Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: iMOCzIBIfwZBCViBM1yFIQMUiB4kYw17+XISAmu9cGA=
Subject key identifier: F6:3E:CD:E7:8C:2B:37:68:81:AD:09:12:86:AA:8D:63:63:81:16:C3
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019FA0042C5E39599FD81176676172D173B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 20:00:55 +0000
Manifest this update: Sun 26 Jul 2026 20:00:55 +0000
Manifest next update: Mon 27 Jul 2026 20:00:55 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: oXrquhMH7brDORW9+O1vQtRzuShR8RIK3ijlBWLJcwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:2c:5e:39:59:9f:d8:11:76:67:61:72:d1:73:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jul 26 20:00:55 2026 GMT
Not After : Jul 27 20:00:55 2026 GMT
Subject: CN=f63ecde78c2b376881ad091286aa8d63638116c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:4d:77:67:91:eb:94:4f:36:79:30:86:d3:
5c:ac:1c:39:9d:fc:4d:4b:74:c9:c8:00:5b:a3:3b:
bb:b9:26:4a:ee:1b:ee:52:7f:28:2c:f0:0b:8f:f0:
b6:17:87:b4:03:6b:44:58:43:39:47:58:5e:68:79:
57:ed:6f:59:df:82:db:9b:76:05:62:a8:41:ed:4e:
e9:53:43:9f:85:9e:54:22:05:01:1f:1a:71:30:91:
5c:ed:bf:4e:72:10:d0:41:29:bb:75:9d:fb:2f:7c:
17:7c:62:66:3d:90:e3:7c:51:30:49:46:a2:1d:c7:
a0:0b:ef:73:d1:c4:9b:e2:18:8a:4a:f5:d2:7d:2f:
4e:c8:b2:38:15:23:2e:78:42:5d:c8:f1:90:c7:f7:
78:14:f6:1d:40:69:f8:c6:e4:e7:14:60:f8:94:67:
28:87:94:30:b7:72:28:60:a0:22:32:8a:bc:e2:5e:
f4:00:25:e7:d3:9c:e9:14:31:8c:8e:95:a6:e1:15:
e8:87:09:81:21:04:cc:e7:b6:ed:e8:bc:6e:d6:3a:
23:83:93:6d:09:c3:d0:7c:07:44:8a:2c:86:81:76:
4d:cb:de:b6:f4:e3:d2:fb:6d:25:57:0e:69:72:b2:
6c:6c:08:a7:67:83:0b:04:93:0a:3c:07:c0:5a:85:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:CD:E7:8C:2B:37:68:81:AD:09:12:86:AA:8D:63:63:81:16:C3
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c5:ad:14:e5:36:92:85:a2:35:47:62:23:a5:20:63:af:b5:
78:5f:25:8c:e5:bb:4e:a7:e2:70:c2:4a:79:2c:09:7f:d0:1b:
53:70:78:1a:34:c1:ac:b2:1a:a0:f8:c0:e9:a6:ef:d3:41:f7:
cb:6c:ca:31:16:83:2b:8e:29:9f:a1:66:6d:75:92:a9:1e:90:
ee:cd:53:36:b9:f4:d3:56:27:c4:a7:20:75:d4:a7:25:b3:4a:
ab:6e:a2:12:b6:84:a8:c3:91:69:ef:7a:7d:d5:88:eb:74:a3:
e3:77:7e:7e:dc:86:62:8a:d6:23:5b:39:57:83:59:26:b8:f2:
a6:5d:cd:b2:13:85:23:f7:7d:53:ca:f1:7d:47:a5:5e:1a:ec:
09:0e:f7:11:90:28:f7:5d:d9:42:16:d5:23:ed:36:a6:00:af:
31:e8:05:f1:a0:f8:30:88:c1:bd:c8:d9:f3:94:95:69:98:09:
91:f8:5f:6f:32:ff:49:e3:6b:67:a0:bf:91:6c:75:9f:67:e3:
45:14:28:4d:d6:71:3a:50:1f:5b:4b:e3:01:fb:1d:9b:49:ce:
12:17:59:31:24:bd:19:df:b1:24:53:ad:d4:db:7c:4f:26:36:
81:ae:23:c3:11:d4:a7:cc:1b:8c:3a:60:00:46:90:b0:d5:be:
61:bb:5e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gBCxeOVmf2BF2Z2Fy0XOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4
YTFjYTkwHhcNMjYwNzI2MjAwMDU1WhcNMjYwNzI3MjAwMDU1WjAzMTEwLwYDVQQD
EyhmNjNlY2RlNzhjMmIzNzY4ODFhZDA5MTI4NmFhOGQ2MzYzODExNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YpNd2eR65RPNnkwhtNcrBw5nfxN
S3TJyABbozu7uSZK7hvuUn8oLPALj/C2F4e0A2tEWEM5R1heaHlX7W9Z34Lbm3YF
YqhB7U7pU0OfhZ5UIgUBHxpxMJFc7b9OchDQQSm7dZ37L3wXfGJmPZDjfFEwSUai
HcegC+9z0cSb4hiKSvXSfS9OyLI4FSMueEJdyPGQx/d4FPYdQGn4xuTnFGD4lGco
h5Qwt3IoYKAiMoq84l70ACXn05zpFDGMjpWm4RXohwmBIQTM57bt6Lxu1jojg5Nt
CcPQfAdEiiyGgXZNy9629OPS+20lVw5pcrJsbAinZ4MLBJMKPAfAWoVXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY+zeeMKzdoga0JEoaqjWNjgRbDMB8GA1UdIwQY
MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt
ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4
LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8WtFOU2
koWiNUdiI6UgY6+1eF8ljOW7TqficMJKeSwJf9AbU3B4GjTBrLIaoPjA6abv00H3
y2zKMRaDK44pn6FmbXWSqR6Q7s1TNrn001YnxKcgddSnJbNKq26iEraEqMORae96
fdWI63Sj43d+ftyGYorWI1s5V4NZJrjypl3NshOFI/d9U8rxfUelXhrsCQ73EZAo
913ZQhbVI+02pgCvMegF8aD4MIjBvcjZ85SVaZgJkfhfbzL/SeNrZ6C/kWx1n2fj
RRQoTdZxOlAfW0vjAfsdm0nOEhdZMSS9Gd+xJFOt1Nt8TyY2ga4jwxHUp8wbjDpg
AEaQsNW+Ybte3A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:01:47 2026 by rpki-client