Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
File: jRFmK-syV94cA0DkEu2dGZXA9f8.mft (raw, json)
Hash identifier: DBkvBdDiTESmRl4UUmUlP99qAHYOwaxXmE0a+SbVuEM=
Subject key identifier: 6F:EF:55:0F:8B:9B:5F:76:D8:02:94:B6:41:2E:0D:29:32:89:85:40
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 019F85D6B533F7A1DC0EC633F27399E3312D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:08 +0000
Manifest this update: Tue 21 Jul 2026 18:01:08 +0000
Manifest next update: Wed 22 Jul 2026 18:01:08 +0000
Files and hashes: 1: CQCzVDXazljrHIDpQoZYmXw-po0.roa (hash: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=)
2: OBPTg2h93nMRgYHf_TenncbSH3w.roa (hash: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=)
3: jRFmK-syV94cA0DkEu2dGZXA9f8.crl (hash: C2bAACJA3QSZKlTqmhBRNeuPpwV7hAuQxA6sKULOqNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:b5:33:f7:a1:dc:0e:c6:33:f2:73:99:e3:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Jul 21 18:01:08 2026 GMT
Not After : Jul 22 18:01:08 2026 GMT
Subject: CN=6fef550f8b9b5f76d80294b6412e0d2932898540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:41:de:1a:4a:24:ad:56:54:4f:f0:fb:48:
5d:f7:90:e1:3f:5f:da:a5:8f:37:8e:54:9c:93:df:
8e:cc:77:91:5f:95:27:b6:29:47:f1:0a:cb:55:17:
5f:2f:37:f0:ba:44:ac:c6:2a:55:37:fb:70:8a:7d:
01:2d:7c:af:b0:45:f6:de:8b:55:35:a6:56:87:57:
5d:19:9c:a7:a3:b2:cd:bf:d4:5b:d7:df:f5:e4:f2:
cf:54:c9:8e:7a:1b:df:fa:e7:71:02:a2:52:37:41:
2d:c4:2f:1e:13:c3:d1:f8:0d:26:f4:7d:dc:1c:f9:
1e:f7:e4:d7:97:e3:f8:d6:2b:b5:3e:e1:54:80:e8:
ee:71:6f:a8:92:66:66:f2:e5:3c:be:2c:f9:93:4d:
a1:4a:92:ac:27:d0:7f:19:1a:95:14:c6:29:f5:db:
62:88:70:2c:84:18:62:73:db:9e:d0:0c:b1:db:ff:
62:4e:50:30:3e:cc:f1:d9:35:e2:b3:b0:0f:96:78:
0e:64:19:e9:4f:e1:9b:39:f0:8c:e3:ab:2f:c5:e1:
32:4a:fe:52:68:a2:1a:ba:c5:7f:d8:36:db:8c:06:
8f:75:65:07:06:47:96:e9:e5:8f:d5:72:db:f8:75:
94:7f:53:8d:08:20:fc:00:6e:dc:18:20:bd:dd:20:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:55:0F:8B:9B:5F:76:D8:02:94:B6:41:2E:0D:29:32:89:85:40
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:42:3d:33:b5:ce:fa:e9:b5:41:93:10:36:e4:48:81:7c:
bb:fe:fb:4f:6a:bf:bd:b4:a0:19:5a:00:2b:23:76:17:43:94:
4a:cd:be:c8:81:ed:fc:b5:56:77:84:04:81:dd:c7:85:4e:e1:
86:dc:e1:48:56:51:69:50:ee:94:d3:ae:46:68:e7:03:5a:ed:
bc:ce:80:70:a2:25:46:b2:e4:c1:e9:92:1d:ad:ff:b9:02:94:
05:9c:d5:10:c5:f4:88:6a:b2:b6:79:68:ca:88:c3:0e:6d:70:
65:6c:42:9c:f9:ca:6b:d7:14:ef:e6:92:14:6d:48:c0:33:f3:
76:b9:02:93:ac:dc:bf:5b:62:09:d0:c9:eb:66:25:da:0f:9a:
78:dc:a2:a0:b4:3d:23:bb:d9:07:1e:9e:26:34:01:e1:47:22:
61:96:e6:2c:01:08:11:ef:a3:5e:4e:12:f8:2f:ad:77:d4:44:
59:a0:20:ca:02:4d:67:12:a3:86:f8:21:74:3d:25:56:69:4c:
d3:aa:57:a8:e2:44:5c:77:78:05:98:4b:80:14:d2:56:e6:96:
4a:3e:4a:cc:ff:67:01:1c:b5:95:a3:3a:f9:68:0d:41:83:bd:
a6:cc:94:43:ac:6c:03:94:82:9d:7a:b7:36:cc:ba:3a:04:f9:
27:04:b9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1rUz96HcDsYz8nOZ4zEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTE2NjJiZWIzMjU3ZGUxYzAzNDBlNDEyZWQ5ZDE5OTVj
MGY1ZmYwHhcNMjYwNzIxMTgwMTA4WhcNMjYwNzIyMTgwMTA4WjAzMTEwLwYDVQQD
Eyg2ZmVmNTUwZjhiOWI1Zjc2ZDgwMjk0YjY0MTJlMGQyOTMyODk4NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zRB3hpKJK1WVE/w+0hd95DhP1/a
pY83jlSck9+OzHeRX5UntilH8QrLVRdfLzfwukSsxipVN/twin0BLXyvsEX23otV
NaZWh1ddGZyno7LNv9Rb19/15PLPVMmOehvf+udxAqJSN0EtxC8eE8PR+A0m9H3c
HPke9+TXl+P41iu1PuFUgOjucW+okmZm8uU8viz5k02hSpKsJ9B/GRqVFMYp9dti
iHAshBhic9ue0Ayx2/9iTlAwPszx2TXis7APlngOZBnpT+GbOfCM46svxeEySv5S
aKIausV/2DbbjAaPdWUHBkeW6eWP1XLb+HWUf1ONCCD8AG7cGCC93SDf+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/vVQ+Lm1922AKUtkEuDSkyiYVAMB8GA1UdIwQY
MBaAFI0RZivrMlfeHANA5BLtnRmVwPX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJGbUstc3lWOTRjQTBEa0V1MmRHWlhBOWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEvalJGbUstc3lWOTRjQTBEa0V1MmRHWlhBOWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEvalJGbUstc3lWOTRjQTBEa0V1MmRHWlhBOWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3pCPTO1
zvrptUGTEDbkSIF8u/77T2q/vbSgGVoAKyN2F0OUSs2+yIHt/LVWd4QEgd3HhU7h
htzhSFZRaVDulNOuRmjnA1rtvM6AcKIlRrLkwemSHa3/uQKUBZzVEMX0iGqytnlo
yojDDm1wZWxCnPnKa9cU7+aSFG1IwDPzdrkCk6zcv1tiCdDJ62Yl2g+aeNyioLQ9
I7vZBx6eJjQB4UciYZbmLAEIEe+jXk4S+C+td9REWaAgygJNZxKjhvghdD0lVmlM
06pXqOJEXHd4BZhLgBTSVuaWSj5KzP9nARy1laM6+WgNQYO9psyUQ6xsA5SCnXq3
Nsy6OgT5JwS5wg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:51 2026 by rpki-client