Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: 4Eqhqxjwu27ZDkkkCS58/1Q6AXQovPfTGtTTp+nsMcA=
Subject key identifier: A0:5E:64:DF:F3:E6:DA:5F:28:F4:55:79:95:37:56:F3:8C:E0:C1:9B
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019FA22917943E76580BBDB5F65A5249736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:00:29 +0000
Manifest this update: Mon 27 Jul 2026 06:00:29 +0000
Manifest next update: Tue 28 Jul 2026 06:00:29 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: D2usLyxs6VHQts6YPMNW93fBM+iwHhU0XxGZTkuSqhU=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:17:94:3e:76:58:0b:bd:b5:f6:5a:52:49:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jul 27 06:00:29 2026 GMT
Not After : Jul 28 06:00:29 2026 GMT
Subject: CN=a05e64dff3e6da5f28f45579953756f38ce0c19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:4b:8a:10:5b:1d:83:10:fd:1f:c3:8a:c6:
77:e1:2f:58:c7:47:57:69:26:7b:1d:c8:1e:c5:6d:
a4:91:31:c3:ff:88:63:68:a1:12:63:66:12:1e:ac:
e6:1c:fc:b7:5a:66:ec:32:dc:5e:ef:4e:98:a6:30:
4b:2a:90:87:ef:19:f6:ea:43:56:85:bd:52:31:72:
24:19:f7:0c:81:32:5a:26:f6:c4:cd:0a:87:8c:7c:
dd:2c:0f:cb:7b:c0:a3:db:45:16:2c:1c:8f:89:5b:
bd:8a:d3:db:ed:07:99:02:cb:db:18:21:90:d0:e2:
39:f0:cf:41:f7:3c:5e:71:99:82:aa:b5:71:e2:35:
ee:47:a1:4b:ff:b3:aa:df:d2:5a:8d:79:85:e2:77:
0d:ce:e9:79:15:6c:12:a4:09:6e:1c:a3:4f:8f:fd:
82:55:44:47:34:57:4f:62:48:69:d3:b9:e7:e4:09:
a4:d8:64:fb:a5:26:41:7d:58:57:47:e4:a2:f9:f0:
2c:21:6c:54:36:44:bf:38:60:44:ca:9a:b0:3b:ba:
d3:92:4b:55:4d:1f:9d:e3:11:1f:e4:16:07:9f:bd:
e2:ba:b3:e3:bf:b9:c0:30:30:4f:7e:1a:50:20:3d:
30:fb:da:69:fe:df:bf:94:b3:c4:c2:5e:48:2a:c5:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:64:DF:F3:E6:DA:5F:28:F4:55:79:95:37:56:F3:8C:E0:C1:9B
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:ec:fa:86:e5:51:06:63:3b:84:4a:d9:63:6a:ec:a5:91:
bd:89:c7:0d:6d:6e:ec:b8:89:63:01:52:b9:59:7f:70:a9:6f:
23:3e:91:57:65:66:d2:01:70:29:33:f8:06:ef:ef:81:ab:1d:
4a:c1:ab:dc:5b:08:53:c1:f6:5c:9f:4f:df:4f:60:ae:f3:13:
6d:85:08:1f:1f:b6:28:d7:43:5e:88:b8:a7:2e:f6:2c:f8:3d:
5b:3e:12:72:90:a3:37:92:dc:2a:be:6c:70:2a:6d:1c:c7:ac:
61:1c:a2:04:6d:14:cb:c8:c6:95:7e:97:9b:68:2a:23:2e:24:
44:08:4e:d9:85:61:e3:3f:ed:e8:50:9a:58:8c:f7:7e:12:5b:
29:a5:3c:70:2b:45:07:d0:7a:69:46:bc:65:9a:18:49:fb:41:
d7:44:18:10:89:71:07:7e:9b:2f:a6:bf:5e:2a:3f:c2:d9:39:
a2:38:87:07:b2:90:45:94:93:0d:1b:17:ae:39:2d:a9:ac:bb:
a4:0d:8d:b0:d3:8e:22:f7:76:19:8d:52:39:cd:5d:4a:2a:6d:
a1:ae:d3:88:95:d5:b6:d2:4f:36:ba:ca:d5:8b:10:d5:b4:19:
3f:41:bd:35:16:f8:b5:51:1a:03:c3:39:f0:64:78:30:d1:9f:
03:9b:b4:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKReUPnZYC7219lpSSXNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm
NmM3M2IwHhcNMjYwNzI3MDYwMDI5WhcNMjYwNzI4MDYwMDI5WjAzMTEwLwYDVQQD
EyhhMDVlNjRkZmYzZTZkYTVmMjhmNDU1Nzk5NTM3NTZmMzhjZTBjMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD9LihBbHYMQ/R/DisZ34S9Yx0dX
aSZ7HcgexW2kkTHD/4hjaKESY2YSHqzmHPy3WmbsMtxe706YpjBLKpCH7xn26kNW
hb1SMXIkGfcMgTJaJvbEzQqHjHzdLA/Le8Cj20UWLByPiVu9itPb7QeZAsvbGCGQ
0OI58M9B9zxecZmCqrVx4jXuR6FL/7Oq39JajXmF4ncNzul5FWwSpAluHKNPj/2C
VURHNFdPYkhp07nn5Amk2GT7pSZBfVhXR+Si+fAsIWxUNkS/OGBEypqwO7rTkktV
TR+d4xEf5BYHn73iurPjv7nAMDBPfhpQID0w+9pp/t+/lLPEwl5IKsWkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBeZN/z5tpfKPRVeZU3VvOM4MGbMB8GA1UdIwQY
MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt
NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx
LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIDs+obl
UQZjO4RK2WNq7KWRvYnHDW1u7LiJYwFSuVl/cKlvIz6RV2Vm0gFwKTP4Bu/vgasd
SsGr3FsIU8H2XJ9P309grvMTbYUIHx+2KNdDXoi4py72LPg9Wz4ScpCjN5LcKr5s
cCptHMesYRyiBG0Uy8jGlX6Xm2gqIy4kRAhO2YVh4z/t6FCaWIz3fhJbKaU8cCtF
B9B6aUa8ZZoYSftB10QYEIlxB36bL6a/Xio/wtk5ojiHB7KQRZSTDRsXrjktqay7
pA2NsNOOIvd2GY1SOc1dSiptoa7TiJXVttJPNrrK1YsQ1bQZP0G9NRb4tVEaA8M5
8GR4MNGfA5u0wg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:04:15 2026 by rpki-client