Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: pOp9CisFfXvH/9c09anWpJ7YMpj1cs7aHs5fXG88xZ4=
Subject key identifier: 58:6D:38:DD:E0:12:9B:2D:7F:89:50:9F:D0:17:6C:F9:9D:21:1F:70
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019F9F287AF00CB2BFF8E41ABCC7C58C3659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 0339
Signing time: Sun 26 Jul 2026 16:00:57 +0000
Manifest this update: Sun 26 Jul 2026 16:00:57 +0000
Manifest next update: Mon 27 Jul 2026 16:00:57 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: iVbwKTcyfwkn0PHvjEWPjFVx2sBy5vmQb0RcfSetIKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:7a:f0:0c:b2:bf:f8:e4:1a:bc:c7:c5:8c:36:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Jul 26 16:00:57 2026 GMT
Not After : Jul 27 16:00:57 2026 GMT
Subject: CN=586d38dde0129b2d7f89509fd0176cf99d211f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:fb:94:ad:95:8c:a1:3d:02:8f:6b:04:9d:
01:cf:57:ab:b4:68:d9:44:0a:31:e8:a7:67:9b:97:
7a:6c:a7:86:42:43:72:9d:f2:a5:09:62:ec:4b:b9:
0c:bb:3b:89:dc:2b:74:86:e7:b4:e8:3e:6b:35:c3:
3d:68:f3:2c:19:5a:22:bb:f5:05:0f:41:06:c5:e5:
5b:be:84:14:72:f7:ce:5c:2d:b8:56:73:01:e7:05:
09:2c:6d:0f:26:b6:21:79:2c:0a:5b:73:78:8d:b1:
b7:01:75:d2:f0:10:d4:be:06:49:a2:f2:04:c5:63:
25:ed:df:8f:9f:83:f0:f4:fb:01:f3:28:21:0c:90:
72:35:59:7e:87:5f:8d:18:74:55:30:89:5a:be:79:
1e:d6:fb:6f:e7:3c:82:26:fa:16:76:62:6a:37:dc:
ff:a9:b1:0f:6a:fb:8a:85:c0:af:76:4c:77:92:a3:
f3:f2:ca:b3:fc:6b:75:b5:5c:1e:e6:26:56:93:0f:
59:9b:57:b6:9a:cd:6e:2d:da:f3:87:7f:68:8c:f1:
e0:8a:27:16:8c:68:1a:e5:32:0a:fd:a7:b9:3e:b1:
24:b5:32:c5:75:3e:c7:b0:ed:12:09:e1:ac:11:e3:
2c:70:67:d2:61:cc:c1:3e:d5:df:77:6e:b1:01:df:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:38:DD:E0:12:9B:2D:7F:89:50:9F:D0:17:6C:F9:9D:21:1F:70
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:4d:f1:ad:13:fd:4b:29:a5:8a:d7:f2:ba:84:f6:96:9e:
54:cd:04:e2:5c:c0:1f:1a:02:ba:ab:82:af:31:d2:d7:24:4c:
6f:e8:8c:a3:23:12:8d:90:4b:81:4e:1b:f3:58:62:39:5d:f8:
e1:51:a4:d8:d8:fe:e8:ce:d6:cf:0d:0b:1a:86:35:f3:e5:7c:
e5:8e:67:fe:df:f0:fc:c1:a2:5a:07:2a:86:a3:67:0d:6a:5f:
e5:12:34:3c:91:db:ad:80:df:09:5a:33:90:8d:d3:9a:18:6f:
5d:6a:2d:61:b9:94:11:3f:79:26:d0:c5:0a:a9:62:0d:b5:a0:
9a:c3:f3:55:8a:b6:9b:2e:a9:0d:61:b5:7d:f1:bc:7f:6d:4c:
8e:e6:8f:9f:1a:ed:00:c0:00:6d:44:56:87:bb:a1:35:da:bc:
49:f7:c1:fa:bc:b9:3f:c1:2a:be:7c:aa:78:b7:c5:bf:45:90:
92:ed:87:d1:07:d0:9f:ab:23:bf:5a:1d:8b:aa:ba:45:fa:89:
a7:ec:d4:6a:27:5f:05:cc:cf:01:d6:8c:ca:3f:14:84:56:5c:
2a:b5:a4:5f:eb:03:c3:0b:35:3c:34:be:c4:e1:21:ea:ea:f1:
79:da:a6:24:24:04:e2:b7:96:35:cc:37:2a:4e:bb:80:bb:54:
f1:9d:01:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKHrwDLK/+OQavMfFjDZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTIzOTFlMGFkMmU2NDRjZmUyZGFkNzYyMTExZDc1N2Y1
ODVmNjgwHhcNMjYwNzI2MTYwMDU3WhcNMjYwNzI3MTYwMDU3WjAzMTEwLwYDVQQD
Eyg1ODZkMzhkZGUwMTI5YjJkN2Y4OTUwOWZkMDE3NmNmOTlkMjExZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fX7lK2VjKE9Ao9rBJ0Bz1ertGjZ
RAox6Kdnm5d6bKeGQkNynfKlCWLsS7kMuzuJ3Ct0hue06D5rNcM9aPMsGVoiu/UF
D0EGxeVbvoQUcvfOXC24VnMB5wUJLG0PJrYheSwKW3N4jbG3AXXS8BDUvgZJovIE
xWMl7d+Pn4Pw9PsB8yghDJByNVl+h1+NGHRVMIlavnke1vtv5zyCJvoWdmJqN9z/
qbEPavuKhcCvdkx3kqPz8sqz/Gt1tVwe5iZWkw9Zm1e2ms1uLdrzh39ojPHgiicW
jGga5TIK/ae5PrEktTLFdT7HsO0SCeGsEeMscGfSYczBPtXfd26xAd8x9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhtON3gEpstf4lQn9AXbPmdIR9wMB8GA1UdIwQY
MBaAFBdSOR4K0uZEz+La12IRHXV/WF9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzkt
MzlkYTY2MDJjNDMwLzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzktMzlkYTY2MDJjNDMw
LzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAq9N8a0T
/UsppYrX8rqE9paeVM0E4lzAHxoCuquCrzHS1yRMb+iMoyMSjZBLgU4b81hiOV34
4VGk2Nj+6M7Wzw0LGoY18+V85Y5n/t/w/MGiWgcqhqNnDWpf5RI0PJHbrYDfCVoz
kI3TmhhvXWotYbmUET95JtDFCqliDbWgmsPzVYq2my6pDWG1ffG8f21MjuaPnxrt
AMAAbURWh7uhNdq8SffB+ry5P8EqvnyqeLfFv0WQku2H0QfQn6sjv1odi6q6RfqJ
p+zUaidfBczPAdaMyj8UhFZcKrWkX+sDwws1PDS+xOEh6urxedqmJCQE4reWNcw3
Kk67gLtU8Z0B6g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:46 2026 by rpki-client