
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
File: s5V9y_9QghTcodun9TIXIFs-Tqo.mft (raw, json)
Hash identifier: mtSnfnzbXH0b3rwI7/HgMjqGfbvL2QYmP/2veFBUpFU=
Subject key identifier: 7E:43:3E:66:BD:93:F9:4D:03:97:EB:AF:64:DF:FB:61:BD:22:BA:83
Authority key identifier: B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
Certificate issuer: /CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Certificate serial: 019F65025BFF4A801700ABFDD7EB11799480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
Manifest number: 29
Signing time: Wed 15 Jul 2026 09:01:20 +0000
Manifest this update: Wed 15 Jul 2026 09:01:20 +0000
Manifest next update: Thu 16 Jul 2026 09:01:20 +0000
Files and hashes: 1: _WtOo9YuQrokwTxQAJF58cfpSiw.roa (hash: OUo6i8y7m+/3FUoqkAIpfYsD0Rzx/nPmH8P0JQ2rHyk=)
2: s5V9y_9QghTcodun9TIXIFs-Tqo.crl (hash: 2d+EEG2BsbzlGEihTQneDJpFy3Qeu7e2/inq7AgnbNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:02:5b:ff:4a:80:17:00:ab:fd:d7:eb:11:79:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Validity
Not Before: Jul 15 09:01:20 2026 GMT
Not After : Jul 16 09:01:20 2026 GMT
Subject: CN=7e433e66bd93f94d0397ebaf64dffb61bd22ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:6b:31:42:39:a5:c9:b5:3c:55:39:f4:95:
81:df:8c:cb:46:8c:2c:4f:1e:13:28:0c:ef:91:87:
f3:57:50:64:e6:17:d4:47:67:e5:ff:21:64:e9:7b:
92:84:52:98:89:a8:14:8f:c6:07:85:98:f7:a3:5b:
92:b8:ef:1b:15:88:b2:19:2a:1c:0c:62:fc:c6:22:
56:9c:7e:2b:bb:57:12:64:7d:97:81:8a:11:3c:51:
67:fb:b4:23:0d:6f:03:d5:63:d6:45:58:bb:86:55:
e6:c8:08:85:f2:38:c1:37:ca:57:11:85:ab:ba:b7:
6c:a9:81:9e:21:5f:9d:c1:2d:4e:30:b7:d4:31:0d:
73:40:87:ff:54:c0:f2:c2:45:3f:c6:5f:56:49:53:
b8:71:1d:c1:1c:b2:9f:61:d0:37:39:62:2b:df:f5:
99:46:7a:53:7b:4c:41:07:48:05:e2:fd:71:47:12:
40:03:96:55:5a:91:14:ec:e2:7e:6d:77:59:38:14:
1f:a0:b9:77:c4:b9:3d:17:54:ac:db:d7:05:9e:e5:
19:13:4f:bd:a6:ac:6f:72:15:d7:ca:bf:67:17:a4:
1e:3c:f7:57:e6:c5:cd:b9:33:0e:3b:27:22:fe:b4:
1e:62:53:47:bc:7a:53:c1:11:6f:b3:07:0e:bc:6a:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:3E:66:BD:93:F9:4D:03:97:EB:AF:64:DF:FB:61:BD:22:BA:83
X509v3 Authority Key Identifier:
keyid:B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:33:1b:28:f9:89:b9:0c:0f:df:1f:21:ff:28:57:34:14:b5:
f6:c2:7b:2f:e2:d8:32:d9:5b:69:16:c7:8f:0f:0d:52:38:35:
