Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: iXcxza3BexpHWUl8RfySf7s1yUQ8epAnLmv6a8gEYCo=
Subject key identifier: 0F:0F:C2:CB:0A:53:81:F5:B6:87:27:3F:AB:1C:24:5E:D6:C9:26:B5
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019FA14DCA71C6A59BFAD8B72DAC10515C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 02:00:57 +0000
Manifest this update: Mon 27 Jul 2026 02:00:57 +0000
Manifest next update: Tue 28 Jul 2026 02:00:57 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: rxwRF8h2hrNTxuRptbyuaTmmFUhwkXb9vbChVvOqWf0=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ca:71:c6:a5:9b:fa:d8:b7:2d:ac:10:51:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jul 27 02:00:57 2026 GMT
Not After : Jul 28 02:00:57 2026 GMT
Subject: CN=0f0fc2cb0a5381f5b687273fab1c245ed6c926b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:c6:34:89:7c:2c:cb:c5:93:4c:55:6d:33:
97:6f:43:e2:3b:c6:5a:c0:bc:ab:fb:73:c4:53:7e:
a2:3c:64:6e:7d:c4:92:fe:f1:30:4e:e0:83:48:a0:
eb:f3:9b:72:f5:c1:fd:d5:99:8b:ec:97:db:14:76:
2c:ac:79:28:5d:81:05:45:d9:a1:3c:c4:da:bb:f9:
44:fa:ff:18:e6:1d:40:ca:51:47:0c:d4:fb:1a:13:
8a:21:c1:98:ef:4b:3d:84:8d:86:41:e7:99:bb:30:
c4:05:2d:39:bd:54:18:84:1f:fa:42:ee:f4:7f:14:
e0:06:77:20:b5:46:c0:47:4c:17:45:e2:e1:ce:46:
4e:ca:1d:aa:83:2f:02:f3:11:dc:71:13:d9:b9:dd:
40:ba:bb:b8:d1:c3:ad:68:1a:ba:50:d0:05:e7:df:
b1:e4:6d:f1:b7:9e:eb:07:92:8f:70:d4:b3:1a:93:
bb:bb:d5:3d:a5:f8:52:bb:41:da:28:e4:a4:7e:07:
04:91:50:cc:6c:8e:06:fa:e4:66:df:a0:f7:d2:ac:
8e:da:5e:6f:d1:44:a9:1a:79:3a:54:7b:f9:24:89:
2d:72:cc:0b:9f:6a:1b:96:54:ac:9e:a0:05:be:02:
4d:79:b9:53:a7:21:5a:d6:84:66:d8:9f:90:52:2c:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:C2:CB:0A:53:81:F5:B6:87:27:3F:AB:1C:24:5E:D6:C9:26:B5
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:51:35:51:07:5a:80:d6:7c:ec:ad:97:6c:a7:ab:11:fc:f8:
4c:97:6e:27:b7:83:d2:9a:25:7f:1b:78:0e:00:5e:03:71:f0:
01:4d:6e:cd:41:c5:24:a0:a3:6a:bd:ae:27:d8:35:70:c2:e4:
e5:95:7b:9a:21:d2:51:74:45:4c:9f:42:b4:38:17:19:a3:ca:
84:c2:fd:46:33:d1:cf:ce:4d:f6:3d:1c:ae:e4:d7:08:62:18:
5f:5a:0d:f2:e9:67:e0:83:1d:8e:d4:d5:89:54:80:e0:5e:88:
ef:4b:27:3f:f4:c7:e8:5c:8d:d3:d6:85:ea:4f:24:6b:1f:fb:
9d:06:14:af:af:cf:58:61:cd:1e:e3:1d:30:dc:dd:76:76:88:
dd:65:1e:03:65:16:61:70:c0:a1:45:7e:52:56:04:55:b2:c8:
f2:bd:fb:57:da:2e:e9:58:fe:e3:8d:eb:d2:33:8b:d2:58:cf:
79:83:2b:4f:c2:55:07:37:12:af:8c:80:f4:bc:e5:71:83:a5:
42:b3:fd:da:ae:18:8b:ca:7d:57:05:b8:22:63:83:04:4a:14:
5a:54:86:a4:8f:aa:f8:54:f6:9e:8d:07:e4:9e:4d:00:b8:5d:
25:b7:70:cf:88:6b:d6:a2:42:f6:a8:13:09:2f:de:16:85:78:
5e:ee:41:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTcpxxqWb+ti3LawQUVxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjYwNzI3MDIwMDU3WhcNMjYwNzI4MDIwMDU3WjAzMTEwLwYDVQQD
EygwZjBmYzJjYjBhNTM4MWY1YjY4NzI3M2ZhYjFjMjQ1ZWQ2YzkyNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gbGNIl8LMvFk0xVbTOXb0PiO8Za
wLyr+3PEU36iPGRufcSS/vEwTuCDSKDr85ty9cH91ZmL7JfbFHYsrHkoXYEFRdmh
PMTau/lE+v8Y5h1AylFHDNT7GhOKIcGY70s9hI2GQeeZuzDEBS05vVQYhB/6Qu70
fxTgBncgtUbAR0wXReLhzkZOyh2qgy8C8xHccRPZud1Auru40cOtaBq6UNAF59+x
5G3xt57rB5KPcNSzGpO7u9U9pfhSu0HaKOSkfgcEkVDMbI4G+uRm36D30qyO2l5v
0USpGnk6VHv5JIktcswLn2obllSsnqAFvgJNeblTpyFa1oRm2J+QUiwV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8PwssKU4H1tocnP6scJF7WySa1MB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFE1UQda
gNZ87K2XbKerEfz4TJduJ7eD0polfxt4DgBeA3HwAU1uzUHFJKCjar2uJ9g1cMLk
5ZV7miHSUXRFTJ9CtDgXGaPKhML9RjPRz85N9j0cruTXCGIYX1oN8uln4IMdjtTV
iVSA4F6I70snP/TH6FyN09aF6k8kax/7nQYUr6/PWGHNHuMdMNzddnaI3WUeA2UW
YXDAoUV+UlYEVbLI8r37V9ou6Vj+443r0jOL0ljPeYMrT8JVBzcSr4yA9LzlcYOl
QrP92q4Yi8p9VwW4ImODBEoUWlSGpI+q+FT2no0H5J5NALhdJbdwz4hr1qJC9qgT
CS/eFoV4Xu5BjQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:43:25 2026 by rpki-client