Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: bXQ7heOVim+1fsc1lzIYnOc9/eGrtDksHw+eUEYl0ic=
Subject key identifier: 79:2D:86:86:79:00:49:1E:F1:E7:59:A3:82:8A:25:2E:D7:9A:F0:93
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019FA2CE5CB9E1DE2B796FD16838FB4C0F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 09:01:00 +0000
Manifest this update: Mon 27 Jul 2026 09:01:00 +0000
Manifest next update: Tue 28 Jul 2026 09:01:00 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: zgLlDegmaQEZo1l9K3F1KK2WdKvQy6JdJNA1UoBDQrQ=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:5c:b9:e1:de:2b:79:6f:d1:68:38:fb:4c:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jul 27 09:01:00 2026 GMT
Not After : Jul 28 09:01:00 2026 GMT
Subject: CN=792d86867900491ef1e759a3828a252ed79af093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:3a:b1:09:11:ae:7d:73:c2:d9:ab:cb:65:
b3:3b:3d:ec:fb:12:49:6f:a6:3e:cf:5a:9f:cd:1b:
38:35:dd:9f:4b:ff:1a:41:44:28:46:6a:b3:ad:7d:
fc:6e:b3:32:9f:97:28:fa:cc:73:ab:bc:a1:70:8c:
46:79:0b:5f:ef:a2:7a:79:85:1f:7b:97:fb:ee:70:
c3:1d:36:c1:c9:06:b4:bc:61:f9:6e:c8:e2:b7:e2:
55:bb:40:f6:41:64:e1:19:08:c9:7d:f1:cb:aa:bc:
60:a6:26:44:dc:2f:ff:08:da:53:8f:3e:a3:ad:06:
c6:f6:3e:3c:a3:5f:78:45:17:12:8b:75:95:00:22:
6d:4a:49:b4:94:78:7e:66:c4:85:1c:11:a1:81:2a:
6d:5f:80:e9:b8:9a:02:1b:c4:e4:38:9f:1d:11:dd:
b9:76:94:6d:55:09:47:3b:70:cc:e6:07:f3:f6:9b:
07:5f:3e:fd:5c:70:a4:40:08:20:c0:05:eb:ab:df:
bf:e4:55:4b:da:cf:7e:17:37:7a:a5:03:0d:3b:c1:
86:4e:ca:32:31:83:91:36:79:b8:c4:76:11:43:9a:
30:5b:8e:5e:87:bd:3a:8e:7b:fa:c2:85:0d:cd:15:
3c:45:61:4f:b4:84:5b:5e:1e:1c:fe:e8:c2:f6:2e:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2D:86:86:79:00:49:1E:F1:E7:59:A3:82:8A:25:2E:D7:9A:F0:93
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:f6:16:59:4a:db:35:5e:62:cc:da:49:b6:dd:83:de:e6:
d7:b8:6d:77:5d:46:fd:2e:06:7f:4b:ce:15:a7:54:e2:4d:1a:
4b:91:23:32:c5:4f:e3:42:19:d7:e0:38:32:fb:2c:b6:a1:ef:
89:fb:4f:55:17:37:43:49:d9:2e:fd:70:30:80:d8:cd:14:ab:
02:f6:b6:03:50:21:f3:a7:28:4b:2a:a8:51:25:d7:d5:b5:72:
4b:3e:fc:67:cb:25:b3:ac:e7:ce:b3:fc:52:22:79:bb:a6:bb:
c8:e2:f1:e4:03:a0:46:70:2a:5f:c7:d3:0a:91:1a:9f:32:74:
f9:a3:9a:dc:56:af:9f:7a:73:67:5d:6a:cd:6e:35:9e:f6:d4:
a6:80:69:46:e2:69:38:0d:95:30:c4:59:c5:d2:b5:9d:9d:ec:
c0:16:8f:c2:63:54:bd:3f:4d:cc:1d:51:5b:9c:09:43:27:99:
af:1e:13:88:7e:55:8f:18:20:8c:c6:10:f3:b7:44:ec:d8:1f:
7c:37:4c:9b:f9:b1:f4:a3:3b:2d:b6:c2:be:e4:41:ef:93:1b:
0c:52:fe:ea:d2:14:c9:8a:26:3b:61:22:53:fb:e2:18:e7:28:
73:57:46:15:15:56:ce:0d:3b:0d:4b:7d:5e:05:0c:1d:36:3c:
9b:c6:f8:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izly54d4reW/RaDj7TA9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjYwNzI3MDkwMTAwWhcNMjYwNzI4MDkwMTAwWjAzMTEwLwYDVQQD
Eyg3OTJkODY4Njc5MDA0OTFlZjFlNzU5YTM4MjhhMjUyZWQ3OWFmMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vw6sQkRrn1zwtmry2WzOz3s+xJJ
b6Y+z1qfzRs4Nd2fS/8aQUQoRmqzrX38brMyn5co+sxzq7yhcIxGeQtf76J6eYUf
e5f77nDDHTbByQa0vGH5bsjit+JVu0D2QWThGQjJffHLqrxgpiZE3C//CNpTjz6j
rQbG9j48o194RRcSi3WVACJtSkm0lHh+ZsSFHBGhgSptX4DpuJoCG8TkOJ8dEd25
dpRtVQlHO3DM5gfz9psHXz79XHCkQAggwAXrq9+/5FVL2s9+Fzd6pQMNO8GGTsoy
MYORNnm4xHYRQ5owW45eh706jnv6woUNzRU8RWFPtIRbXh4c/ujC9i62+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkthoZ5AEke8edZo4KKJS7XmvCTMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRz2FllK
2zVeYszaSbbdg97m17htd11G/S4Gf0vOFadU4k0aS5EjMsVP40IZ1+A4MvsstqHv
iftPVRc3Q0nZLv1wMIDYzRSrAva2A1Ah86coSyqoUSXX1bVySz78Z8sls6znzrP8
UiJ5u6a7yOLx5AOgRnAqX8fTCpEanzJ0+aOa3Favn3pzZ11qzW41nvbUpoBpRuJp
OA2VMMRZxdK1nZ3swBaPwmNUvT9NzB1RW5wJQyeZrx4TiH5VjxggjMYQ87dE7Ngf
fDdMm/mx9KM7LbbCvuRB75MbDFL+6tIUyYomO2EiU/viGOcoc1dGFRVWzg07DUt9
XgUMHTY8m8b4dA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:45:17 2026 by rpki-client