7f:18:3f:62:47:39:c1:e8:0f:1d:fe:a4:8d:b2:9b:63:42:ec:
db:7b:be:6e:57:b9:87:87:cf:a7:92:eb:32:0d:9a:49:af:fa:
a6:69:37:60:83:08:c8:9a:40:03:96:4b:f9:ab:c1:8c:6d:17:
64:83:62:86:cb:69:e1:d2:9e:3e:07:a7:49:28:f7:33:a5:07:
bb:64:ea:54:2c:3b:81:e0:83:ef:01:f3:c6:c1:eb:20:51:45:
cd:7c:09:88:e2:a9:77:d4:96:2c:3a:e0:74:36:88:22:07:3e:
78:85:aa:29:1e:30:47:55:c4:4d:a0:ca:da:82:e0:c8:b9:e2:
69:dc:da:42:eb:91:33:f1:dd:e0:e8:f1:03:36:e1:1e:15:2a:
1d:f7:c2:11:79:2a:b6:c0:1d:09:60:53:c0:66:61:af:b9:76:
a1:cc:6f:b6:24:1b:e3:ac:15:2d:8a:60:71:f7:27:ea:57:0f:
b9:49:bc:ab:43:57:b1:42:73:ae:6d:c7:d6:0e:f9:3e:ae:17:
70:f5:c4:83:78:fe:bc:9f:c9:a3:61:d6:fa:2a:5c:d7:11:69:
ba:a9:c9:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9lAlv/SoAXAKv91+sReZSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTU3ZGNiZmY1MDgyMTRkY2ExZGJhN2Y1MzIxNzIwNWIz
ZTRlYWEwHhcNMjYwNzE1MDkwMTIwWhcNMjYwNzE2MDkwMTIwWjAzMTEwLwYDVQQD
Eyg3ZTQzM2U2NmJkOTNmOTRkMDM5N2ViYWY2NGRmZmI2MWJkMjJiYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK9rMUI5pcm1PFU59JWB34zLRows
Tx4TKAzvkYfzV1Bk5hfUR2fl/yFk6XuShFKYiagUj8YHhZj3o1uSuO8bFYiyGSoc
DGL8xiJWnH4ru1cSZH2XgYoRPFFn+7QjDW8D1WPWRVi7hlXmyAiF8jjBN8pXEYWr
urdsqYGeIV+dwS1OMLfUMQ1zQIf/VMDywkU/xl9WSVO4cR3BHLKfYdA3OWIr3/WZ
RnpTe0xBB0gF4v1xRxJAA5ZVWpEU7OJ+bXdZOBQfoLl3xLk9F1Ss29cFnuUZE0+9
pqxvchXXyr9nF6QePPdX5sXNuTMOOyci/rQeYlNHvHpTwRFvswcOvGq7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5DPma9k/lNA5frr2Tf+2G9IrqDMB8GA1UdIwQY
MBaAFLOVfcv/UIIU3KHbp/UyFyBbPk6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVWOXlfOVFnaFRjb2R1bjlUSVhJRnMtVHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMzk0OTYtOTlhMS00YzE4LTk0YTMt
YzE3MGM2NWYwOTM4LzEvczVWOXlfOVFnaFRjb2R1bjlUSVhJRnMtVHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hMzk0OTYtOTlhMS00YzE4LTk0YTMtYzE3MGM2NWYwOTM4
LzEvczVWOXlfOVFnaFRjb2R1bjlUSVhJRnMtVHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjMbKPmJ
uQwP3x8h/yhXNBS19sJ7L+LYMtlbaRbHjw8NUjg1fxg/Ykc5wegPHf6kjbKbY0Ls
23u+ble5h4fPp5LrMg2aSa/6pmk3YIMIyJpAA5ZL+avBjG0XZINihstp4dKePgen
SSj3M6UHu2TqVCw7geCD7wHzxsHrIFFFzXwJiOKpd9SWLDrgdDaIIgc+eIWqKR4w
R1XETaDK2oLgyLniadzaQuuRM/Hd4OjxAzbhHhUqHffCEXkqtsAdCWBTwGZhr7l2
ocxvtiQb46wVLYpgcfcn6lcPuUm8q0NXsUJzrm3H1g75Pq4XcPXEg3j+vJ/Jo2HW
+ipc1xFpuqnJtQ==
-----END CERTIFICATE-----
Generated at Wed Jul 15 14:35:39 2026 by rpki-client