Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: /h1rf5nF4xBTO5P4yfbjsUvU3LDQ9+92OhlL0OM3lU0=
Subject key identifier: 7D:FD:81:DE:19:6E:0C:E9:97:49:81:B2:2E:33:12:C9:6F:DC:0C:E8
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 019FA2293C8EC6D5D24773FAFD1A0479048B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 06:00:39 +0000
Manifest this update: Mon 27 Jul 2026 06:00:39 +0000
Manifest next update: Tue 28 Jul 2026 06:00:39 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: M7dfC4Kw2c+fazrwlH2wONcIz+Du/UWdhlDrNE1QCPw=)
2: zoiA9GOl58HURHRI6-GRtkRSEfA.roa (hash: oLHIfegomnibpy5nfP5FLa3cn06nEqDH56LteMyYgZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:3c:8e:c6:d5:d2:47:73:fa:fd:1a:04:79:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Jul 27 06:00:39 2026 GMT
Not After : Jul 28 06:00:39 2026 GMT
Subject: CN=7dfd81de196e0ce9974981b22e3312c96fdc0ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:2a:2a:cb:15:3d:1b:7e:3a:97:aa:2d:eb:
2e:b3:76:66:16:49:30:6b:5d:7e:ce:31:95:83:5e:
d5:9e:03:8a:48:c6:b4:a6:83:d3:e5:2a:99:b4:53:
17:56:82:33:56:c9:8a:e0:ba:7a:f1:d7:f8:79:a8:
07:12:52:92:9e:87:fd:8b:6e:72:eb:e2:94:3c:86:
08:b7:d4:bc:02:28:41:2e:7d:88:c7:73:ba:2f:bd:
f0:23:63:86:b8:c5:d6:5a:5b:71:e1:75:0e:01:bf:
f3:9f:35:91:bc:3e:f5:63:ce:ed:de:22:69:a7:a8:
ce:43:96:72:ca:18:b5:82:44:01:e2:8e:05:bb:5e:
80:6d:4b:f3:36:e9:cb:4a:28:65:09:e4:e9:d6:bb:
0f:e8:8c:21:6b:e7:e5:44:00:e2:25:ec:b9:3e:59:
64:f1:de:0b:68:09:be:40:5c:f8:9f:b3:02:5d:c4:
88:fb:30:78:7d:0e:03:d4:b1:95:7f:9c:8d:72:cb:
2e:17:32:9f:25:07:03:10:08:41:ac:01:36:ad:90:
9c:61:91:da:20:1b:56:a7:7c:54:69:e9:0b:5e:af:
a8:00:b8:cd:96:23:7d:ce:75:0f:28:95:57:b4:07:
4e:06:d8:7c:d2:a8:2d:8e:29:ae:18:5d:13:6d:27:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:81:DE:19:6E:0C:E9:97:49:81:B2:2E:33:12:C9:6F:DC:0C:E8
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:34:8b:7b:6e:c1:b8:0d:16:8a:f9:0a:12:0f:6e:bc:0d:0d:
19:b0:b2:d3:0c:69:5e:43:b2:68:c6:53:7e:29:4f:b4:bc:60:
94:71:7f:52:a8:f5:2c:f9:3e:a6:54:2d:39:59:9e:59:11:cd:
08:2b:5f:d7:3b:09:ca:f8:f2:58:44:85:ac:f6:d6:05:5f:9d:
da:ed:fa:dd:c2:ed:c9:c1:a5:19:52:5d:1e:8f:3c:d1:a4:d8:
3c:a4:aa:60:a4:00:ab:53:d9:8a:05:0f:6e:96:9e:cb:74:01:
a2:79:79:0e:76:f2:0e:2a:35:06:91:5e:cd:22:e8:ac:c2:a2:
eb:60:14:75:c6:0f:12:90:f7:f4:3a:b5:d1:d0:e7:92:dc:91:
02:f0:a3:18:58:fe:e4:89:7e:52:e1:d0:80:c9:bc:a7:48:d0:
7a:ba:d5:3e:b0:68:64:9a:8c:c9:17:d9:0b:db:bc:bc:e3:52:
fa:69:0a:e8:68:4f:b8:11:9d:f2:6b:70:42:c4:7a:fa:f7:9c:
bf:21:f2:6d:14:4e:d2:95:8b:27:83:1f:01:dc:37:5b:2f:e5:
23:9f:f6:0a:b0:3e:aa:88:b5:7a:82:38:d1:d7:85:41:2b:d8:
31:3f:3f:1c:43:11:01:1b:20:fa:db:19:9f:c2:c3:c1:51:a9:
10:56:b1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKTyOxtXSR3P6/RoEeQSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2YyNmI1NDFmMGJiYThhNWNlNzFlYTUzODExYjQ2YzE2
NTdhYjMwHhcNMjYwNzI3MDYwMDM5WhcNMjYwNzI4MDYwMDM5WjAzMTEwLwYDVQQD
Eyg3ZGZkODFkZTE5NmUwY2U5OTc0OTgxYjIyZTMzMTJjOTZmZGMwY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+EqKssVPRt+OpeqLesus3ZmFkkw
a11+zjGVg17VngOKSMa0poPT5SqZtFMXVoIzVsmK4Lp68df4eagHElKSnof9i25y
6+KUPIYIt9S8AihBLn2Ix3O6L73wI2OGuMXWWltx4XUOAb/znzWRvD71Y87t3iJp
p6jOQ5Zyyhi1gkQB4o4Fu16AbUvzNunLSihlCeTp1rsP6Iwha+flRADiJey5Pllk
8d4LaAm+QFz4n7MCXcSI+zB4fQ4D1LGVf5yNcssuFzKfJQcDEAhBrAE2rZCcYZHa
IBtWp3xUaekLXq+oALjNliN9znUPKJVXtAdOBth80qgtjimuGF0TbSff/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH39gd4Zbgzpl0mBsi4zEslv3AzoMB8GA1UdIwQY
MBaAFP8/JrVB8Luopc5x6lOBG0bBZXqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYt
MWMyNjBiMWUyOGQxLzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYtMWMyNjBiMWUyOGQx
LzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTSLe27B
uA0WivkKEg9uvA0NGbCy0wxpXkOyaMZTfilPtLxglHF/Uqj1LPk+plQtOVmeWRHN
CCtf1zsJyvjyWESFrPbWBV+d2u363cLtycGlGVJdHo880aTYPKSqYKQAq1PZigUP
bpaey3QBonl5DnbyDio1BpFezSLorMKi62AUdcYPEpD39Dq10dDnktyRAvCjGFj+
5Il+UuHQgMm8p0jQerrVPrBoZJqMyRfZC9u8vONS+mkK6GhPuBGd8mtwQsR6+vec
vyHybRRO0pWLJ4MfAdw3Wy/lI5/2CrA+qoi1eoI40deFQSvYMT8/HEMRARsg+tsZ
n8LDwVGpEFaxfg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:33 2026 by rpki-client