Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.mft
File: r7DN1YxjWiFj1eiqBKO90uKAa0Y.mft (raw, json)
Hash identifier: 0mZA+5h2/lgTSO8sva6AJtt61Ze1Gfn3/axnOKiGU9I=
Subject key identifier: EC:67:D5:51:50:45:D9:E0:05:C1:69:2F:F7:4A:05:EB:40:A3:76:42
Authority key identifier: AF:B0:CD:D5:8C:63:5A:21:63:D5:E8:AA:04:A3:BD:D2:E2:80:6B:46
Certificate issuer: /CN=afb0cdd58c635a2163d5e8aa04a3bdd2e2806b46
Certificate serial: 019FA0E106EA8B45A2DD4310DBE0EF242E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7DN1YxjWiFj1eiqBKO90uKAa0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:09 +0000
Manifest this update: Mon 27 Jul 2026 00:02:09 +0000
Manifest next update: Tue 28 Jul 2026 00:02:09 +0000
Files and hashes: 1: SPpspv0U8zVaGU4TeknTZsHQYOU.roa (hash: jWw4v/J9P+IR26L3cXzqerTmo1lnbwhHoYp3Q0Zu4Ok=)
2: r7DN1YxjWiFj1eiqBKO90uKAa0Y.crl (hash: DEHVRcAJvXq/oR4fzcHIwndMutsFJ1Fr0nWUJ+IZ1Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7DN1YxjWiFj1eiqBKO90uKAa0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e1:06:ea:8b:45:a2:dd:43:10:db:e0:ef:24:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb0cdd58c635a2163d5e8aa04a3bdd2e2806b46
Validity
Not Before: Jul 27 00:02:09 2026 GMT
Not After : Jul 28 00:02:09 2026 GMT
Subject: CN=ec67d5515045d9e005c1692ff74a05eb40a37642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:bd:61:69:a4:ef:19:57:3a:f4:be:2f:a1:
53:ed:3b:9c:2f:c5:99:03:e4:39:7c:c9:de:d2:88:
43:de:ba:db:13:08:a7:1c:1d:bd:0b:49:f9:73:59:
38:05:aa:be:2d:98:bb:54:63:e1:87:2a:af:c4:7a:
6f:9c:90:24:1c:c1:a1:bc:45:5d:cb:c5:cd:89:bd:
fb:c5:ee:7c:f2:87:a7:d5:98:db:3b:fc:1a:68:40:
f0:40:ed:08:99:3c:d0:29:ee:92:4e:9f:06:6c:d3:
0e:29:0b:bc:04:dd:ff:7f:82:f8:87:12:7d:ec:ec:
06:e1:5b:27:b8:b8:a8:05:ed:b2:60:67:df:90:ee:
03:30:a4:a8:9e:98:19:d0:a3:26:27:8c:bb:1c:96:
b1:cd:0e:14:9d:87:f3:f0:2f:aa:c2:8a:a8:35:af:
96:87:30:22:67:17:30:2e:22:83:3b:52:0a:da:7e:
21:83:7a:ed:00:78:b3:8d:39:ff:9b:4d:5f:69:19:
28:b4:f1:87:a7:c3:25:8e:5d:c7:8e:79:14:be:88:
d5:ad:2a:e0:83:2c:bb:b1:30:50:64:e0:bf:d3:57:
30:b3:41:32:cd:be:29:a7:14:53:82:9f:ca:86:a6:
40:88:a6:4a:f5:03:cc:7f:c5:18:91:da:d4:dd:28:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:67:D5:51:50:45:D9:E0:05:C1:69:2F:F7:4A:05:EB:40:A3:76:42
X509v3 Authority Key Identifier:
keyid:AF:B0:CD:D5:8C:63:5A:21:63:D5:E8:AA:04:A3:BD:D2:E2:80:6B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7DN1YxjWiFj1eiqBKO90uKAa0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:68:da:0e:6b:37:39:bb:91:c2:3d:1f:d0:c4:50:c1:8a:
