Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: qGcT5XMYpXxyw0QnjdRiFvKbvl/4GuflyzxTrLXdW7w=
Subject key identifier: 0F:E4:70:C4:06:C0:13:D2:2B:74:20:C1:15:BB:87:75:DF:02:D2:32
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019F927F13F3071F4ECB46A7628E15ADA6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:29 +0000
Manifest this update: Fri 24 Jul 2026 05:00:29 +0000
Manifest next update: Sat 25 Jul 2026 05:00:29 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: 2q2JP+LGstvQoxcjyS8RkC5edjRjKqxdXlbkALkhQ/8=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:13:f3:07:1f:4e:cb:46:a7:62:8e:15:ad:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Jul 24 05:00:29 2026 GMT
Not After : Jul 25 05:00:29 2026 GMT
Subject: CN=0fe470c406c013d22b7420c115bb8775df02d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:3a:b1:7c:42:22:90:51:24:cd:b2:7b:13:
9d:fc:e4:c5:45:8a:26:74:0b:f5:89:d6:0e:cb:91:
0f:88:08:90:b2:d0:84:c3:48:ed:23:ef:81:aa:1f:
49:8d:39:c4:40:46:fe:e9:7f:10:4a:98:6d:b3:ef:
f8:01:66:45:81:c6:41:f4:29:35:6b:b7:54:73:9c:
f3:c0:82:d7:ac:9a:a9:9b:e9:7b:e9:bc:a6:bb:c6:
95:80:f4:97:da:a0:fa:c9:82:42:0f:c4:de:8e:f6:
2f:e1:df:25:af:e2:9f:6b:e3:8d:31:7b:a1:88:75:
57:72:e4:f3:42:0c:d0:d7:f2:64:45:e0:66:57:69:
9a:12:e5:97:77:b2:96:6a:5f:c9:4e:ad:b0:42:8a:
b1:7e:f5:79:95:09:14:35:18:31:de:0f:bd:c5:18:
a1:52:3e:a6:8b:86:0d:b2:78:66:d1:ca:24:77:b2:
b6:de:f1:b7:93:42:00:17:ae:79:24:08:3f:e2:83:
fa:79:87:24:f1:fa:00:ae:28:66:df:b4:f2:06:3e:
3c:c7:e2:f1:87:fc:73:24:d7:a6:b9:fa:14:3e:80:
4e:55:cb:c1:5b:f6:02:79:c5:44:72:99:3e:d7:2b:
68:9f:48:71:21:9d:13:0e:f5:f1:11:53:a4:88:bc:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:70:C4:06:C0:13:D2:2B:74:20:C1:15:BB:87:75:DF:02:D2:32
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1e:b0:26:04:22:0a:24:f3:9a:67:29:9e:c0:31:2e:84:45:
e5:6e:ae:08:10:dd:df:8d:e1:93:51:51:c8:f1:9d:0d:66:e4:
6c:95:06:32:cd:f5:c5:9c:11:1d:fc:b4:ff:09:13:10:60:db:
74:92:b7:12:0e:a2:94:c2:fd:af:c9:38:92:84:a4:e4:40:ce:
e4:be:60:f9:c1:da:59:c8:b7:b8:08:be:81:c4:34:06:4e:ba:
c1:8f:25:00:e5:23:e2:1c:04:0b:e7:ed:63:1e:6d:f1:3e:3b:
90:05:d4:83:66:e2:37:66:f2:5d:7a:8b:9d:9a:8d:7b:8f:2a:
9a:9c:b9:8d:5a:95:41:d5:2c:a2:c8:d9:75:39:7e:69:52:c7:
fc:14:64:54:44:c2:63:25:f0:01:fb:97:58:b5:56:01:87:3d:
ef:29:96:f0:be:3c:02:d0:32:69:8a:bf:89:d8:3b:5c:87:6f:
b1:09:8d:33:9c:ce:e8:16:6e:6d:f5:b5:44:35:55:6c:25:04:
e9:f6:a6:63:2d:7b:ef:c1:88:ee:81:c0:7c:9a:e2:27:df:f8:
ec:34:ce:f3:d5:c2:ba:75:ec:62:bc:12:5d:94:5b:08:c6:4e:
17:b0:ac:95:63:8f:ee:75:2c:7d:9d:45:a5:e6:45:4e:cf:b8:
d5:ce:91:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfxPzBx9Oy0anYo4VrabsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjRmNDBmMzIxMTU2MWMyOWYxYmJjMzIwYmQ4N2NmYTJk
ZGQwMjkwHhcNMjYwNzI0MDUwMDI5WhcNMjYwNzI1MDUwMDI5WjAzMTEwLwYDVQQD
EygwZmU0NzBjNDA2YzAxM2QyMmI3NDIwYzExNWJiODc3NWRmMDJkMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwI6sXxCIpBRJM2yexOd/OTFRYom
dAv1idYOy5EPiAiQstCEw0jtI++Bqh9JjTnEQEb+6X8QSphts+/4AWZFgcZB9Ck1
a7dUc5zzwILXrJqpm+l76bymu8aVgPSX2qD6yYJCD8TejvYv4d8lr+Kfa+ONMXuh
iHVXcuTzQgzQ1/JkReBmV2maEuWXd7KWal/JTq2wQoqxfvV5lQkUNRgx3g+9xRih
Uj6mi4YNsnhm0cokd7K23vG3k0IAF655JAg/4oP6eYck8foArihm37TyBj48x+Lx
h/xzJNemufoUPoBOVcvBW/YCecVEcpk+1yton0hxIZ0TDvXxEVOkiLwLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/kcMQGwBPSK3QgwRW7h3XfAtIyMB8GA1UdIwQY
MBaAFP+09A8yEVYcKfG7wyC9h8+i3dApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGIt
ZDUzZjk0ZTIwN2E5LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGItZDUzZjk0ZTIwN2E5
LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuB6wJgQi
CiTzmmcpnsAxLoRF5W6uCBDd343hk1FRyPGdDWbkbJUGMs31xZwRHfy0/wkTEGDb
dJK3Eg6ilML9r8k4koSk5EDO5L5g+cHaWci3uAi+gcQ0Bk66wY8lAOUj4hwEC+ft
Yx5t8T47kAXUg2biN2byXXqLnZqNe48qmpy5jVqVQdUsosjZdTl+aVLH/BRkVETC
YyXwAfuXWLVWAYc97ymW8L48AtAyaYq/idg7XIdvsQmNM5zO6BZubfW1RDVVbCUE
6famYy1778GI7oHAfJriJ9/47DTO89XCunXsYrwSXZRbCMZOF7CslWOP7nUsfZ1F
peZFTs+41c6RPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:27 2026 by rpki-client