Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: nO2ksItjaEkbOD2eZb3qJ5959lS84Khs9ysYgzXmzhU=
Subject key identifier: 50:9E:BD:D4:8B:47:0C:91:39:F7:1D:A7:02:3A:97:64:D0:93:A4:AD
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019FA071BEB7BE3F29DFABBD272A39388D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 19D5
Signing time: Sun 26 Jul 2026 22:00:36 +0000
Manifest this update: Sun 26 Jul 2026 22:00:36 +0000
Manifest next update: Mon 27 Jul 2026 22:00:36 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: hD2X09EU3N/kytWlJqtWoO/NJ+08FYqyYd64YX3ndwA=)
2: QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa (hash: C8EnG7j+HGwDjJjN4fPZ3xTluNmlPd7Cuxa75PRIy0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:be:b7:be:3f:29:df:ab:bd:27:2a:39:38:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jul 26 22:00:36 2026 GMT
Not After : Jul 27 22:00:36 2026 GMT
Subject: CN=509ebdd48b470c9139f71da7023a9764d093a4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:42:83:39:bb:cd:9f:af:90:f0:0f:a5:a9:
cb:80:83:c8:4f:47:07:2a:5c:4f:ad:f8:00:7b:2e:
05:11:8e:72:17:6f:53:3f:de:a8:95:59:e3:77:21:
ec:c1:c2:cf:e8:33:c2:3d:bc:af:cc:7b:b5:c8:4c:
1c:2e:a6:51:db:85:20:01:77:12:e6:38:13:aa:39:
fe:f1:77:6c:48:b3:61:95:44:a3:45:6e:12:5e:fa:
ab:eb:be:e9:42:6c:c9:f3:56:5a:bd:dd:66:31:f4:
df:86:4b:20:f0:80:f1:bc:19:02:8c:b1:c6:bc:85:
75:f9:90:b8:8e:12:45:60:5c:19:5d:d0:45:35:99:
ec:9b:77:4a:11:6d:05:ab:73:5d:1d:3b:74:07:b3:
e5:f9:b7:66:aa:ff:33:cf:bd:59:e6:30:4a:b4:31:
d7:45:4c:5b:db:26:d6:f4:00:55:e3:28:ac:0a:23:
8c:11:c5:ed:9e:bf:dc:ca:b6:ee:8c:02:7f:eb:ca:
bd:10:ac:d9:bd:71:aa:49:5d:48:c5:0b:eb:ef:53:
1b:e7:bb:61:b6:c1:b1:72:ee:ca:1e:af:69:b4:0a:
46:6c:bd:57:46:e0:99:46:a0:b8:bd:4a:29:0d:72:
e9:d4:ab:c9:fa:91:4d:a6:19:f5:2c:d7:fd:28:92:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:BD:D4:8B:47:0C:91:39:F7:1D:A7:02:3A:97:64:D0:93:A4:AD
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:80:d1:71:cd:fb:58:a8:a7:81:1c:c2:6c:a1:80:97:f9:76:
da:8f:89:af:5c:14:28:01:30:dd:0f:a0:67:b2:3f:05:50:68:
29:84:91:8a:22:41:5f:8f:1e:ba:51:9e:f1:f9:f9:e7:7f:a6:
cd:24:1f:b5:aa:e5:5d:d6:a3:96:c4:dc:bb:96:69:07:1b:2c:
f5:4a:fb:0d:46:61:67:9f:01:93:e5:08:4e:51:86:4e:bb:78:
90:27:40:4b:d0:a5:8d:72:40:bf:93:02:87:da:5f:c4:80:f0:
c6:fe:55:ba:40:78:16:65:eb:5d:4a:ab:52:84:24:2e:82:00:
0f:4e:48:6c:e9:ee:39:5f:bc:e7:42:62:97:d1:42:64:d8:23:
90:ff:61:83:6e:9d:98:13:50:2f:85:4c:06:c4:1c:0c:43:d6:
59:bd:5a:e3:5e:8d:fd:78:ef:5a:c5:fb:3f:8d:4a:0d:40:4e:
6f:61:9c:53:1d:b9:23:61:13:75:95:4e:13:71:64:8d:2f:e4:
99:5b:48:d0:09:1a:2c:4f:cd:b3:9c:33:bc:82:e6:6d:8d:75:
11:7f:da:83:c6:29:d0:94:1f:2f:a9:c3:dc:63:d8:f1:c5:35:
a9:76:4c:19:4d:94:32:7d:8e:3a:52:b1:df:76:63:bc:6b:a1:
a1:10:ea:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcb63vj8p36u9Jyo5OI1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDg3NGIzMzNlMzVkZjE0ZmQ5NzBlMTg5NTgxZGEwOTNi
YzgwOTMwHhcNMjYwNzI2MjIwMDM2WhcNMjYwNzI3MjIwMDM2WjAzMTEwLwYDVQQD
Eyg1MDllYmRkNDhiNDcwYzkxMzlmNzFkYTcwMjNhOTc2NGQwOTNhNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAondCgzm7zZ+vkPAPpanLgIPIT0cH
KlxPrfgAey4FEY5yF29TP96olVnjdyHswcLP6DPCPbyvzHu1yEwcLqZR24UgAXcS
5jgTqjn+8XdsSLNhlUSjRW4SXvqr677pQmzJ81Zavd1mMfTfhksg8IDxvBkCjLHG
vIV1+ZC4jhJFYFwZXdBFNZnsm3dKEW0Fq3NdHTt0B7Pl+bdmqv8zz71Z5jBKtDHX
RUxb2ybW9ABV4yisCiOMEcXtnr/cyrbujAJ/68q9EKzZvXGqSV1IxQvr71Mb57th
tsGxcu7KHq9ptApGbL1XRuCZRqC4vUopDXLp1KvJ+pFNphn1LNf9KJJlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCevdSLRwyROfcdpwI6l2TQk6StMB8GA1UdIwQY
MBaAFA0IdLMz413xT9lw4YlYHaCTvICTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUt
MzE4MWRiOTExYTEzLzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUtMzE4MWRiOTExYTEz
LzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIDRcc37
WKingRzCbKGAl/l22o+Jr1wUKAEw3Q+gZ7I/BVBoKYSRiiJBX48eulGe8fn553+m
zSQftarlXdajlsTcu5ZpBxss9Ur7DUZhZ58Bk+UITlGGTrt4kCdAS9CljXJAv5MC
h9pfxIDwxv5VukB4FmXrXUqrUoQkLoIAD05IbOnuOV+850Jil9FCZNgjkP9hg26d
mBNQL4VMBsQcDEPWWb1a416N/XjvWsX7P41KDUBOb2GcUx25I2ETdZVOE3FkjS/k
mVtI0AkaLE/Ns5wzvILmbY11EX/ag8Yp0JQfL6nD3GPY8cU1qXZMGU2UMn2OOlKx
33ZjvGuhoRDqvA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:59:11 2026 by rpki-client