Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: cOFrNxrRevT0zdiqbknC569S/SAHI4crOlu50gJW2us=
Subject key identifier: 9F:6B:F2:85:4B:75:16:75:6B:19:5A:F6:67:8E:EE:E9:B9:A7:C2:E7
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019F84555FDB05CE2509212DF689816E69AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0D2D
Signing time: Tue 21 Jul 2026 11:00:15 +0000
Manifest this update: Tue 21 Jul 2026 11:00:15 +0000
Manifest next update: Wed 22 Jul 2026 11:00:15 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: qhdiJFBMALlbOKCv4F/xwOkJ/YGHpCBF+r/s5IkJs1w=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:5f:db:05:ce:25:09:21:2d:f6:89:81:6e:69:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jul 21 11:00:15 2026 GMT
Not After : Jul 22 11:00:15 2026 GMT
Subject: CN=9f6bf2854b7516756b195af6678eeee9b9a7c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:62:62:16:aa:5d:dd:1a:d4:9c:70:ea:1e:
5a:3e:ba:95:87:e0:dc:2b:89:9c:5d:b9:b5:94:3b:
45:7c:7e:a2:d3:fc:4e:4d:83:f8:43:75:ce:6e:94:
7d:fa:1b:47:a3:3f:6c:f1:06:f9:12:d4:b8:1c:b8:
50:0f:54:f1:12:e8:42:db:a1:fe:0c:06:de:c2:a5:
34:58:03:6c:0c:b6:b8:84:d8:a0:85:ad:32:fd:cc:
6f:b9:87:8d:49:2b:17:47:79:f3:c0:36:38:0a:9c:
ed:52:54:ab:38:41:a2:f7:f3:04:07:2e:08:e9:24:
10:60:4b:1a:4e:8d:86:d3:a7:29:26:9a:42:08:6d:
a4:24:6e:0a:aa:18:ae:16:59:14:b5:6b:26:a3:85:
5f:9b:f9:16:75:92:8d:25:04:05:c7:48:32:f6:17:
86:29:d0:41:8f:38:34:d0:50:f1:ca:cc:88:69:d2:
19:13:9a:f6:31:77:1e:14:89:9f:cf:4b:d4:01:90:
1a:00:7d:80:ed:ae:33:43:d2:3b:03:c0:de:14:4c:
f4:9a:ee:e1:50:57:46:84:a9:53:e1:e7:26:29:cd:
30:75:4a:ca:9f:a4:8a:d9:2f:03:71:41:b4:0e:b8:
77:3c:c5:cb:ef:cd:45:81:de:fd:54:10:c4:60:6a:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:F2:85:4B:75:16:75:6B:19:5A:F6:67:8E:EE:E9:B9:A7:C2:E7
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6b:76:fd:62:d6:31:f7:da:42:cb:2c:2c:14:0c:b0:2e:b7:
c7:37:5f:15:2b:f2:98:2b:f0:ee:d3:61:fc:b0:1b:c7:b7:bb:
58:59:09:2b:bd:99:49:5c:da:5c:e4:58:31:55:8a:e9:ee:25:
b1:bc:d9:34:8c:f5:e1:60:66:e0:6c:2e:ec:4f:29:42:6b:56:
8a:a6:50:91:98:8a:da:dc:57:87:da:aa:a9:eb:a0:64:09:d5:
bf:be:6f:c3:42:24:c0:a8:d1:a8:e8:de:a5:af:fb:33:1e:40:
76:5c:8c:22:68:20:90:60:28:5a:09:03:d6:5c:02:25:b0:cb:
32:06:77:d3:98:7e:7b:0c:20:14:39:e0:66:96:e3:fd:df:9e:
63:10:d9:c7:d3:2b:f5:78:fe:6a:26:23:ec:8a:34:f1:fa:cb:
d0:12:94:de:8d:d3:9c:3f:11:15:c8:f3:9d:77:a0:b4:cb:78:
2c:62:5a:6d:74:4b:a3:5e:89:7d:1f:6f:a9:92:5c:b6:d7:cb:
b2:17:22:7b:97:42:e0:ed:35:33:f9:08:3a:16:77:77:50:f4:
7c:74:54:1e:71:d2:7c:14:24:2a:1c:84:1f:b8:f3:06:21:e9:
90:50:ae:df:6f:0e:65:6a:25:0e:f4:37:43:c1:11:7a:e2:f3:
f1:29:17:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVV/bBc4lCSEt9omBbmmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4
OTE0YTIwHhcNMjYwNzIxMTEwMDE1WhcNMjYwNzIyMTEwMDE1WjAzMTEwLwYDVQQD
Eyg5ZjZiZjI4NTRiNzUxNjc1NmIxOTVhZjY2NzhlZWVlOWI5YTdjMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TpiYhaqXd0a1Jxw6h5aPrqVh+Dc
K4mcXbm1lDtFfH6i0/xOTYP4Q3XObpR9+htHoz9s8Qb5EtS4HLhQD1TxEuhC26H+
DAbewqU0WANsDLa4hNigha0y/cxvuYeNSSsXR3nzwDY4CpztUlSrOEGi9/MEBy4I
6SQQYEsaTo2G06cpJppCCG2kJG4KqhiuFlkUtWsmo4Vfm/kWdZKNJQQFx0gy9heG
KdBBjzg00FDxysyIadIZE5r2MXceFImfz0vUAZAaAH2A7a4zQ9I7A8DeFEz0mu7h
UFdGhKlT4ecmKc0wdUrKn6SK2S8DcUG0Drh3PMXL781Fgd79VBDEYGpiCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9r8oVLdRZ1axla9meO7um5p8LnMB8GA1UdIwQY
MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt
NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm
LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGt2/WLW
MffaQsssLBQMsC63xzdfFSvymCvw7tNh/LAbx7e7WFkJK72ZSVzaXORYMVWK6e4l
sbzZNIz14WBm4Gwu7E8pQmtWiqZQkZiK2txXh9qqqeugZAnVv75vw0IkwKjRqOje
pa/7Mx5AdlyMImggkGAoWgkD1lwCJbDLMgZ305h+ewwgFDngZpbj/d+eYxDZx9Mr
9Xj+aiYj7Io08frL0BKU3o3TnD8RFcjznXegtMt4LGJabXRLo16JfR9vqZJcttfL
shcie5dC4O01M/kIOhZ3d1D0fHRUHnHSfBQkKhyEH7jzBiHpkFCu328OZWolDvQ3
Q8EReuLz8SkXPA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:52:33 2026 by rpki-client