Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: toAk3XbeyDAie0lLfd814v+u/SUsJiRPUrYPSdq/JU0=
Subject key identifier: 11:09:2F:F2:76:79:84:B5:BD:34:77:AB:7B:72:A8:FC:AB:E3:D5:16
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019F83E822E13AA349971D919335D65F90AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0FD4
Signing time: Tue 21 Jul 2026 09:00:56 +0000
Manifest this update: Tue 21 Jul 2026 09:00:56 +0000
Manifest next update: Wed 22 Jul 2026 09:00:56 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: lmsZ52IFHvlpR2fxLmB+WmvA02lUkKQaXzzq278bl1c=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:22:e1:3a:a3:49:97:1d:91:93:35:d6:5f:90:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Jul 21 09:00:56 2026 GMT
Not After : Jul 22 09:00:56 2026 GMT
Subject: CN=11092ff2767984b5bd3477ab7b72a8fcabe3d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:3f:9d:88:e0:3c:6a:19:d4:60:51:d9:8d:
cc:85:12:51:18:b6:cd:2a:92:2c:7b:4d:09:6c:29:
6a:bf:fb:ff:34:88:90:04:af:33:e2:2a:f2:0d:84:
e5:18:2e:5e:e3:e9:57:d1:2b:88:d1:12:42:45:cc:
af:11:ee:57:12:b5:ad:8a:6c:54:5f:2a:bd:e7:dc:
19:4b:ec:c0:cd:33:79:b8:78:4b:83:d4:2f:a9:8a:
04:5e:91:4e:d2:bf:e0:1f:77:ab:14:50:dc:1d:56:
28:05:d6:d5:88:ff:81:9a:fe:0e:6c:8b:cf:a0:55:
40:bd:cd:6d:65:6e:8e:50:52:03:fc:50:4c:fb:f8:
e1:b9:b1:b6:9f:4c:34:71:c5:c4:54:19:47:25:97:
3c:ae:0a:38:fe:7d:75:7b:9f:37:33:c4:33:25:69:
96:22:a3:43:f2:f7:a7:c3:00:ba:ca:55:83:c0:3c:
ef:7b:28:db:11:51:a5:85:5f:eb:40:42:e5:ac:65:
04:30:74:8f:24:4d:ec:6b:6c:3b:de:3f:b1:0d:af:
be:41:d7:77:1d:47:d7:89:b8:b8:d7:4f:1b:e6:12:
c2:e4:ca:b0:93:5a:28:e7:e9:a6:b1:75:01:a6:bb:
c5:cf:5c:07:6a:03:63:d1:8d:ea:74:69:10:8a:ab:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:2F:F2:76:79:84:B5:BD:34:77:AB:7B:72:A8:FC:AB:E3:D5:16
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:92:80:44:78:76:ca:fd:82:07:e5:10:47:18:dc:a0:64:0e:
17:42:b0:b0:1b:93:e5:1a:1b:05:c7:8b:34:6a:8b:c8:8e:63:
93:67:f2:cb:2f:cd:81:b9:d6:cc:18:d9:7c:ee:e8:11:73:ff:
95:32:58:63:c5:5c:96:57:26:3d:61:03:c8:4d:e4:4a:c3:6b:
fc:78:eb:dd:1a:a1:09:70:7d:b2:14:a4:a2:67:87:bb:29:fd:
07:88:a7:ee:39:c0:e7:98:a8:33:8d:fd:22:e6:83:3a:b3:bf:
b6:95:40:18:9a:c0:16:2c:d0:65:6d:98:c2:41:e5:99:2c:71:
7a:88:29:f5:2a:46:e0:1b:78:5a:a5:e5:ea:a7:1f:31:fb:29:
ed:a6:61:7b:34:5a:d9:11:6f:26:97:26:9e:fb:51:9c:2a:be:
a4:c5:4c:a6:00:f2:89:c6:a5:f3:6e:e4:da:ab:3e:25:e7:c0:
a2:8f:90:10:1d:17:e7:a8:de:56:08:80:55:e8:6f:49:fe:c3:
33:5e:cf:d2:d6:f5:47:dc:0a:e8:5a:ca:ce:5e:32:b7:80:f3:
2f:5a:51:a1:66:31:95:fa:65:98:43:37:7d:24:cd:6f:52:dc:
ac:fc:ab:4b:f7:b0:89:e2:07:fd:b2:b6:36:15:ac:f4:a7:1b:
a1:70:2a:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+D6CLhOqNJlx2RkzXWX5CrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy
YmI4MzIwHhcNMjYwNzIxMDkwMDU2WhcNMjYwNzIyMDkwMDU2WjAzMTEwLwYDVQQD
EygxMTA5MmZmMjc2Nzk4NGI1YmQzNDc3YWI3YjcyYThmY2FiZTNkNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCI/nYjgPGoZ1GBR2Y3MhRJRGLbN
KpIse00JbClqv/v/NIiQBK8z4iryDYTlGC5e4+lX0SuI0RJCRcyvEe5XErWtimxU
Xyq959wZS+zAzTN5uHhLg9QvqYoEXpFO0r/gH3erFFDcHVYoBdbViP+Bmv4ObIvP
oFVAvc1tZW6OUFID/FBM+/jhubG2n0w0ccXEVBlHJZc8rgo4/n11e583M8QzJWmW
IqND8venwwC6ylWDwDzveyjbEVGlhV/rQELlrGUEMHSPJE3sa2w73j+xDa++Qdd3
HUfXibi4108b5hLC5Mqwk1oo5+mmsXUBprvFz1wHagNj0Y3qdGkQiqs/fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEJL/J2eYS1vTR3q3tyqPyr49UWMB8GA1UdIwQY
MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt
ZGNlMTEyN2FiMjIzLzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz
LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5KARHh2
yv2CB+UQRxjcoGQOF0KwsBuT5RobBceLNGqLyI5jk2fyyy/NgbnWzBjZfO7oEXP/
lTJYY8VcllcmPWEDyE3kSsNr/Hjr3RqhCXB9shSkomeHuyn9B4in7jnA55ioM439
IuaDOrO/tpVAGJrAFizQZW2YwkHlmSxxeogp9SpG4Bt4WqXl6qcfMfsp7aZhezRa
2RFvJpcmnvtRnCq+pMVMpgDyical827k2qs+JefAoo+QEB0X56jeVgiAVehvSf7D
M17P0tb1R9wK6FrKzl4yt4DzL1pRoWYxlfplmEM3fSTNb1LcrPyrS/ewieIH/bK2
NhWs9KcboXAq8g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:04:43 2026 by rpki-client