Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: VkEw+jEjtPawIYVnUTiQ6I1jgWzn50ogzKBiC4VajVc=
Subject key identifier: 7B:DA:83:48:A4:0C:74:D5:EF:7A:8D:1D:0E:93:41:5F:CE:E9:9F:E2
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019FA304C857E556F1A82BDA4C8B979CE924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 10:00:27 +0000
Manifest this update: Mon 27 Jul 2026 10:00:27 +0000
Manifest next update: Tue 28 Jul 2026 10:00:27 +0000
Files and hashes: 1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: LH+i33gbouYS7zjr61z//izuiuNZ7u8rm4U8+jytGQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:c8:57:e5:56:f1:a8:2b:da:4c:8b:97:9c:e9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jul 27 10:00:27 2026 GMT
Not After : Jul 28 10:00:27 2026 GMT
Subject: CN=7bda8348a40c74d5ef7a8d1d0e93415fcee99fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:6e:13:38:8d:f5:e0:95:10:43:ac:64:b0:
6b:1a:fc:cf:2f:3b:03:31:2c:db:9e:e5:56:97:9f:
5d:47:55:12:c5:5a:a5:b9:16:39:d6:a8:cc:6c:81:
0a:d3:8f:65:0d:21:9b:ee:e8:d9:17:4c:a3:7d:f0:
47:ea:2d:1e:53:64:fb:2b:25:13:d9:05:5e:f9:92:
a8:a0:1b:16:13:10:8c:b5:2d:d8:ca:a1:11:f3:eb:
c1:b2:ed:08:64:c8:c6:3f:1d:2f:a5:8c:ac:11:4b:
cd:cd:72:26:0f:c9:1b:c0:83:3c:cf:f6:68:32:56:
27:f0:34:2e:f7:60:6e:43:ef:a3:46:39:81:59:c2:
ec:66:69:32:1e:e3:03:8f:d3:e7:54:d8:a3:0a:5a:
17:5b:cb:fd:df:5a:c2:43:4c:0a:2e:a0:99:d2:7a:
d8:c5:bb:6d:67:40:5d:d5:b5:3c:7f:4c:46:88:87:
49:ad:8e:12:87:d2:05:67:94:29:49:af:c1:48:14:
c8:bc:e4:60:de:51:f3:45:76:a2:39:48:17:81:92:
ad:ad:3e:47:44:00:80:fd:5b:d7:7c:f7:a5:eb:fe:
b2:43:80:81:e6:ac:ca:2a:06:ae:4e:c1:f8:40:58:
fc:41:de:c0:35:4b:8a:d4:16:e1:63:3a:18:8d:f8:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:83:48:A4:0C:74:D5:EF:7A:8D:1D:0E:93:41:5F:CE:E9:9F:E2
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a2:06:aa:b8:84:6a:b1:69:86:7d:af:e7:83:03:48:69:70:
41:d7:10:0e:e5:c3:ef:9a:85:ce:61:ed:7e:c7:bd:ee:0a:02:
b5:c9:46:fd:07:88:58:59:d8:19:42:2f:ed:19:ba:97:54:5b:
b2:8e:86:61:bc:74:54:c0:13:45:b4:36:2b:73:d6:a0:1f:da:
da:aa:9a:fa:21:3b:7c:fe:9b:42:f8:6e:f9:6b:0e:5e:4b:f2:
63:b8:56:e3:f8:c7:60:c1:18:5a:77:8f:4d:e5:e5:45:74:04:
6e:c3:d7:50:8c:ca:16:ee:83:11:32:a6:8a:a1:a6:ce:3d:1c:
72:63:b8:bf:31:a0:bf:ac:d2:d3:f8:2a:f5:cd:a1:68:76:c3:
b3:50:3a:e1:4a:26:f2:4a:9a:9a:92:3e:3c:ba:eb:75:d4:04:
ac:a5:bb:e7:96:66:b3:8f:60:b0:b0:64:19:83:57:63:9e:49:
cd:19:44:e8:98:80:63:a6:1d:ae:72:33:66:b5:6c:b1:ba:62:
27:c1:d2:4b:90:68:ee:79:4f:46:55:40:dc:81:6e:62:0b:83:
1d:6a:f2:19:0c:c6:2b:23:9e:ea:85:eb:9f:22:fb:b8:18:01:
eb:94:6e:0d:41:fe:e4:01:fb:7b:86:ee:1a:56:74:eb:e1:95:
5a:09:d7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBMhX5VbxqCvaTIuXnOkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjYwNzI3MTAwMDI3WhcNMjYwNzI4MTAwMDI3WjAzMTEwLwYDVQQD
Eyg3YmRhODM0OGE0MGM3NGQ1ZWY3YThkMWQwZTkzNDE1ZmNlZTk5ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5duEziN9eCVEEOsZLBrGvzPLzsD
MSzbnuVWl59dR1USxVqluRY51qjMbIEK049lDSGb7ujZF0yjffBH6i0eU2T7KyUT
2QVe+ZKooBsWExCMtS3YyqER8+vBsu0IZMjGPx0vpYysEUvNzXImD8kbwIM8z/Zo
MlYn8DQu92BuQ++jRjmBWcLsZmkyHuMDj9PnVNijCloXW8v931rCQ0wKLqCZ0nrY
xbttZ0Bd1bU8f0xGiIdJrY4Sh9IFZ5QpSa/BSBTIvORg3lHzRXaiOUgXgZKtrT5H
RACA/VvXfPel6/6yQ4CB5qzKKgauTsH4QFj8Qd7ANUuK1BbhYzoYjfg/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvag0ikDHTV73qNHQ6TQV/O6Z/iMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqIGqriE
arFphn2v54MDSGlwQdcQDuXD75qFzmHtfse97goCtclG/QeIWFnYGUIv7Rm6l1Rb
so6GYbx0VMATRbQ2K3PWoB/a2qqa+iE7fP6bQvhu+WsOXkvyY7hW4/jHYMEYWneP
TeXlRXQEbsPXUIzKFu6DETKmiqGmzj0ccmO4vzGgv6zS0/gq9c2haHbDs1A64Uom
8kqampI+PLrrddQErKW755Zms49gsLBkGYNXY55JzRlE6JiAY6YdrnIzZrVssbpi
J8HSS5Bo7nlPRlVA3IFuYguDHWryGQzGKyOe6oXrnyL7uBgB65RuDUH+5AH7e4bu
GlZ06+GVWgnXFg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:26:25 2026 by rpki-client