Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: 7g8OrGIBuqDE+eVypeOSiWGU+HRXjaDQ//SwQZDi0p8=
Subject key identifier: B4:E3:8F:89:0F:2A:F0:E8:39:9D:2B:90:ED:3C:5D:F2:70:89:D0:A6
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019FC3358FBC5B40675F1A8470CE33ACFFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 19B8
Signing time: Sun 02 Aug 2026 16:01:35 +0000
Manifest this update: Sun 02 Aug 2026 16:01:35 +0000
Manifest next update: Mon 03 Aug 2026 16:01:35 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: MTQFelf4/LUqvWgkAow/l/hWbBD3fZWWvtzHb+UoDq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:35:8f:bc:5b:40:67:5f:1a:84:70:ce:33:ac:ff:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Aug 2 16:01:35 2026 GMT
Not After : Aug 3 16:01:35 2026 GMT
Subject: CN=b4e38f890f2af0e8399d2b90ed3c5df27089d0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:28:3b:bf:f2:59:e1:97:9a:7e:03:6e:d4:
05:bd:b1:b1:64:3d:5c:a1:85:ee:36:79:d8:1f:33:
6d:2a:de:50:70:00:7a:10:08:00:eb:a2:8b:c1:18:
bb:41:e5:3d:12:1a:ec:a8:99:d4:79:23:7c:32:b5:
f5:ea:38:62:6f:42:96:ed:ef:76:99:1f:aa:8b:d8:
67:e3:10:18:dd:91:7e:8e:ef:84:05:8b:ed:7a:d6:
3b:48:68:44:a1:1c:19:66:eb:ba:7b:c5:3c:4c:d7:
9a:62:52:a7:c6:4b:0a:aa:f8:05:a2:5a:87:78:76:
ac:9f:62:6e:a6:5e:e6:af:0b:e9:75:1a:9a:a3:39:
c4:ff:a2:df:99:1b:61:77:ce:1f:02:be:e6:66:49:
85:77:7d:16:65:79:e8:58:09:6f:74:97:38:b1:27:
3b:2b:65:5f:62:af:dd:9d:75:ca:87:02:76:88:21:
fc:d2:9b:15:91:ae:6a:d8:35:4e:33:35:d0:72:28:
52:a6:9d:d8:4e:fc:c1:1d:0f:63:7a:fe:4f:82:04:
5c:83:99:e9:55:77:61:b0:fe:6f:65:5b:e7:db:5e:
91:c8:9e:d0:87:26:79:e9:f5:20:93:04:ff:1b:d0:
38:a0:b5:f7:5e:20:3f:a2:51:3b:87:f3:d9:8c:f2:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:8F:89:0F:2A:F0:E8:39:9D:2B:90:ED:3C:5D:F2:70:89:D0:A6
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:18:64:51:4e:d4:c9:5f:5f:a7:eb:e4:39:37:68:5a:38:72:
72:2e:50:68:87:75:06:8d:41:04:24:eb:a3:fb:db:92:b6:28:
60:73:6e:d0:a9:b7:48:85:59:14:59:24:62:f7:11:aa:68:be:
1d:2a:cf:96:78:06:49:da:f9:21:3f:c1:3b:ad:6e:e4:fd:3f:
7f:f5:b9:29:fd:ee:6c:60:96:f3:3a:35:00:28:8b:ef:01:3d:
c7:71:04:6b:62:00:a4:fa:07:b9:aa:10:b5:48:8f:32:2f:0e:
c9:aa:cb:1c:aa:30:59:1e:24:f7:87:d3:fe:a4:97:06:e6:a7:
5a:f2:1c:db:a1:95:9e:2a:aa:00:a8:07:ed:29:96:f6:c8:7e:
fe:4f:98:15:23:a5:ff:32:66:0f:95:a3:5d:ea:fd:65:a0:5c:
55:4e:f0:64:58:c1:35:01:41:fc:33:12:89:90:89:d8:96:d5:
a6:c0:56:05:60:8f:15:c9:e7:a7:40:45:6e:67:5e:ac:f6:0d:
eb:a9:86:ee:38:0f:22:d2:4b:6d:c2:31:fb:e2:a1:f7:d8:8c:
70:ab:fe:08:9e:8b:c7:b8:b6:7b:79:7f:5f:0b:0d:23:ad:85:
6e:d8:8c:de:28:9c:30:11:c6:18:67:8b:2e:83:1e:d8:4b:bc:
54:50:e8:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/DNY+8W0BnXxqEcM4zrP+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjYwODAyMTYwMTM1WhcNMjYwODAzMTYwMTM1WjAzMTEwLwYDVQQD
EyhiNGUzOGY4OTBmMmFmMGU4Mzk5ZDJiOTBlZDNjNWRmMjcwODlkMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKIoO7/yWeGXmn4DbtQFvbGxZD1c
oYXuNnnYHzNtKt5QcAB6EAgA66KLwRi7QeU9EhrsqJnUeSN8MrX16jhib0KW7e92
mR+qi9hn4xAY3ZF+ju+EBYvtetY7SGhEoRwZZuu6e8U8TNeaYlKnxksKqvgFolqH
eHasn2Jupl7mrwvpdRqaoznE/6LfmRthd84fAr7mZkmFd30WZXnoWAlvdJc4sSc7
K2VfYq/dnXXKhwJ2iCH80psVka5q2DVOMzXQcihSpp3YTvzBHQ9jev5PggRcg5np
VXdhsP5vZVvn216RyJ7QhyZ56fUgkwT/G9A4oLX3XiA/olE7h/PZjPLWvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTjj4kPKvDoOZ0rkO08XfJwidCmMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRhkUU7U
yV9fp+vkOTdoWjhyci5QaId1Bo1BBCTro/vbkrYoYHNu0Km3SIVZFFkkYvcRqmi+
HSrPlngGSdr5IT/BO61u5P0/f/W5Kf3ubGCW8zo1ACiL7wE9x3EEa2IApPoHuaoQ
tUiPMi8OyarLHKowWR4k94fT/qSXBuanWvIc26GVniqqAKgH7SmW9sh+/k+YFSOl
/zJmD5WjXer9ZaBcVU7wZFjBNQFB/DMSiZCJ2JbVpsBWBWCPFcnnp0BFbmderPYN
66mG7jgPItJLbcIx++Kh99iMcKv+CJ6Lx7i2e3l/XwsNI62FbtiM3iicMBHGGGeL
LoMe2Eu8VFDoeg==
-----END CERTIFICATE-----
Generated at Sun Aug 2 22:53:26 2026 by rpki-client