
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.mft
File: mfYMEf_eGHTIoPxArHLxV6031jE.mft (raw, json)
Hash identifier: J7gwIvvJoDsMTkb888PyBs9d6avLmefK2nP9UFOvWLs=
Subject key identifier: 25:31:83:E2:65:3E:23:5A:E3:39:21:A0:68:71:CB:A7:DA:C4:13:EF
Authority key identifier: 99:F6:0C:11:FF:DE:18:74:C8:A0:FC:40:AC:72:F1:57:AD:37:D6:31
Certificate issuer: /CN=99f60c11ffde1874c8a0fc40ac72f157ad37d631
Certificate serial: 01A00F98B078B73D6F5AB3BD0C2B4EBECAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfYMEf_eGHTIoPxArHLxV6031jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.mft
Manifest number: 25
Signing time: Mon 17 Aug 2026 12:00:59 +0000
Manifest this update: Mon 17 Aug 2026 12:00:59 +0000
Manifest next update: Tue 18 Aug 2026 12:00:59 +0000
Files and hashes: 1: HRbZcpNX73J-aDhTJXzQvRXnrLs.roa (hash: 2dvk2gD+UN1JnzRDk75YIunRvjED12Z3np2jbT3pSVo=)
2: mfYMEf_eGHTIoPxArHLxV6031jE.crl (hash: LF2X4l8KCIVOTt9ksac4KZVnqz6cO5E8ZxzYPccL38I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfYMEf_eGHTIoPxArHLxV6031jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:98:b0:78:b7:3d:6f:5a:b3:bd:0c:2b:4e:be:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f60c11ffde1874c8a0fc40ac72f157ad37d631
Validity
Not Before: Aug 17 12:00:59 2026 GMT
Not After : Aug 18 12:00:59 2026 GMT
Subject: CN=253183e2653e235ae33921a06871cba7dac413ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:b0:ff:99:c5:ed:9a:b2:d7:47:4b:45:23:
6c:70:77:ba:d9:51:9c:ea:b2:17:1a:78:d7:ea:dd:
06:46:98:4e:f7:c2:98:3e:f5:4b:5d:d4:b5:20:12:
b3:53:da:4b:b0:58:77:d7:6d:ae:f3:a7:9b:99:13:
f7:41:b4:f2:43:bd:d0:75:d7:7d:2b:09:78:5e:cc:
c7:f1:ad:4c:02:fc:ab:58:da:06:5d:5d:c5:20:1e:
53:33:fd:2d:7d:61:d5:9f:ca:20:88:9f:1c:d0:06:
7d:e4:c5:2d:46:92:2d:9a:ac:ce:47:a4:fc:2c:02:
5e:78:17:44:b8:60:cc:94:1d:f8:b4:2c:0f:08:cd:
18:b3:4b:ed:f5:61:51:36:ec:36:56:09:a1:06:82:
2c:cb:c7:83:23:77:b5:49:da:ea:22:a0:f0:d3:a8:
9e:2e:dc:99:3c:f2:60:d1:60:7f:a6:25:1c:a4:30:
a1:1e:27:e4:dd:36:34:24:f0:1f:9e:02:6e:2b:11:
0c:a8:52:24:ca:ce:a6:ee:5b:f9:76:36:f6:d9:82:
67:77:45:a6:9b:e3:2e:ef:6f:8a:72:a0:80:e9:05:
dc:07:11:ec:da:6a:3d:21:6a:10:9c:75:a3:53:ca:
3c:8a:d3:89:f0:a0:5c:94:f2:f2:d6:6d:58:86:80:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:83:E2:65:3E:23:5A:E3:39:21:A0:68:71:CB:A7:DA:C4:13:EF
X509v3 Authority Key Identifier:
keyid:99:F6:0C:11:FF:DE:18:74:C8:A0:FC:40:AC:72:F1:57:AD:37:D6:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfYMEf_eGHTIoPxArHLxV6031jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:58:a9:0a:b9:16:a2:8f:27:55:94:52:24:41:7c:90:23:59:
db:28:61:bb:51:70:ff:0d:af:ea:e6:38:5b:1d:39:49:4f:0f:
91:b7:f0:27:31:a4:8d:1b:7a:e5:c5:f0:1a:51:0a:93:32:95:
f2:93:ce:d7:d0:7c:60:4f:4a:9c:a8:23:6e:e4:4f:37:2b:b7:
f0:a5:f3:73:f9:25:93:2c:ab:8c:53:2a:96:b8:fd:af:90:af:
86:f4:ae:4c:a0:c7:b6:d4:cb:6e:54:92:82:fd:55:52:78:af:
4d:80:0c:7c:aa:df:3f:4a:13:cb:15:84:3c:7e:e8:81:49:f3:
d5:8e:4b:9f:7e:d5:07:a2:74:5b:a2:f2:da:0c:dd:0a:4b:c7:
32:c7:fb:bd:a0:73:59:45:e0:de:75:2f:65:92:10:cc:5d:99:
c3:59:96:11:7d:86:10:30:ed:24:d3:37:96:7c:0b:bb:dc:06:
39:eb:1b:b7:fa:df:6a:fa:82:a4:40:99:17:04:09:1e:e7:da:
cb:07:7c:e4:57:84:5b:a4:0d:68:e2:e9:bf:76:9a:8a:0b:8a:
93:bd:42:aa:b3:9d:a0:a6:7f:14:a3:08:a5:6d:af:ba:72:20:
70:64:2b:4e:c7:80:8b:9c:29:a5:91:76:38:96:2d:9a:f3:b5:
dd:3f:b3:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAPmLB4tz1vWrO9DCtOvsrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjYwYzExZmZkZTE4NzRjOGEwZmM0MGFjNzJmMTU3YWQz
N2Q2MzEwHhcNMjYwODE3MTIwMDU5WhcNMjYwODE4MTIwMDU5WjAzMTEwLwYDVQQD
EygyNTMxODNlMjY1M2UyMzVhZTMzOTIxYTA2ODcxY2JhN2RhYzQxM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nuw/5nF7Zqy10dLRSNscHe62VGc
6rIXGnjX6t0GRphO98KYPvVLXdS1IBKzU9pLsFh3122u86ebmRP3QbTyQ73Qddd9
Kwl4XszH8a1MAvyrWNoGXV3FIB5TM/0tfWHVn8ogiJ8c0AZ95MUtRpItmqzOR6T8
LAJeeBdEuGDMlB34tCwPCM0Ys0vt9WFRNuw2VgmhBoIsy8eDI3e1SdrqIqDw06ie
LtyZPPJg0WB/piUcpDChHifk3TY0JPAfngJuKxEMqFIkys6m7lv5djb22YJnd0Wm
m+Mu72+KcqCA6QXcBxHs2mo9IWoQnHWjU8o8itOJ8KBclPLy1m1YhoBEUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUxg+JlPiNa4zkhoGhxy6faxBPvMB8GA1UdIwQY
MBaAFJn2DBH/3hh0yKD8QKxy8VetN9YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZZTUVmX2VHSFRJb1B4QXJITHhWNjAzMWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yNmY0ZGYtNzBhOS00MjYxLWIyZGEt
OTA2YzQ3OThlZDQzLzEvbWZZTUVmX2VHSFRJb1B4QXJITHhWNjAzMWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yNmY0ZGYtNzBhOS00MjYxLWIyZGEtOTA2YzQ3OThlZDQz
LzEvbWZZTUVmX2VHSFRJb1B4QXJITHhWNjAzMWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVipCrkW
oo8nVZRSJEF8kCNZ2yhhu1Fw/w2v6uY4Wx05SU8PkbfwJzGkjRt65cXwGlEKkzKV
8pPO19B8YE9KnKgjbuRPNyu38KXzc/klkyyrjFMqlrj9r5CvhvSuTKDHttTLblSS
gv1VUnivTYAMfKrfP0oTyxWEPH7ogUnz1Y5Ln37VB6J0W6Ly2gzdCkvHMsf7vaBz
WUXg3nUvZZIQzF2Zw1mWEX2GEDDtJNM3lnwLu9wGOesbt/rfavqCpECZFwQJHufa
ywd85FeEW6QNaOLpv3aaiguKk71CqrOdoKZ/FKMIpW2vunIgcGQrTseAi5wppZF2
OJYtmvO13T+zSw==
-----END CERTIFICATE-----
Generated at Mon Aug 17 21:13:11 2026 by rpki-client