
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File: r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier: IzoGUvbiqFU0sSZ2dcK7N2jlh/Rsc2zpbkZJwf4RMy8=
Subject key identifier: 3E:DF:F3:F1:0F:5A:A0:94:41:8A:FC:AC:10:51:9C:F2:1B:BB:E1:BA
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer: /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial: 019F9F95EA07B87116D1B3940E7D79A4D4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number: 6D
Signing time: Sun 26 Jul 2026 18:00:29 +0000
Manifest this update: Sun 26 Jul 2026 18:00:29 +0000
Manifest next update: Mon 27 Jul 2026 18:00:29 +0000
Files and hashes: 1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: muzBuIm/OLbpvpK3PJA72RH69cHj2Ti4Ls2JLi7KYNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:ea:07:b8:71:16:d1:b3:94:0e:7d:79:a4:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Validity
Not Before: Jul 26 18:00:29 2026 GMT
Not After : Jul 27 18:00:29 2026 GMT
Subject: CN=3edff3f10f5aa094418afcac10519cf21bbbe1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:b9:6c:52:d9:5c:9c:6e:ff:a7:57:09:e5:
a2:0d:9c:75:07:93:38:e9:bf:f1:a7:2d:69:1c:b2:
72:28:19:a7:76:c3:4f:ec:1d:ff:65:a4:bb:9c:d6:
9b:a2:62:76:4f:52:ca:97:e7:cb:12:b4:bd:3a:e0:
7f:17:8d:6e:49:40:59:09:83:ca:df:91:17:ba:af:
7c:d6:4a:d6:d8:6b:34:67:86:79:5c:12:b5:67:73:
fe:9b:13:ad:2f:73:fa:2c:a6:4b:73:b6:3a:28:2e:
42:ce:ca:ca:5b:b7:d1:a9:a3:07:c3:7b:63:c0:82:
b4:b4:60:02:35:6f:f3:82:71:c3:f0:b9:5a:f9:5a:
da:54:21:21:f2:f5:f1:21:09:69:74:b6:86:e9:49:
8b:d4:73:51:ac:2b:04:9c:84:ae:7e:21:6d:a2:d9:
c6:e9:d9:25:97:ab:d9:5f:6e:b6:e5:39:67:a4:88:
e4:49:fb:7a:d8:24:98:e0:fd:bb:50:6a:02:42:3e:
f5:4a:a3:17:f7:82:d0:90:60:db:63:45:85:cd:1b:
6e:f9:29:08:e4:b7:4f:19:8c:cc:ba:d1:07:16:15:
cc:07:51:5b:cb:de:96:75:95:c8:8d:00:3e:a3:11:
aa:de:88:de:f3:09:22:fc:d0:aa:5d:26:a1:e5:5b:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:F3:F1:0F:5A:A0:94:41:8A:FC:AC:10:51:9C:F2:1B:BB:E1:BA
X509v3 Authority Key Identifier:
keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:41:c3:38:94:bd:05:27:ee:68:77:24:7e:d6:51:aa:2b:
3b:4b:9b:a2:73:be:c0:25:9d:42:0e:41:22:f1:22:ea:7c:d8:
7c:86:3f:75:4a:42:3f:58:e6:f0:b4:28:79:0a:84:fe:c8:eb:
a5:66:1a:b6:bb:db:ec:8b:4f:3a:8a:ef:7d:65:6d:32:9b:df:
9c:0e:11:18:1b:fb:51:4f:31:d0:f5:55:c6:95:64:29:b3:94:
55:1f:51:28:00:69:40:49:14:fd:7e:f8:dc:6f:ba:4a:92:72:
18:5e:04:31:4e:18:15:56:7f:1f:98:75:5d:73:b1:e3:80:1c:
ec:2b:f9:e2:81:4c:68:06:90:0d:fc:48:25:4a:81:c8:81:ed:
ab:5e:87:3a:dc:4f:7c:22:8c:66:7c:de:12:c2:8f:48:2b:9b:
ae:36:a5:91:1c:91:29:27:f5:7b:9f:a9:ac:eb:29:92:9e:ac:
47:e9:62:cc:63:7c:4f:2e:12:0e:c3:26:39:1a:54:19:8d:42:
ea:45:c3:2a:44:d6:75:6a:b7:b5:43:d7:95:13:72:ce:c9:f1:
e9:da:75:6e:a7:cc:58:87:0c:d2:13:5d:4a:54:6a:78:0a:e3:
5f:53:6a:b3:94:6e:0e:71:85:b9:c4:a8:55:80:0a:8a:9c:b8:
c8:33:76:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fleoHuHEW0bOUDn15pNTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjM0ODJiOGVjMmU3NjA1ODc5Zjg1M2E0OGRiYWMwNjE0
NWUxYmIwHhcNMjYwNzI2MTgwMDI5WhcNMjYwNzI3MTgwMDI5WjAzMTEwLwYDVQQD
EygzZWRmZjNmMTBmNWFhMDk0NDE4YWZjYWMxMDUxOWNmMjFiYmJlMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMa5bFLZXJxu/6dXCeWiDZx1B5M4
6b/xpy1pHLJyKBmndsNP7B3/ZaS7nNabomJ2T1LKl+fLErS9OuB/F41uSUBZCYPK
35EXuq981krW2Gs0Z4Z5XBK1Z3P+mxOtL3P6LKZLc7Y6KC5CzsrKW7fRqaMHw3tj
wIK0tGACNW/zgnHD8Lla+VraVCEh8vXxIQlpdLaG6UmL1HNRrCsEnISufiFtotnG
6dkll6vZX2625TlnpIjkSft62CSY4P27UGoCQj71SqMX94LQkGDbY0WFzRtu+SkI
5LdPGYzMutEHFhXMB1Fby96WdZXIjQA+oxGq3oje8wki/NCqXSah5VtXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7f8/EPWqCUQYr8rBBRnPIbu+G6MB8GA1UdIwQY
MBaAFK+zSCuOwudgWHn4U6SNusBhReG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdOSUs0N0M1MkJZZWZoVHBJMjZ3R0ZGNGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzMxN2YtNWIyZi00MmRmLThlZjQt
ODExZDI1ZWNiN2QyLzEvcjdOSUs0N0M1MkJZZWZoVHBJMjZ3R0ZGNGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzMxN2YtNWIyZi00MmRmLThlZjQtODExZDI1ZWNiN2Qy
LzEvcjdOSUs0N0M1MkJZZWZoVHBJMjZ3R0ZGNGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLRBwziU
vQUn7mh3JH7WUaorO0ubonO+wCWdQg5BIvEi6nzYfIY/dUpCP1jm8LQoeQqE/sjr
pWYatrvb7ItPOorvfWVtMpvfnA4RGBv7UU8x0PVVxpVkKbOUVR9RKABpQEkU/X74
3G+6SpJyGF4EMU4YFVZ/H5h1XXOx44Ac7Cv54oFMaAaQDfxIJUqByIHtq16HOtxP
fCKMZnzeEsKPSCubrjalkRyRKSf1e5+prOspkp6sR+lizGN8Ty4SDsMmORpUGY1C
6kXDKkTWdWq3tUPXlRNyzsnx6dp1bqfMWIcM0hNdSlRqeArjX1Nqs5RuDnGFucSo
VYAKipy4yDN2Lw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:47 2026 by rpki-client