Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: UuWxA0PD0Dg5dvgfSQcgyPp54XpUIJc0owLC5wHFEWk=
Subject key identifier: 45:09:95:DC:08:2E:B2:90:F3:7F:73:FD:A1:8C:AE:14:99:D4:78:39
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019FA22969369E363B74F101F95DE4BD8E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:00:50 +0000
Manifest this update: Mon 27 Jul 2026 06:00:50 +0000
Manifest next update: Tue 28 Jul 2026 06:00:50 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: X9YPQGXOr3Kew50oZavynUv5IKkJHXR0MJztX0MNoj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:69:36:9e:36:3b:74:f1:01:f9:5d:e4:bd:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jul 27 06:00:50 2026 GMT
Not After : Jul 28 06:00:50 2026 GMT
Subject: CN=450995dc082eb290f37f73fda18cae1499d47839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:87:31:b1:41:89:63:6c:23:e3:13:7b:05:
98:ca:e2:3f:09:1e:72:8b:83:f5:2c:8e:9a:7f:ba:
1f:20:d9:c2:25:b9:78:f6:ea:c0:62:db:ea:f4:d5:
7e:c1:cc:a5:4a:ba:46:81:c3:e8:65:55:45:c7:a0:
9f:b4:ce:d8:d7:98:20:18:87:d2:f2:9f:8d:65:c9:
4e:3a:50:21:52:b7:9f:83:67:45:73:c8:00:bd:b6:
7e:bd:6d:ec:05:4a:de:6d:c2:3a:50:9d:c3:c3:af:
7d:db:c1:6c:a7:0c:88:e7:b0:79:e1:6e:31:69:0e:
4d:af:28:2a:43:e3:63:f8:67:5c:b0:b2:e3:5d:4c:
9b:4b:e2:2d:da:98:1c:81:1b:95:57:e9:8b:57:e6:
55:fd:43:24:65:ca:85:72:4f:b5:91:f7:7a:e4:18:
3e:e0:bd:21:77:ce:d4:a1:a7:fa:03:71:54:33:34:
a7:09:bb:c0:d3:ca:63:eb:ff:03:b6:fe:11:90:24:
e6:7a:a9:c7:d1:64:31:35:d6:3e:dd:13:46:b6:61:
0b:e4:1e:f4:9e:0d:6b:16:6a:6f:b2:2d:a9:6d:b1:
15:67:54:ec:e9:47:e0:25:20:f9:6b:90:2f:3e:94:
c9:90:32:47:d4:b7:fd:05:1b:a7:94:86:ff:d3:b2:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:95:DC:08:2E:B2:90:F3:7F:73:FD:A1:8C:AE:14:99:D4:78:39
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:0e:9c:e0:9b:e3:13:97:8d:bc:d7:aa:03:59:fd:c3:fd:
ea:48:0a:e3:86:73:fc:f8:dc:f3:59:e2:cb:2d:f3:18:fe:0a:
73:b3:ab:a6:42:20:8d:a6:c7:f9:35:11:43:7c:d1:d5:69:ad:
ac:6e:ba:c0:8c:89:5b:1d:c2:27:39:51:fb:a9:85:64:19:5f:
1e:78:f3:90:1f:a0:c4:55:51:0b:12:f5:67:71:8d:4d:50:e0:
d2:b1:c9:7f:a0:42:ae:a9:fc:00:18:5b:ae:ba:f4:ad:f1:5e:
06:53:f3:5d:4b:52:c9:05:dc:d4:57:3a:8e:98:04:88:39:b6:
d2:89:0f:df:44:43:13:37:28:fc:28:ea:19:6e:1a:1d:d6:91:
5b:87:08:06:7c:24:e6:77:c2:c3:a5:a7:bc:04:6e:c3:11:75:
0a:25:31:03:f8:dc:d4:66:7b:9a:78:3e:54:10:f2:21:d6:7e:
81:c4:36:77:04:9b:2b:1f:10:13:26:9b:73:74:9a:15:11:10:
17:17:ef:29:cc:44:cf:55:75:b2:c5:f3:18:3a:cd:96:19:ef:
8a:7e:19:14:f3:00:fd:db:a3:d3:49:b6:5b:5c:c1:af:e8:d8:
7b:a8:70:bf:57:9b:a9:ff:d7:3c:e6:9d:5c:6a:78:0f:f1:4e:
b0:64:92:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKWk2njY7dPEB+V3kvY4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjYwNzI3MDYwMDUwWhcNMjYwNzI4MDYwMDUwWjAzMTEwLwYDVQQD
Eyg0NTA5OTVkYzA4MmViMjkwZjM3ZjczZmRhMThjYWUxNDk5ZDQ3ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCSHMbFBiWNsI+MTewWYyuI/CR5y
i4P1LI6af7ofINnCJbl49urAYtvq9NV+wcylSrpGgcPoZVVFx6CftM7Y15ggGIfS
8p+NZclOOlAhUrefg2dFc8gAvbZ+vW3sBUrebcI6UJ3Dw69928FspwyI57B54W4x
aQ5NrygqQ+Nj+GdcsLLjXUybS+It2pgcgRuVV+mLV+ZV/UMkZcqFck+1kfd65Bg+
4L0hd87Uoaf6A3FUMzSnCbvA08pj6/8Dtv4RkCTmeqnH0WQxNdY+3RNGtmEL5B70
ng1rFmpvsi2pbbEVZ1Ts6UfgJSD5a5AvPpTJkDJH1Lf9BRunlIb/07Ja4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUJldwILrKQ839z/aGMrhSZ1Hg5MB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmgOnOCb
4xOXjbzXqgNZ/cP96kgK44Zz/Pjc81niyy3zGP4Kc7OrpkIgjabH+TURQ3zR1Wmt
rG66wIyJWx3CJzlR+6mFZBlfHnjzkB+gxFVRCxL1Z3GNTVDg0rHJf6BCrqn8ABhb
rrr0rfFeBlPzXUtSyQXc1Fc6jpgEiDm20okP30RDEzco/CjqGW4aHdaRW4cIBnwk
5nfCw6WnvARuwxF1CiUxA/jc1GZ7mng+VBDyIdZ+gcQ2dwSbKx8QEyabc3SaFREQ
FxfvKcxEz1V1ssXzGDrNlhnvin4ZFPMA/duj00m2W1zBr+jYe6hwv1ebqf/XPOad
XGp4D/FOsGSSpQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:52:54 2026 by rpki-client