94:72:36:36:ef:ee:eb:4a:46:35:bd:1f:2c:fc:c9:9d:f9:55:
54:8d:d9:c6:32:c2:1c:60:dd:18:17:72:35:35:0f:bb:1f:78:
89:41:f1:5a:13:4b:d9:23:75:6a:0f:a0:0c:d2:2b:7c:57:65:
28:94:d2:6d:0f:85:46:89:9f:c4:b2:f9:3e:e1:94:8f:36:a9:
7f:7d:be:c2:84:4a:cb:77:dc:03:8a:49:12:33:16:8e:09:69:
6e:07:1b:bd:fd:1d:17:99:f9:8d:74:74:1f:17:b9:38:7a:18:
f8:dc:7a:05:3f:f4:4b:19:db:72:10:d2:f9:4e:e2:c4:92:cb:
b7:28:4f:dc:cd:a5:df:0d:ee:5f:d9:34:8e:05:f7:89:f9:70:
73:93:51:7d:6d:d6:59:62:09:d9:65:4c:f5:0f:37:e9:5a:81:
7b:4f:f2:a2:ab:ac:f2:2e:5d:53:8d:5d:15:91:58:2f:71:92:
73:d3:ea:56:1d:c1:12:eb:e2:71:86:d1:82:7e:5b:c1:6a:de:
69:71:44:a1:8e:bb:2b:ab:70:02:33:ae:8d:dd:d2:05:ba:32:
82:4e:02:3a:40:0a:b9:bc:6b:d7:e5:e0:94:80:e5:04:04:7a:
19:07:70:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4Qbqi0Wi3UMQ2+DvJC6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjBjZGQ1OGM2MzVhMjE2M2Q1ZThhYTA0YTNiZGQyZTI4
MDZiNDYwHhcNMjYwNzI3MDAwMjA5WhcNMjYwNzI4MDAwMjA5WjAzMTEwLwYDVQQD
EyhlYzY3ZDU1MTUwNDVkOWUwMDVjMTY5MmZmNzRhMDVlYjQwYTM3NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD69YWmk7xlXOvS+L6FT7TucL8WZ
A+Q5fMne0ohD3rrbEwinHB29C0n5c1k4Baq+LZi7VGPhhyqvxHpvnJAkHMGhvEVd
y8XNib37xe588oen1ZjbO/waaEDwQO0ImTzQKe6STp8GbNMOKQu8BN3/f4L4hxJ9
7OwG4VsnuLioBe2yYGffkO4DMKSonpgZ0KMmJ4y7HJaxzQ4UnYfz8C+qwoqoNa+W
hzAiZxcwLiKDO1IK2n4hg3rtAHizjTn/m01faRkotPGHp8Mljl3HjnkUvojVrSrg
gyy7sTBQZOC/01cws0Eyzb4ppxRTgp/KhqZAiKZK9QPMf8UYkdrU3Shd7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxn1VFQRdngBcFpL/dKBetAo3ZCMB8GA1UdIwQY
MBaAFK+wzdWMY1ohY9XoqgSjvdLigGtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdETjFZeGpXaUZqMWVpcUJLTzkwdUtBYTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNTY3NGUtZGI2MS00NzIyLWI5MjIt
NTM1YmUyNzVlNmY1LzEvcjdETjFZeGpXaUZqMWVpcUJLTzkwdUtBYTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jNTY3NGUtZGI2MS00NzIyLWI5MjItNTM1YmUyNzVlNmY1
LzEvcjdETjFZeGpXaUZqMWVpcUJLTzkwdUtBYTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLNo2g5r
Nzm7kcI9H9DEUMGKlHI2Nu/u60pGNb0fLPzJnflVVI3ZxjLCHGDdGBdyNTUPux94
iUHxWhNL2SN1ag+gDNIrfFdlKJTSbQ+FRomfxLL5PuGUjzapf32+woRKy3fcA4pJ
EjMWjglpbgcbvf0dF5n5jXR0Hxe5OHoY+Nx6BT/0SxnbchDS+U7ixJLLtyhP3M2l
3w3uX9k0jgX3iflwc5NRfW3WWWIJ2WVM9Q836VqBe0/yoqus8i5dU41dFZFYL3GS
c9PqVh3BEuvicYbRgn5bwWreaXFEoY67K6twAjOujd3SBboygk4COkAKubxr1+Xg
lIDlBAR6GQdwyw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:28 2026 by rpki-client