Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: W4jzLc0pNmtaVuZ8uyEl2a+sf0wWgPFVlDGfVHHoNYw=
Subject key identifier: E5:8D:5E:9A:A4:D9:6E:6C:51:46:1A:8B:08:FC:8F:6A:3C:62:20:EC
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019F856849E7B08C3676F333759F0914509F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 12FF
Signing time: Tue 21 Jul 2026 16:00:32 +0000
Manifest this update: Tue 21 Jul 2026 16:00:32 +0000
Manifest next update: Wed 22 Jul 2026 16:00:32 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: JjxSA1RVg/jllghjMZNlIRvqKA7tE7Mmnku06EthofA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:49:e7:b0:8c:36:76:f3:33:75:9f:09:14:50:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jul 21 16:00:32 2026 GMT
Not After : Jul 22 16:00:32 2026 GMT
Subject: CN=e58d5e9aa4d96e6c51461a8b08fc8f6a3c6220ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:10:74:99:58:84:76:53:39:53:40:ee:cc:
1b:34:f3:c6:6b:a9:c6:ed:29:9a:a4:2b:a5:3c:b0:
40:2d:f7:12:72:79:14:d1:44:fc:b3:88:fb:14:b2:
ad:47:58:cf:42:14:dd:1d:d0:1b:24:43:bc:4f:4f:
09:80:de:01:25:5b:f4:92:bf:e9:24:11:f6:5f:d3:
7a:17:17:03:98:99:70:ca:06:92:30:1c:af:a8:3d:
e7:79:94:90:a6:e0:bf:a1:ac:7b:12:83:c1:16:e2:
d5:20:91:7d:94:ca:78:53:27:44:d2:c9:bf:bc:ba:
a6:93:84:1b:cf:4a:44:c3:16:a4:a2:04:9a:69:40:
0d:c1:7e:5f:51:b5:8b:eb:bd:f9:a4:95:6b:5a:c6:
88:5e:53:b0:5b:88:e2:64:bb:86:26:63:ac:3c:4f:
ca:4f:16:f6:a6:cc:55:9d:dc:5b:48:52:88:93:03:
8f:aa:d7:b9:f7:41:8e:3a:98:fd:fe:7c:f5:91:66:
4b:5a:d4:59:08:ec:94:d2:a8:22:05:7a:cf:d3:8d:
98:da:c1:73:29:b4:f2:01:7f:7a:48:45:0d:25:88:
fb:2c:e5:51:74:16:fe:92:2e:41:e3:d0:82:84:23:
92:bc:7a:ff:cf:c4:69:ea:22:87:cb:e3:5b:5c:1f:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:5E:9A:A4:D9:6E:6C:51:46:1A:8B:08:FC:8F:6A:3C:62:20:EC
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:04:29:83:08:39:e7:22:cc:8e:b5:9a:fb:c3:cc:7c:c1:
7f:45:fa:27:2c:56:58:c9:d1:f1:dc:fa:9a:e5:55:7f:16:32:
de:c9:27:cc:81:d4:0b:6c:e4:26:bd:a0:e8:d1:cb:59:9d:d6:
ca:51:e4:94:51:f3:72:a8:b9:df:2a:1b:75:9c:dd:4c:b5:05:
21:54:3d:c4:ea:57:4d:d9:e3:da:f3:ba:ce:a2:4e:41:0f:24:
8e:27:ff:cd:d1:6b:cd:5b:3a:62:a2:d7:99:65:18:4d:4c:15:
57:41:d1:a0:fd:49:80:89:9b:5e:5b:11:d9:c0:85:fe:2d:37:
7e:5d:92:ca:18:dd:3e:21:87:be:43:bd:2c:3b:ba:12:ff:09:
7a:51:0f:e1:e2:a2:41:f1:f8:f8:88:35:41:31:e6:ff:9d:ac:
e8:11:fb:0b:e8:57:dd:50:aa:ab:41:42:62:bb:09:66:7f:35:
4d:d1:fa:1a:0a:94:5b:62:cc:c0:c5:33:c4:89:d3:15:b1:43:
e5:c8:49:cd:40:4e:6d:b8:9c:f9:ba:17:46:fe:3a:aa:47:a0:
a7:5f:ea:97:f0:cb:0a:15:ee:10:41:52:ca:54:39:7c:9f:76:
53:db:98:66:05:a1:2d:3b:e4:a4:b5:a3:e9:96:e9:bc:17:22:
d5:fb:ab:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaEnnsIw2dvMzdZ8JFFCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy
YTVmM2EwHhcNMjYwNzIxMTYwMDMyWhcNMjYwNzIyMTYwMDMyWjAzMTEwLwYDVQQD
EyhlNThkNWU5YWE0ZDk2ZTZjNTE0NjFhOGIwOGZjOGY2YTNjNjIyMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEcQdJlYhHZTOVNA7swbNPPGa6nG
7SmapCulPLBALfcScnkU0UT8s4j7FLKtR1jPQhTdHdAbJEO8T08JgN4BJVv0kr/p
JBH2X9N6FxcDmJlwygaSMByvqD3neZSQpuC/oax7EoPBFuLVIJF9lMp4UydE0sm/
vLqmk4Qbz0pEwxakogSaaUANwX5fUbWL6735pJVrWsaIXlOwW4jiZLuGJmOsPE/K
Txb2psxVndxbSFKIkwOPqte590GOOpj9/nz1kWZLWtRZCOyU0qgiBXrP042Y2sFz
KbTyAX96SEUNJYj7LOVRdBb+ki5B49CChCOSvHr/z8Rp6iKHy+NbXB8ukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWNXpqk2W5sUUYaiwj8j2o8YiDsMB8GA1UdIwQY
MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt
ZDE4YWI0ZjdmNWRmLzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm
LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqAEKYMI
OecizI61mvvDzHzBf0X6JyxWWMnR8dz6muVVfxYy3sknzIHUC2zkJr2g6NHLWZ3W
ylHklFHzcqi53yobdZzdTLUFIVQ9xOpXTdnj2vO6zqJOQQ8kjif/zdFrzVs6YqLX
mWUYTUwVV0HRoP1JgImbXlsR2cCF/i03fl2SyhjdPiGHvkO9LDu6Ev8JelEP4eKi
QfH4+Ig1QTHm/52s6BH7C+hX3VCqq0FCYrsJZn81TdH6GgqUW2LMwMUzxInTFbFD
5chJzUBObbic+boXRv46qkegp1/ql/DLChXuEEFSylQ5fJ92U9uYZgWhLTvkpLWj
6ZbpvBci1furfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:07:24 2026 by rpki-client