Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: K0SUeER/U+8kCkqPgK+vYf/vdt1KV3wv2UjBSuHfmlw=
Subject key identifier: 11:CD:58:39:92:E2:B6:CE:01:AC:39:EA:3F:C4:07:CC:51:08:4F:7F
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019F38974F02900307079AC32FCE16AFBE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1999
Signing time: Mon 06 Jul 2026 18:01:07 +0000
Manifest this update: Mon 06 Jul 2026 18:01:07 +0000
Manifest next update: Tue 07 Jul 2026 18:01:07 +0000
Files and hashes: 1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
3: lL17tuBDoLvw-pd1vpQwvUHTCM8.roa (hash: minPejjWJuMMJn1mp0vvXo5sojqAMoVldEghqvBYb48=)
4: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: mT/u57N1cfwRvjJsws5clyccSFkmZVK2o2yqO4ts34Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:97:4f:02:90:03:07:07:9a:c3:2f:ce:16:af:be:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jul 6 18:01:07 2026 GMT
Not After : Jul 7 18:01:07 2026 GMT
Subject: CN=11cd583992e2b6ce01ac39ea3fc407cc51084f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:29:57:9c:b8:10:7e:9f:3c:36:bd:7b:43:
b2:43:a2:c3:a1:89:30:12:ee:86:a8:8a:da:c1:ea:
0c:81:19:8b:91:6e:db:90:30:08:f6:0f:35:7e:74:
c9:9b:07:bb:c5:b7:d1:31:e7:91:d1:41:55:fd:ff:
1f:96:1f:c0:34:d7:9c:4b:aa:3a:9a:33:fd:5f:ac:
1a:ce:d0:34:80:7a:12:cc:96:41:54:cc:e9:c0:19:
6b:ea:20:bd:53:d8:b3:68:7b:5e:11:ca:4d:22:de:
f9:68:98:30:37:e9:46:84:9d:09:1d:d0:f6:35:65:
38:5c:1d:ee:11:42:3d:c2:10:fc:16:49:23:17:cf:
66:6d:64:9b:41:8b:13:e0:7e:47:9a:ac:90:78:7c:
e8:c7:98:b0:c7:02:b6:28:39:da:98:5f:e9:ff:8c:
42:54:f2:6f:dc:e3:e3:43:64:22:6b:6a:3e:48:41:
fe:b9:86:fb:c3:2e:f9:26:9f:81:a7:2b:52:d4:c7:
78:69:8e:a7:64:b9:33:0f:37:83:a8:a3:13:6e:03:
aa:90:2e:0a:d8:f9:c8:42:59:ef:14:c4:a1:31:b4:
bb:f0:30:d2:b4:16:0e:8e:56:cf:9e:e1:bf:52:01:
25:c7:5f:80:f3:ad:af:ff:6a:a2:54:a6:6b:ce:87:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:58:39:92:E2:B6:CE:01:AC:39:EA:3F:C4:07:CC:51:08:4F:7F
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a0:06:39:24:e2:cd:a9:1a:80:44:cb:0d:d6:10:24:12:ce:
1a:b6:cc:8e:17:11:20:41:1e:87:32:5e:a9:28:70:e6:3a:91:
06:41:f4:58:46:b6:77:10:ee:18:28:bb:41:6e:8e:2f:ef:b5:
fb:5b:30:37:0c:d6:63:50:e1:67:3c:f0:e5:6e:3c:d4:d2:59:
6d:77:a9:5b:ca:7f:aa:1d:ce:98:30:b4:9a:27:6b:70:49:56:
46:98:a0:21:c2:5f:64:71:a6:a0:24:dd:a1:bc:d9:d9:7c:81:
b1:15:27:64:5a:14:fd:b9:c0:69:ea:ec:66:f5:6f:b2:86:30:
a2:f4:c6:64:1d:f4:61:d9:b2:b5:a0:f7:32:63:26:01:48:62:
3b:b1:cf:e4:39:dc:40:3d:30:08:32:ea:8c:bb:e7:72:b0:b4:
03:89:53:0f:95:64:dd:2c:67:e6:0a:1a:21:ad:78:6b:a7:7b:
e7:97:1a:c9:66:5f:45:48:31:88:62:4d:14:9d:f4:84:a8:89:
fc:76:3e:76:96:a0:e1:3d:85:65:3e:3f:0c:39:0a:8f:71:49:
0f:ce:d0:af:83:ed:58:00:5b:dd:a7:1b:e8:59:c7:fe:8d:6e:
d0:3d:0d:b3:9a:a2:d1:a2:8b:65:c5:2e:a6:2c:da:ee:e3:ad:
ba:e1:8b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ84l08CkAMHB5rDL84Wr752MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjYwNzA2MTgwMTA3WhcNMjYwNzA3MTgwMTA3WjAzMTEwLwYDVQQD
EygxMWNkNTgzOTkyZTJiNmNlMDFhYzM5ZWEzZmM0MDdjYzUxMDg0ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzEpV5y4EH6fPDa9e0OyQ6LDoYkw
Eu6GqIraweoMgRmLkW7bkDAI9g81fnTJmwe7xbfRMeeR0UFV/f8flh/ANNecS6o6
mjP9X6waztA0gHoSzJZBVMzpwBlr6iC9U9izaHteEcpNIt75aJgwN+lGhJ0JHdD2
NWU4XB3uEUI9whD8FkkjF89mbWSbQYsT4H5HmqyQeHzox5iwxwK2KDnamF/p/4xC
VPJv3OPjQ2Qia2o+SEH+uYb7wy75Jp+BpytS1Md4aY6nZLkzDzeDqKMTbgOqkC4K
2PnIQlnvFMShMbS78DDStBYOjlbPnuG/UgElx1+A862v/2qiVKZrzocNAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHNWDmS4rbOAaw56j/EB8xRCE9/MB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqAGOSTi
zakagETLDdYQJBLOGrbMjhcRIEEehzJeqShw5jqRBkH0WEa2dxDuGCi7QW6OL++1
+1swNwzWY1DhZzzw5W481NJZbXepW8p/qh3OmDC0midrcElWRpigIcJfZHGmoCTd
obzZ2XyBsRUnZFoU/bnAaersZvVvsoYwovTGZB30YdmytaD3MmMmAUhiO7HP5Dnc
QD0wCDLqjLvncrC0A4lTD5Vk3Sxn5goaIa14a6d755cayWZfRUgxiGJNFJ30hKiJ
/HY+dpag4T2FZT4/DDkKj3FJD87Qr4PtWABb3acb6FnH/o1u0D0Ns5qi0aKLZcUu
piza7uOtuuGLAQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:05 2026 by rpki-client