Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json)
Hash identifier: fKy2RhK+cXQyy1ofDRA9atU1A+a1EtXaJ3Z/z7vFAAg=
Subject key identifier: FA:C5:01:9B:14:CA:DC:42:0A:14:21:04:BB:C6:F8:67:ED:AC:05:A9
Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Certificate issuer: /CN=32b1b94b073c547991c20f842eadec167ec19e34
Certificate serial: 019FA3052F4C2F32568946425A073C1349AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
Manifest number: 0646
Signing time: Mon 27 Jul 2026 10:00:53 +0000
Manifest this update: Mon 27 Jul 2026 10:00:53 +0000
Manifest next update: Tue 28 Jul 2026 10:00:53 +0000
Files and hashes: 1: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: KxVnbJw7QSMZOvgyIFxq1bMAUmpQlhlctnn8G7iL+ts=)
2: ajY7opH2JkgKSsn0u1tCSe2qO48.roa (hash: digTHTa7KkUVMUs55bQN2ammxPkYLAkzneKY1dmofHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:2f:4c:2f:32:56:89:46:42:5a:07:3c:13:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34
Validity
Not Before: Jul 27 10:00:53 2026 GMT
Not After : Jul 28 10:00:53 2026 GMT
Subject: CN=fac5019b14cadc420a142104bbc6f867edac05a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:9a:ba:e0:73:f2:0d:d4:8f:1e:0f:60:0a:
18:bd:ce:99:6f:0f:dd:11:be:8b:6c:9d:a2:a2:e5:
0f:74:e1:dc:0a:ba:8f:41:17:1b:07:39:22:b2:70:
78:f2:26:63:41:9a:ed:70:66:ad:c9:63:a7:96:8b:
6b:38:5c:ca:d2:4b:42:b9:6f:ef:db:cc:a0:7b:51:
55:97:e3:d7:db:16:ec:2f:a4:c1:81:a6:78:35:51:
92:5d:b1:5a:d3:ef:e9:93:93:30:70:9e:54:e5:87:
1e:4b:05:2d:33:b1:b5:72:e2:05:6f:f3:f2:74:6e:
82:5b:73:91:87:8e:fb:59:ba:e1:f6:8b:34:84:21:
bf:d6:6c:8f:a4:f0:a1:7d:d8:46:45:0a:78:5d:95:
4e:cd:4d:d3:58:92:19:c8:8b:c7:47:dc:93:bb:9b:
b8:f0:aa:f4:0c:60:7a:83:7e:eb:46:fb:2e:f3:48:
f5:2f:9d:01:2f:18:09:8c:65:8e:42:b6:a1:63:34:
f5:e7:b3:5f:80:6d:08:2b:e6:27:21:39:2e:fa:6b:
aa:2a:1e:79:dc:9c:71:e9:fb:b9:6e:11:57:0f:16:
c5:9f:34:35:60:f3:ab:95:eb:85:ed:52:9a:b1:d8:
c2:82:e9:87:a3:38:da:41:e5:2a:41:0a:41:44:99:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:01:9B:14:CA:DC:42:0A:14:21:04:BB:C6:F8:67:ED:AC:05:A9
X509v3 Authority Key Identifier:
keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:c3:1e:3b:c0:b7:4a:74:8e:ed:e0:10:70:63:30:e0:ec:
86:68:b6:99:d8:ef:f6:4d:f6:46:58:dd:2a:e7:50:3a:5f:c3:
a8:11:e3:5e:77:79:b7:75:06:da:0d:c2:57:49:74:17:e4:1b:
48:84:4c:d3:81:36:e0:ee:b4:b3:4c:88:0d:db:27:d8:92:37:
c4:30:b2:83:e3:f7:cb:35:5f:05:e8:5c:01:27:4b:bf:5d:aa:
f3:29:de:af:ac:8e:f4:af:b8:13:95:20:66:78:db:07:08:79:
46:6c:93:4c:ba:f6:4e:d6:dc:c2:05:2c:d0:f1:16:63:68:8a:
1e:62:a2:0b:d3:cd:4b:ce:5b:0f:08:20:5b:9f:d2:29:a2:a6:
f4:c0:33:19:52:bf:09:71:1f:07:8e:0c:24:7d:e3:2b:d3:c8:
ac:60:da:32:35:4e:a7:49:b5:bd:ee:92:d6:cd:33:6e:4c:13:
4f:d7:67:73:01:e9:e9:e1:34:0b:ea:f1:be:bf:d2:1b:7f:f4:
36:be:ea:ea:39:35:68:7a:5c:1d:19:fa:bd:b1:f5:77:98:ce:
cb:26:c4:43:f3:b3:7f:b5:4c:37:b0:2c:1f:97:33:a3:83:c6:
5f:57:4c:4c:a1:c1:8e:7f:f3:91:27:15:55:cd:a0:be:6c:65:
69:cb:ee:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBS9MLzJWiUZCWgc8E0mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYjFiOTRiMDczYzU0Nzk5MWMyMGY4NDJlYWRlYzE2N2Vj
MTllMzQwHhcNMjYwNzI3MTAwMDUzWhcNMjYwNzI4MTAwMDUzWjAzMTEwLwYDVQQD
EyhmYWM1MDE5YjE0Y2FkYzQyMGExNDIxMDRiYmM2Zjg2N2VkYWMwNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWauuBz8g3Ujx4PYAoYvc6Zbw/d
Eb6LbJ2iouUPdOHcCrqPQRcbBzkisnB48iZjQZrtcGatyWOnlotrOFzK0ktCuW/v
28yge1FVl+PX2xbsL6TBgaZ4NVGSXbFa0+/pk5MwcJ5U5YceSwUtM7G1cuIFb/Py
dG6CW3ORh477Wbrh9os0hCG/1myPpPChfdhGRQp4XZVOzU3TWJIZyIvHR9yTu5u4
8Kr0DGB6g37rRvsu80j1L50BLxgJjGWOQrahYzT157NfgG0IK+YnITku+muqKh55
3Jxx6fu5bhFXDxbFnzQ1YPOrleuF7VKasdjCgumHozjaQeUqQQpBRJkDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrFAZsUytxCChQhBLvG+GftrAWpMB8GA1UdIwQY
MBaAFDKxuUsHPFR5kcIPhC6t7BZ+wZ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYTIwNmUtMTc4OC00MzZiLTk3Mjgt
YmVkNGI5OWE3YmI0LzEvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYTIwNmUtMTc4OC00MzZiLTk3MjgtYmVkNGI5OWE3YmI0
LzEvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsLDHjvA
t0p0ju3gEHBjMODshmi2mdjv9k32RljdKudQOl/DqBHjXnd5t3UG2g3CV0l0F+Qb
SIRM04E24O60s0yIDdsn2JI3xDCyg+P3yzVfBehcASdLv12q8yner6yO9K+4E5Ug
ZnjbBwh5RmyTTLr2TtbcwgUs0PEWY2iKHmKiC9PNS85bDwggW5/SKaKm9MAzGVK/
CXEfB44MJH3jK9PIrGDaMjVOp0m1ve6S1s0zbkwTT9dncwHp6eE0C+rxvr/SG3/0
Nr7q6jk1aHpcHRn6vbH1d5jOyybEQ/Ozf7VMN7AsH5czo4PGX1dMTKHBjn/zkScV
Vc2gvmxlacvuWw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:58 2026 by rpki-client