Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: Puw+EQx5mj2w14kdPTTtA2IArWnjpLso6TVpe/xjdcA=
Subject key identifier: 6F:6B:73:A8:CD:91:9C:0B:8A:F4:0A:CF:9D:BC:17:BB:BD:DF:71:00
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 019F9E15876B48B02E8DDA4BBEFC2EC9AB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 11:00:38 +0000
Manifest this update: Sun 26 Jul 2026 11:00:38 +0000
Manifest next update: Mon 27 Jul 2026 11:00:38 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: LxLBWv43IucWVnA6E/T8X42veNR9k4lDXKjDHr2kbos=)
2: LxJaOC-2KIpwwVVZABAlIWlsIp0.roa (hash: 7ma0hwDbVZMGk4nMz3JXDWUYVRt/2Dj4M9Onwnqp5u4=)
3: pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa (hash: kTCwSVUPhhizrIBbzo+G2rorHsKLRW35XnzDp2Z2CKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:87:6b:48:b0:2e:8d:da:4b:be:fc:2e:c9:ab:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jul 26 11:00:38 2026 GMT
Not After : Jul 27 11:00:38 2026 GMT
Subject: CN=6f6b73a8cd919c0b8af40acf9dbc17bbbddf7100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:69:bb:fc:9a:fc:9d:c2:da:be:73:b6:d7:
b1:36:3b:a2:2f:d6:f4:34:df:50:69:e4:0e:aa:0e:
57:46:8b:d6:96:b8:96:70:44:d9:e4:8a:60:2c:b2:
2a:6e:ef:96:ed:55:11:6a:c9:b9:a1:a2:54:0a:5c:
68:9c:95:d9:f7:46:d7:30:c2:cc:99:c8:2c:0f:85:
9d:0e:21:a7:0b:f7:78:66:e5:01:c7:f8:10:22:ed:
75:9f:bf:fb:01:0a:ec:c8:f4:d3:04:9f:f4:e9:94:
4f:b1:91:66:97:45:41:15:41:d8:2a:98:d9:75:48:
70:8d:f0:56:4f:22:ea:fe:fa:2e:fa:5d:08:84:94:
57:1f:7b:d1:c4:4d:5b:b4:59:cd:d5:36:61:d2:29:
5a:54:83:7e:11:90:0a:2b:1f:22:57:23:30:25:cd:
7f:1c:55:55:84:1f:22:c5:fb:1b:b1:61:47:16:0f:
6b:6f:90:65:7e:a9:e4:7c:05:3a:6c:53:fe:60:7a:
c2:87:e7:82:99:e4:d8:28:0f:32:28:d1:d6:f2:bc:
45:39:0f:0f:db:c8:3e:99:95:0a:fa:eb:d6:d0:80:
d7:99:38:00:55:fc:fe:2a:96:70:01:e3:92:20:64:
cd:d3:25:8b:c8:47:51:45:cc:78:0b:8a:52:e3:ea:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:73:A8:CD:91:9C:0B:8A:F4:0A:CF:9D:BC:17:BB:BD:DF:71:00
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:6f:74:b1:76:c0:27:02:bf:90:ee:a4:e0:3e:d3:29:ad:
0e:af:6f:e0:65:ec:a9:55:48:65:df:8d:07:ae:bb:a0:a0:ee:
e0:b3:9a:b8:c0:12:de:5c:5c:36:2b:3e:82:08:cc:c5:ba:7d:
1b:da:fb:df:c6:28:7d:38:28:66:e3:52:1e:fe:0d:c7:e5:fe:
8e:e0:ea:03:aa:12:85:f7:2b:19:74:37:8d:ae:7b:dd:2b:13:
20:62:b4:9b:54:5d:e9:49:a6:45:6a:f6:6f:d2:42:ac:52:7b:
be:b1:36:c6:d0:d4:18:b8:16:5d:6c:80:e3:55:7e:3d:8b:8e:
47:53:58:b2:ff:d2:c5:aa:7d:a1:1e:7d:f3:62:6c:cf:cf:50:
cc:2c:1e:63:a1:99:bc:d0:b9:37:17:3a:15:a7:63:e4:40:b2:
48:a3:12:f7:49:c5:c3:44:f4:38:ad:76:fb:64:90:8c:02:77:
5b:9c:98:7a:32:0e:d9:30:ca:0c:4f:f6:3c:e5:64:61:f8:29:
8a:fe:91:80:15:4e:0d:c0:c1:30:0d:e5:08:9e:0a:20:88:fc:
6d:55:45:bb:ab:ab:bc:dc:11:5b:2f:ca:31:ae:7f:c1:22:28:
23:16:ff:27:55:05:f6:88:3b:e4:ff:2c:31:65:81:6b:ed:49:
67:83:81:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eFYdrSLAujdpLvvwuyatdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh
NDM1MjQwHhcNMjYwNzI2MTEwMDM4WhcNMjYwNzI3MTEwMDM4WjAzMTEwLwYDVQQD
Eyg2ZjZiNzNhOGNkOTE5YzBiOGFmNDBhY2Y5ZGJjMTdiYmJkZGY3MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWRpu/ya/J3C2r5zttexNjuiL9b0
NN9QaeQOqg5XRovWlriWcETZ5IpgLLIqbu+W7VURasm5oaJUClxonJXZ90bXMMLM
mcgsD4WdDiGnC/d4ZuUBx/gQIu11n7/7AQrsyPTTBJ/06ZRPsZFml0VBFUHYKpjZ
dUhwjfBWTyLq/vou+l0IhJRXH3vRxE1btFnN1TZh0ilaVIN+EZAKKx8iVyMwJc1/
HFVVhB8ixfsbsWFHFg9rb5BlfqnkfAU6bFP+YHrCh+eCmeTYKA8yKNHW8rxFOQ8P
28g+mZUK+uvW0IDXmTgAVfz+KpZwAeOSIGTN0yWLyEdRRcx4C4pS4+ohHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9rc6jNkZwLivQKz528F7u933EAMB8GA1UdIwQY
MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt
MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1
LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh1vdLF2
wCcCv5DupOA+0ymtDq9v4GXsqVVIZd+NB667oKDu4LOauMAS3lxcNis+ggjMxbp9
G9r738YofTgoZuNSHv4Nx+X+juDqA6oShfcrGXQ3ja573SsTIGK0m1Rd6UmmRWr2
b9JCrFJ7vrE2xtDUGLgWXWyA41V+PYuOR1NYsv/Sxap9oR5982Jsz89QzCweY6GZ
vNC5Nxc6Fadj5ECySKMS90nFw0T0OK12+2SQjAJ3W5yYejIO2TDKDE/2POVkYfgp
iv6RgBVODcDBMA3lCJ4KIIj8bVVFu6urvNwRWy/KMa5/wSIoIxb/J1UF9og75P8s
MWWBa+1JZ4OBpg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:40 2026 by rpki-client