
f5:d6:85:eb:a4:9c:bf:de:70:98:ed:d3:dd:52:d7:8b:84:be:
05:44:21:4b:76:ed:8f:4e:e9:26:22:ad:e3:af:51:e4:50:44:
e0:a7:67:43:5c:8e:0a:1b:dd:d5:0a:0c:a6:97:60:df:2e:c9:
74:4b:60:e4:19:f9:11:f3:46:04:23:f4:47:1d:3b:84:c9:67:
8e:3b:29:4a:d8:1c:2a:eb:4f:19:3c:03:29:7c:26:f2:18:b6:
d8:6b:09:24:20:f6:37:98:52:15:0a:02:2e:55:9a:31:59:21:
87:b5:25:49:cd:74:42:98:21:aa:d1:82:1f:01:de:bb:2b:dd:
d0:19:18:c1:e9:0b:34:65:a8:8c:2a:f1:f9:1c:86:a1:be:4a:
e2:41:00:8d:c3:a1:5e:af:ac:a8:ac:37:bc:2e:47:6f:8d:76:
1f:63:b8:76:f8:ec:25:9e:22:fe:34:4d:4b:ad:40:62:b9:d8:
81:37:71:9b:f8:09:77:21:d4:59:3e:cf:76:73:d0:45:e4:f4:
ad:47:07:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPGxl+b/dFUo4DF11BHoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi
ZDk5ZTkwHhcNMjYwNzI3MTEwMTEzWhcNMjYwNzI4MTEwMTEzWjAzMTEwLwYDVQQD
EyhhMDVjZDQ2OGI2MDg0ZmEwMGQwOWNmNjQxMjFlZTJkNTQxNDMwYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrbD0m6MuF9BldgEd0cRh43c9aPy
pKbzbxlBkY0MgUsKQPjxjGFdhcZOp9gAD9XE7YINhBkyGthofuRDQzVutab7K8+M
W/eYZzq+mqbV/ljJ3k7NwNKWZgrOr1fftkChTiOLSGwZCY0AcYawt+OqVAlg4OpS
kRqRSUyJO9HAWw7gtTjreuey6sSIo6+EKUIwjbDR7JVlAS7GHt/KKCh1nOal08Cy
KpvsFZE9xfTFd3yFywT86yPCdXfrp01C8EBckRWolaNAiBS4rGHpY0MaCALCNdg8
DL3cl1bEsRUHgUJM/NZaT3TdnNH1eo7ttmnPXE8X5d71FpYOn2hYRBc1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBc1Gi2CE+gDQnPZBIe4tVBQwoBMB8GA1UdIwQY
MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It
NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl
LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0GoDFcU
MZWtqWBesJqegkI25ru9T9OGL5BiMAZ3/swoRHXF6bbciCzpGRMxgkm8M6TBUyXD
9daF66Scv95wmO3T3VLXi4S+BUQhS3btj07pJiKt469R5FBE4KdnQ1yOChvd1QoM
ppdg3y7JdEtg5Bn5EfNGBCP0Rx07hMlnjjspStgcKutPGTwDKXwm8hi22GsJJCD2
N5hSFQoCLlWaMVkhh7UlSc10QpghqtGCHwHeuyvd0BkYwekLNGWojCrx+RyGob5K
4kEAjcOhXq+sqKw3vC5Hb412H2O4dvjsJZ4i/jRNS61AYrnYgTdxm/gJdyHUWT7P
dnPQReT0rUcHgg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:06:58 2026 by rpki-client