Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: TDltGtea72adezOjWnwDxBCet7tscTGQJF/KKcSwb4A=
Subject key identifier: 7D:D0:4A:06:0B:D1:D0:69:32:4C:5A:1F:52:1C:38:77:C6:65:3C:A5
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019FA00449FC3A9CAA668C601F5544CA2EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 19D7
Signing time: Sun 26 Jul 2026 20:01:03 +0000
Manifest this update: Sun 26 Jul 2026 20:01:03 +0000
Manifest next update: Mon 27 Jul 2026 20:01:03 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: vW3Y7mTmtPrABI/e3/giaPDfSIDJGQvpEa8HpflOyNI=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:49:fc:3a:9c:aa:66:8c:60:1f:55:44:ca:2e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jul 26 20:01:03 2026 GMT
Not After : Jul 27 20:01:03 2026 GMT
Subject: CN=7dd04a060bd1d069324c5a1f521c3877c6653ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:7d:16:e9:bd:df:de:57:9b:99:75:ed:be:
c3:b6:a5:51:5c:d6:4e:52:4e:85:0a:8d:ee:7d:28:
54:83:ae:b5:78:ec:f4:96:f3:e6:69:c7:3b:55:11:
76:0b:25:38:f1:88:0d:2f:27:22:51:bb:0a:b9:ba:
d8:74:78:13:2b:3d:06:98:9c:0d:d7:9e:1f:55:3e:
dc:d8:c6:83:f0:ae:53:2a:6b:54:ec:62:b0:46:7d:
c8:d5:cb:18:51:c1:a8:09:c5:43:ec:58:09:cc:2c:
ad:e5:e4:db:d1:9a:ef:e7:c9:8c:f7:4b:c4:45:80:
01:64:13:26:30:24:36:25:26:f7:5b:11:52:e2:df:
62:17:e6:a4:0f:32:d0:d1:9e:da:91:86:c9:78:d9:
d3:51:9a:ce:68:b3:6b:e8:96:3a:8e:0e:67:44:09:
9b:5b:39:af:00:df:fb:a1:ee:94:af:ce:98:41:01:
32:71:55:f0:b9:cc:78:4c:0f:65:29:f0:ad:d8:53:
a2:15:ae:d2:a3:a4:61:0b:1d:09:68:9d:8c:60:25:
f9:21:87:ec:7c:b9:3a:05:95:22:14:92:b6:f0:55:
1b:38:f4:d0:93:1f:89:03:f3:0d:d4:a3:2d:11:d9:
e6:2d:4c:85:8f:ca:22:18:a5:07:5b:7a:f0:c7:27:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:4A:06:0B:D1:D0:69:32:4C:5A:1F:52:1C:38:77:C6:65:3C:A5
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:50:84:b7:10:cf:e6:65:9f:39:fb:e3:fe:9f:29:60:98:
45:49:86:c6:b1:68:f3:35:0e:a6:6b:d1:1b:ca:0d:2e:23:09:
fb:ed:a9:06:35:78:8f:94:37:b9:bf:c0:f0:66:ae:69:7d:85:
cd:47:2e:02:39:e1:96:ba:75:2b:34:88:5b:8c:b4:a5:28:c7:
a5:49:c9:d9:d8:a8:7f:ee:df:b8:aa:76:b8:26:39:5f:9f:8b:
15:51:51:c0:e0:b3:9e:8c:d0:18:09:5b:b4:5f:ff:f7:a3:65:
26:c7:14:9a:15:3b:c5:e6:17:f7:bc:4c:5e:68:b5:e3:d1:4a:
16:43:8e:94:d5:4f:1e:54:b3:6b:ba:29:22:e0:37:b6:1d:29:
24:79:8c:3d:b6:9d:8e:8a:93:82:3a:e6:d5:e9:38:8a:87:d6:
b0:ed:75:ca:94:93:c5:e0:33:33:17:8c:68:c1:8f:fa:ba:cc:
15:08:5b:27:9d:16:a2:c0:a8:68:28:c2:e2:bc:14:e7:62:4f:
75:8a:a1:25:30:6d:ee:58:00:aa:4f:fd:2b:20:52:95:68:2a:
3a:d7:4a:5e:85:a6:c8:02:54:83:c3:e9:15:b9:7a:df:de:61:
51:03:42:f7:c6:a2:e0:a0:ab:c9:66:e9:5a:84:41:e1:10:61:
85:a7:b1:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gBEn8OpyqZoxgH1VEyi6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm
OTQyZTkwHhcNMjYwNzI2MjAwMTAzWhcNMjYwNzI3MjAwMTAzWjAzMTEwLwYDVQQD
Eyg3ZGQwNGEwNjBiZDFkMDY5MzI0YzVhMWY1MjFjMzg3N2M2NjUzY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9x9Fum9395Xm5l17b7DtqVRXNZO
Uk6FCo3ufShUg661eOz0lvPmacc7VRF2CyU48YgNLyciUbsKubrYdHgTKz0GmJwN
154fVT7c2MaD8K5TKmtU7GKwRn3I1csYUcGoCcVD7FgJzCyt5eTb0Zrv58mM90vE
RYABZBMmMCQ2JSb3WxFS4t9iF+akDzLQ0Z7akYbJeNnTUZrOaLNr6JY6jg5nRAmb
WzmvAN/7oe6Ur86YQQEycVXwucx4TA9lKfCt2FOiFa7So6RhCx0JaJ2MYCX5IYfs
fLk6BZUiFJK28FUbOPTQkx+JA/MN1KMtEdnmLUyFj8oiGKUHW3rwxyc+wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3QSgYL0dBpMkxaH1IcOHfGZTylMB8GA1UdIwQY
MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt
M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj
LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDhQhLcQ
z+Zlnzn74/6fKWCYRUmGxrFo8zUOpmvRG8oNLiMJ++2pBjV4j5Q3ub/A8GauaX2F
zUcuAjnhlrp1KzSIW4y0pSjHpUnJ2diof+7fuKp2uCY5X5+LFVFRwOCznozQGAlb
tF//96NlJscUmhU7xeYX97xMXmi149FKFkOOlNVPHlSza7opIuA3th0pJHmMPbad
joqTgjrm1ek4iofWsO11ypSTxeAzMxeMaMGP+rrMFQhbJ50WosCoaCjC4rwU52JP
dYqhJTBt7lgAqk/9KyBSlWgqOtdKXoWmyAJUg8PpFbl6395hUQNC98ai4KCryWbp
WoRB4RBhhaexQQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:36 2026 by rpki-client