Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: PuGPHDHQKlxCr+fa5aicGc2z81UMKHIs+Z9zNMSCiGs=
Subject key identifier: DF:20:ED:6E:1C:01:7E:A1:E7:EB:02:93:1E:B5:A0:3A:B0:8B:64:3E
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 019F71739091588A40FAF4EDFAB51A7CB98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 04C8
Signing time: Fri 17 Jul 2026 19:00:26 +0000
Manifest this update: Fri 17 Jul 2026 19:00:26 +0000
Manifest next update: Sat 18 Jul 2026 19:00:26 +0000
Files and hashes: 1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: jFu2J4Pwfwi7kvlhmzmXacVP5WNZ1GGlnb9J12DbyHI=)
2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:73:90:91:58:8a:40:fa:f4:ed:fa:b5:1a:7c:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Jul 17 19:00:26 2026 GMT
Not After : Jul 18 19:00:26 2026 GMT
Subject: CN=df20ed6e1c017ea1e7eb02931eb5a03ab08b643e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:2a:4d:9c:c6:c7:e1:5c:ea:bb:31:0a:66:
73:df:56:81:a0:21:6a:20:92:d6:2d:03:70:4f:6c:
93:88:8d:62:0c:f3:5e:d3:3b:4c:e3:94:24:9d:52:
e9:68:a6:23:c4:17:81:77:d8:bc:fa:ac:ef:e9:34:
fc:be:8a:95:23:d1:4e:65:42:c8:02:51:52:82:9b:
d7:d1:81:5b:25:17:24:c0:5b:8d:89:9d:3d:6d:8b:
57:a4:5d:93:07:88:6e:20:19:02:0b:6e:a6:5e:99:
b5:a5:e0:02:14:6e:bd:0a:50:bc:b0:76:a3:17:52:
44:fd:6c:51:42:fc:59:d1:80:66:fb:8d:3e:f3:ad:
da:9f:d8:10:fe:35:55:e7:9f:3c:64:fd:9e:05:b8:
00:20:db:a2:e0:59:e2:e9:1c:dc:79:da:0e:db:39:
c8:fd:c2:9a:f2:fd:57:01:6e:e6:77:56:63:f2:55:
57:5e:d5:78:10:e7:ef:14:c7:bf:16:c9:d7:5a:bb:
57:ff:29:f9:04:84:d2:8b:d6:9b:7d:58:4d:93:44:
01:d6:dc:9a:66:d0:5f:4f:5f:54:9e:35:a9:52:1b:
c1:28:69:f8:c0:be:05:56:76:bb:11:25:e8:65:7b:
4e:82:f8:cd:38:5a:67:09:7d:66:5b:e1:a9:d1:77:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:ED:6E:1C:01:7E:A1:E7:EB:02:93:1E:B5:A0:3A:B0:8B:64:3E
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6e:6a:e9:ae:d7:88:10:f5:1f:a8:aa:b7:e2:ff:4a:e8:c3:
3a:e8:ba:9a:cb:78:56:89:b2:8b:fd:e7:50:a5:68:f5:36:4e:
c6:1d:3d:2c:7f:4c:00:e7:1c:e5:6e:36:36:b6:d6:0f:3a:6c:
9f:0a:ef:89:cb:dd:c6:a3:3d:dc:09:44:f7:3a:af:75:14:b3:
53:a4:b1:aa:69:f5:9b:a9:c5:f2:35:22:4a:3b:f2:e2:b5:d7:
83:5a:f6:3b:13:80:1e:80:6b:f5:3c:dd:03:7c:24:02:f4:ba:
19:97:b5:bc:0e:a6:e0:d4:5b:36:b8:39:ed:cd:5b:0b:60:bb:
54:0a:b7:5f:e6:62:a6:ea:21:8b:f5:6f:af:60:2b:75:e0:06:
ec:f2:97:b2:e7:89:99:24:bc:e5:6f:3d:f5:11:e9:f0:46:8c:
3e:14:bb:3f:91:4b:f2:92:b3:5e:9c:9b:dc:b1:71:be:93:81:
73:51:2e:2b:6c:63:ee:79:57:d4:89:44:6f:87:7a:01:e7:a3:
45:04:8d:f8:ce:c1:ee:d2:8f:e2:c3:ee:12:0a:c5:52:6b:26:
74:f0:6b:7f:3a:fc:b3:6c:be:a1:ce:bf:09:ea:c2:02:a4:34:
81:b9:54:9b:78:1f:fa:ab:25:56:0c:be:62:1d:d2:94:03:da:
33:ca:b9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9xc5CRWIpA+vTt+rUafLmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw
MDViNDgwHhcNMjYwNzE3MTkwMDI2WhcNMjYwNzE4MTkwMDI2WjAzMTEwLwYDVQQD
EyhkZjIwZWQ2ZTFjMDE3ZWExZTdlYjAyOTMxZWI1YTAzYWIwOGI2NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLEqTZzGx+Fc6rsxCmZz31aBoCFq
IJLWLQNwT2yTiI1iDPNe0ztM45QknVLpaKYjxBeBd9i8+qzv6TT8voqVI9FOZULI
AlFSgpvX0YFbJRckwFuNiZ09bYtXpF2TB4huIBkCC26mXpm1peACFG69ClC8sHaj
F1JE/WxRQvxZ0YBm+40+863an9gQ/jVV5588ZP2eBbgAINui4Fni6RzcedoO2znI
/cKa8v1XAW7md1Zj8lVXXtV4EOfvFMe/FsnXWrtX/yn5BITSi9abfVhNk0QB1tya
ZtBfT19UnjWpUhvBKGn4wL4FVna7ESXoZXtOgvjNOFpnCX1mW+Gp0Xd/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8g7W4cAX6h5+sCkx61oDqwi2Q+MB8GA1UdIwQY
MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt
MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj
LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkW5q6a7X
iBD1H6iqt+L/SujDOui6mst4Vomyi/3nUKVo9TZOxh09LH9MAOcc5W42NrbWDzps
nwrvicvdxqM93AlE9zqvdRSzU6Sxqmn1m6nF8jUiSjvy4rXXg1r2OxOAHoBr9Tzd
A3wkAvS6GZe1vA6m4NRbNrg57c1bC2C7VAq3X+Zipuohi/Vvr2ArdeAG7PKXsueJ
mSS85W899RHp8EaMPhS7P5FL8pKzXpyb3LFxvpOBc1EuK2xj7nlX1IlEb4d6Aeej
RQSN+M7B7tKP4sPuEgrFUmsmdPBrfzr8s2y+oc6/CerCAqQ0gblUm3gf+qslVgy+
Yh3SlAPaM8q5BQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:56 2026 by rpki-client