Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: Z9AfbCWcH76xAMXN/cKmQwP0jihB0ujNsKdeeLgAOgc=
Subject key identifier: F1:DE:9F:92:7D:F0:8E:AF:C3:3C:29:54:A6:83:AC:F7:36:AB:C9:09
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019FA07210D700FB6D081727F6946BAA0304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 19DA
Signing time: Sun 26 Jul 2026 22:00:57 +0000
Manifest this update: Sun 26 Jul 2026 22:00:57 +0000
Manifest next update: Mon 27 Jul 2026 22:00:57 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
4: U4HfGHAP2WoYFqQD4L0of_EnLKI.roa (hash: ZnMT/i5/9pGZI+9FFghOIhbXR3PyKujFwDawHaprb68=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: nMBTJbEWroXjKgVzvAK/ekMH8Rx/B4haGNZDJA+3Va8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:10:d7:00:fb:6d:08:17:27:f6:94:6b:aa:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jul 26 22:00:57 2026 GMT
Not After : Jul 27 22:00:57 2026 GMT
Subject: CN=f1de9f927df08eafc33c2954a683acf736abc909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:dd:c1:86:b9:27:f7:a3:17:ad:75:6c:5a:
cd:82:2f:5e:9b:b5:60:ea:4c:67:d8:6e:78:78:4b:
d8:1a:78:02:35:ff:9c:b1:b8:17:54:ad:44:bb:22:
a5:6d:73:46:7d:50:7d:ae:9f:72:d2:ee:ae:d9:39:
4e:52:a5:31:1d:53:91:98:fb:5e:7e:0e:8a:ce:26:
a2:76:28:16:30:71:de:32:5d:b8:20:c4:12:ce:2e:
b0:af:d0:6d:87:d0:bd:1e:dc:82:32:0d:6e:ab:f9:
87:05:82:78:fb:42:a2:f1:f2:60:fc:46:82:de:52:
c5:01:4c:ea:aa:9c:ee:e2:f3:38:ea:ae:fa:c8:c4:
1b:72:de:cc:2e:65:4b:7e:8f:ec:39:4c:ce:96:39:
1f:c5:92:49:1f:28:36:fd:08:f1:6d:cf:c8:f3:14:
4f:e2:95:a2:ea:2b:83:cb:8b:52:ce:3e:03:db:86:
14:6d:e4:55:47:57:4a:63:7a:6f:9e:b2:80:12:11:
ba:66:00:98:15:68:24:f3:5c:dd:16:46:8d:d4:8b:
5b:b6:83:9c:2a:12:d4:71:ad:9b:6e:b8:17:f9:45:
68:8f:59:1c:80:b2:86:66:a8:bf:5a:f1:0d:67:50:
79:23:f5:f2:c7:1b:e6:0d:5e:e0:9f:ee:80:c9:a0:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:9F:92:7D:F0:8E:AF:C3:3C:29:54:A6:83:AC:F7:36:AB:C9:09
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:77:a3:9f:c2:ea:3d:63:d7:b4:5a:a1:c9:6a:c9:aa:86:8a:
3b:6e:07:b5:a1:52:d3:d9:3c:fb:4b:a4:d2:14:09:c3:99:ab:
ad:2c:3d:ee:84:7e:97:3d:88:5e:21:0a:fc:63:91:5f:43:1c:
4c:f1:47:27:32:58:c6:61:90:48:ae:5d:f4:e5:3b:b3:9b:3a:
a4:cc:e8:ce:d4:a8:00:60:d7:c8:6a:9b:33:c3:41:6b:9d:73:
4d:ce:2e:d7:00:aa:78:57:52:b2:b1:fb:e5:56:37:92:f2:62:
87:b7:1c:c0:15:f1:4b:1d:bd:55:d0:ce:82:d7:7d:f9:c8:43:
e4:83:50:f7:69:5f:5e:87:cc:53:2a:62:d5:63:d5:6c:15:a8:
77:3c:35:f4:f6:6c:fd:55:39:18:71:53:89:61:df:42:f6:ff:
de:cd:42:fe:b4:6c:d3:aa:94:c0:56:4c:81:74:26:b6:79:98:
37:0b:df:3b:39:73:72:ad:76:58:ae:f6:4d:f7:61:19:5a:42:
2f:4a:58:8b:73:a1:4f:df:62:78:f7:f4:e4:94:c8:c1:59:43:
b1:6f:33:e6:96:e8:d0:03:e7:51:23:df:58:c3:dd:65:56:2e:
18:c6:23:ce:ee:31:54:c8:fe:88:1d:28:f8:a8:87:6c:85:1a:
52:6c:3d:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gchDXAPttCBcn9pRrqgMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjYwNzI2MjIwMDU3WhcNMjYwNzI3MjIwMDU3WjAzMTEwLwYDVQQD
EyhmMWRlOWY5MjdkZjA4ZWFmYzMzYzI5NTRhNjgzYWNmNzM2YWJjOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WndwYa5J/ejF611bFrNgi9em7Vg
6kxn2G54eEvYGngCNf+csbgXVK1EuyKlbXNGfVB9rp9y0u6u2TlOUqUxHVORmPte
fg6KziaidigWMHHeMl24IMQSzi6wr9Bth9C9HtyCMg1uq/mHBYJ4+0Ki8fJg/EaC
3lLFAUzqqpzu4vM46q76yMQbct7MLmVLfo/sOUzOljkfxZJJHyg2/Qjxbc/I8xRP
4pWi6iuDy4tSzj4D24YUbeRVR1dKY3pvnrKAEhG6ZgCYFWgk81zdFkaN1ItbtoOc
KhLUca2bbrgX+UVoj1kcgLKGZqi/WvENZ1B5I/XyxxvmDV7gn+6AyaBunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHen5J98I6vwzwpVKaDrPc2q8kJMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHejn8Lq
PWPXtFqhyWrJqoaKO24HtaFS09k8+0uk0hQJw5mrrSw97oR+lz2IXiEK/GORX0Mc
TPFHJzJYxmGQSK5d9OU7s5s6pMzoztSoAGDXyGqbM8NBa51zTc4u1wCqeFdSsrH7
5VY3kvJih7ccwBXxSx29VdDOgtd9+chD5INQ92lfXofMUypi1WPVbBWodzw19PZs
/VU5GHFTiWHfQvb/3s1C/rRs06qUwFZMgXQmtnmYNwvfOzlzcq12WK72TfdhGVpC
L0pYi3OhT99iePf05JTIwVlDsW8z5pbo0APnUSPfWMPdZVYuGMYjzu4xVMj+iB0o
+KiHbIUaUmw92w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:54 2026 by rpki-client