Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
File: _yXZxSk7p7_lIHSsJ_x9-aZJshs.mft (raw, json)
Hash identifier: qEjVqy5gmqBlqXsjbu5Bz7t0W5bk5wNHhJ9o1KkHv1o=
Subject key identifier: B6:98:D4:1E:A6:3F:A4:07:8C:53:7C:7C:48:7C:58:2F:1A:A8:9B:3A
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 019F85D6173E3E2D9DB03BE8B935CF7502FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:28 +0000
Manifest this update: Tue 21 Jul 2026 18:00:28 +0000
Manifest next update: Wed 22 Jul 2026 18:00:28 +0000
Files and hashes: 1: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (hash: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=)
2: _yXZxSk7p7_lIHSsJ_x9-aZJshs.crl (hash: VIhf66hmGkLakYP/uhYjwV7wGH93USOdCC6AG+VBf6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:17:3e:3e:2d:9d:b0:3b:e8:b9:35:cf:75:02:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Jul 21 18:00:28 2026 GMT
Not After : Jul 22 18:00:28 2026 GMT
Subject: CN=b698d41ea63fa4078c537c7c487c582f1aa89b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:92:57:08:c4:3c:b0:7d:a6:be:01:86:4a:
c0:e9:ad:4c:2c:57:df:8b:2b:cd:f3:9f:a4:de:d8:
be:ba:aa:bc:6f:66:ba:c8:8b:df:2f:26:f8:e0:bc:
ea:1c:d4:29:dd:c0:e4:7d:c3:69:d3:22:0f:df:e9:
06:87:ac:4e:3a:6c:1f:ac:1d:61:c8:b2:f2:c7:03:
1e:e1:fd:42:3e:35:6c:56:fc:a0:21:73:73:94:63:
7d:bc:a4:de:fa:ce:a5:1a:a7:96:b8:cf:66:f7:34:
2b:7f:ef:6b:00:05:ab:fe:41:44:fa:0c:64:b1:c9:
1b:d1:94:5a:5a:a3:7d:d2:a6:8e:15:b3:bc:81:af:
a0:ad:67:b5:3e:4d:c6:a1:80:e2:2f:da:1a:d2:cc:
f1:8d:7c:56:18:f6:86:84:b0:dc:2e:7e:30:d4:d4:
e5:18:53:63:e5:cc:05:d5:de:1e:48:3e:21:e3:f5:
1b:d3:9a:15:11:9c:80:ab:6d:38:98:37:a9:05:85:
44:80:dd:63:ea:88:62:b7:80:26:6c:d2:2a:12:10:
5e:b9:a7:64:2c:84:5b:4a:df:a9:b3:d0:c0:6f:9e:
29:15:3d:73:5c:5d:88:78:e5:2d:61:61:b9:7e:a7:
93:5a:cd:5d:26:aa:70:15:29:2e:72:e7:0a:44:f5:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:D4:1E:A6:3F:A4:07:8C:53:7C:7C:48:7C:58:2F:1A:A8:9B:3A
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7d:b4:6e:0d:86:8d:be:8b:53:9f:8b:fd:4c:0f:af:e6:60:
ff:67:f3:0c:84:9c:50:65:2c:18:aa:24:d6:5d:b9:8f:5c:c3:
42:d1:46:ae:13:dd:70:47:40:53:3e:6e:52:67:7b:3b:be:52:
2d:f0:a6:76:69:9d:82:bc:79:81:53:a1:41:57:ea:6f:f5:0f:
9a:31:e8:1c:44:ca:50:23:10:c0:64:29:45:d3:98:37:c6:82:
26:47:26:00:41:76:4d:7f:d8:51:3e:df:b1:86:2c:c5:0b:e6:
f1:12:aa:cc:ba:4f:89:49:4b:b2:f3:86:83:37:c6:ca:eb:34:
4a:6d:5e:ce:57:e8:93:02:72:75:72:b6:0b:11:a7:1d:15:e2:
aa:e8:7e:16:cc:ab:27:ec:4d:c5:da:2e:bc:4d:5f:d6:78:09:
0d:4a:a2:2c:1f:de:3e:bc:75:27:05:ec:04:86:02:0f:a9:40:
92:a7:f7:af:11:a0:37:dd:dd:33:8f:13:e1:75:ff:78:9c:95:
bd:1e:8e:1e:c6:e8:43:7a:e2:89:9a:74:cf:00:d3:06:aa:55:
de:0b:b2:f3:cf:32:5f:ad:2a:3a:a2:72:35:9c:bb:a8:e2:98:
db:85:2a:a6:ef:81:b5:4d:f8:cc:2b:24:8a:97:9d:02:1c:df:
45:96:4c:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1hc+Pi2dsDvouTXPdQL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjVkOWM1MjkzYmE3YmZlNTIwNzRhYzI3ZmM3ZGY5YTY0
OWIyMWIwHhcNMjYwNzIxMTgwMDI4WhcNMjYwNzIyMTgwMDI4WjAzMTEwLwYDVQQD
EyhiNjk4ZDQxZWE2M2ZhNDA3OGM1MzdjN2M0ODdjNTgyZjFhYTg5YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDKSVwjEPLB9pr4BhkrA6a1MLFff
iyvN85+k3ti+uqq8b2a6yIvfLyb44LzqHNQp3cDkfcNp0yIP3+kGh6xOOmwfrB1h
yLLyxwMe4f1CPjVsVvygIXNzlGN9vKTe+s6lGqeWuM9m9zQrf+9rAAWr/kFE+gxk
sckb0ZRaWqN90qaOFbO8ga+grWe1Pk3GoYDiL9oa0szxjXxWGPaGhLDcLn4w1NTl
GFNj5cwF1d4eSD4h4/Ub05oVEZyAq204mDepBYVEgN1j6ohit4AmbNIqEhBeuadk
LIRbSt+ps9DAb54pFT1zXF2IeOUtYWG5fqeTWs1dJqpwFSkucucKRPXMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaY1B6mP6QHjFN8fEh8WC8aqJs6MB8GA1UdIwQY
MBaAFP8l2cUpO6e/5SB0rCf8ffmmSbIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lYWnhTazdwN19sSUhTc0pfeDktYVpKc2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUt
MzQ2YmQ5NzNjODQzLzEvX3lYWnhTazdwN19sSUhTc0pfeDktYVpKc2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUtMzQ2YmQ5NzNjODQz
LzEvX3lYWnhTazdwN19sSUhTc0pfeDktYVpKc2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGH20bg2G
jb6LU5+L/UwPr+Zg/2fzDIScUGUsGKok1l25j1zDQtFGrhPdcEdAUz5uUmd7O75S
LfCmdmmdgrx5gVOhQVfqb/UPmjHoHETKUCMQwGQpRdOYN8aCJkcmAEF2TX/YUT7f
sYYsxQvm8RKqzLpPiUlLsvOGgzfGyus0Sm1ezlfokwJydXK2CxGnHRXiquh+Fsyr
J+xNxdouvE1f1ngJDUqiLB/ePrx1JwXsBIYCD6lAkqf3rxGgN93dM48T4XX/eJyV
vR6OHsboQ3riiZp0zwDTBqpV3guy888yX60qOqJyNZy7qOKY24Uqpu+BtU34zCsk
ipedAhzfRZZMjw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:42 2026 by rpki-client