Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: F/EJITN5ZLQHNFMrvS5zw1yVz3px8uyUzx7CqyVEibI=
Subject key identifier: F7:05:FE:4A:3F:2B:C0:C9:06:EC:E4:5E:56:94:9C:45:44:F3:D1:5E
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019FA0A8C34092393000B8B2C60C9FF904D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 19D3
Signing time: Sun 26 Jul 2026 23:00:42 +0000
Manifest this update: Sun 26 Jul 2026 23:00:42 +0000
Manifest next update: Mon 27 Jul 2026 23:00:42 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: IXlj83w8OE7DdT1U7h5GzL9gfuhIYGdBcRU2wfSqLiE=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:c3:40:92:39:30:00:b8:b2:c6:0c:9f:f9:04:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jul 26 23:00:42 2026 GMT
Not After : Jul 27 23:00:42 2026 GMT
Subject: CN=f705fe4a3f2bc0c906ece45e56949c4544f3d15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:bd:65:89:6a:09:8e:69:0d:1e:c2:4e:b2:
1f:52:ae:03:db:0c:9c:4b:fb:03:2c:6a:78:76:dc:
1f:e7:8d:17:78:7b:01:29:60:00:b7:c9:9d:9c:05:
a6:1f:da:6f:89:4c:23:50:42:64:2a:4c:8e:40:2b:
51:67:56:33:b2:cb:cb:33:2c:4c:cd:a8:0d:95:4a:
64:b6:dc:4a:02:33:d2:51:df:7d:39:8a:61:fe:f2:
80:ab:8d:f6:1b:88:c1:45:75:52:05:ec:5d:94:96:
53:dd:0d:14:67:bb:25:85:23:b8:70:c5:8a:e4:e5:
a9:51:58:0e:ba:72:7c:2b:d0:59:6f:92:24:98:28:
f6:0e:25:7d:b7:61:37:57:be:12:c5:48:ce:42:28:
a5:0f:e4:d5:fc:09:9e:aa:32:86:be:fc:42:49:5b:
88:19:73:1b:52:57:e9:6e:36:5f:09:e6:75:9c:9e:
36:e2:4c:39:1f:36:c0:f6:ff:b7:85:7f:13:07:d5:
1d:3d:54:9e:78:78:c8:7e:27:43:e4:f5:7d:fa:26:
50:2e:9f:8c:1a:83:4c:51:6a:0c:a2:ed:a6:4b:a0:
38:16:3f:d2:62:09:3f:68:b6:30:a8:0a:7d:4c:f4:
b0:32:30:68:a6:c8:5d:bd:5c:9a:6f:43:c2:6d:33:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:FE:4A:3F:2B:C0:C9:06:EC:E4:5E:56:94:9C:45:44:F3:D1:5E
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:62:b7:7c:be:b7:26:f2:17:ce:1e:ab:5c:b8:2d:a1:b6:
1b:7b:90:68:63:cd:f5:db:92:4c:73:74:a7:2f:b4:e5:b4:a4:
28:b5:29:6c:86:85:c9:a3:8d:37:bd:db:89:fa:51:bf:8f:10:
18:43:2d:1f:c7:64:9a:c8:84:d4:76:83:64:4b:68:99:a2:23:
51:6c:c6:eb:29:48:72:d9:5f:0e:a4:ca:41:f8:63:2a:48:96:
37:ff:1d:92:17:7a:e9:e9:c1:a0:25:99:4b:16:25:27:2b:6f:
1c:1b:16:4e:de:d9:9a:21:b0:8f:c6:bf:f2:54:e3:1d:56:a4:
02:46:07:10:7a:b5:ef:f1:5e:13:36:17:e7:2c:58:dc:70:be:
6b:bc:87:ed:09:0e:fa:2a:7f:fc:fc:8e:bb:f3:5d:9e:3b:0a:
c8:32:5f:8c:af:31:90:19:42:6c:26:e1:cf:7a:2d:99:ca:db:
ad:64:1d:83:8b:82:e1:e4:c6:60:fd:29:60:20:8e:35:81:64:
54:79:4d:96:99:0f:56:75:e5:8a:a7:b0:4d:c6:4f:e4:a8:43:
f2:a3:52:32:94:be:71:20:c0:3c:11:4a:8e:e5:52:a2:50:e2:
b6:8e:7a:aa:d5:e0:06:96:98:ac:ef:b2:71:0e:ac:be:60:d6:
5a:8d:4d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqMNAkjkwALiyxgyf+QTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4
NTE4YmUwHhcNMjYwNzI2MjMwMDQyWhcNMjYwNzI3MjMwMDQyWjAzMTEwLwYDVQQD
EyhmNzA1ZmU0YTNmMmJjMGM5MDZlY2U0NWU1Njk0OWM0NTQ0ZjNkMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzC9ZYlqCY5pDR7CTrIfUq4D2wyc
S/sDLGp4dtwf540XeHsBKWAAt8mdnAWmH9pviUwjUEJkKkyOQCtRZ1YzssvLMyxM
zagNlUpkttxKAjPSUd99OYph/vKAq432G4jBRXVSBexdlJZT3Q0UZ7slhSO4cMWK
5OWpUVgOunJ8K9BZb5IkmCj2DiV9t2E3V74SxUjOQiilD+TV/AmeqjKGvvxCSVuI
GXMbUlfpbjZfCeZ1nJ424kw5HzbA9v+3hX8TB9UdPVSeeHjIfidD5PV9+iZQLp+M
GoNMUWoMou2mS6A4Fj/SYgk/aLYwqAp9TPSwMjBopshdvVyab0PCbTO4UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcF/ko/K8DJBuzkXlaUnEVE89FeMB8GA1UdIwQY
MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt
MGUyZDY5N2IyN2UzLzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz
LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSlit3y+
tybyF84eq1y4LaG2G3uQaGPN9duSTHN0py+05bSkKLUpbIaFyaONN73bifpRv48Q
GEMtH8dkmsiE1HaDZEtomaIjUWzG6ylIctlfDqTKQfhjKkiWN/8dkhd66enBoCWZ
SxYlJytvHBsWTt7ZmiGwj8a/8lTjHVakAkYHEHq17/FeEzYX5yxY3HC+a7yH7QkO
+ip//PyOu/NdnjsKyDJfjK8xkBlCbCbhz3otmcrbrWQdg4uC4eTGYP0pYCCONYFk
VHlNlpkPVnXliqewTcZP5KhD8qNSMpS+cSDAPBFKjuVSolDito56qtXgBpaYrO+y
cQ6svmDWWo1NCw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:33:10 2026 by rpki-client