Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: vqpbrfrV4q4pFtcjihYX6ROinBjSFR+Sz0tpXy1Hnks=
Subject key identifier: 73:90:3E:AE:8E:32:99:1A:8F:25:EB:C8:E5:C0:4C:9E:84:A9:EC:02
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019F93C91ED84B93DC1E15790505C95BC280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 032D
Signing time: Fri 24 Jul 2026 11:00:59 +0000
Manifest this update: Fri 24 Jul 2026 11:00:59 +0000
Manifest next update: Sat 25 Jul 2026 11:00:59 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: QEY5JaIljDP2/vqdegmWlhOXvg7q1cGuOKb9A2vshG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:1e:d8:4b:93:dc:1e:15:79:05:05:c9:5b:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Jul 24 11:00:59 2026 GMT
Not After : Jul 25 11:00:59 2026 GMT
Subject: CN=73903eae8e32991a8f25ebc8e5c04c9e84a9ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:f1:94:e8:2f:91:9d:8c:d0:16:4b:74:48:
b2:77:8e:fb:c6:c2:e5:66:9c:00:89:3e:a8:19:32:
71:d9:31:3e:d1:73:49:04:dd:9a:47:0d:68:d6:6f:
bd:3a:08:dd:25:a8:b6:8f:75:5c:4a:f1:79:6d:85:
ae:6c:63:97:45:75:ed:b9:6e:a5:70:c1:15:43:ba:
98:f9:0d:85:e2:6a:6c:1c:26:2f:d5:f1:2f:42:da:
01:4d:ce:05:54:6b:56:c9:77:a4:65:e0:9a:8f:6f:
a4:9c:93:5c:0e:c2:d8:2c:57:64:cd:c7:92:98:0d:
9c:ef:f5:0b:87:e3:c0:b4:9e:ab:ea:11:f8:0c:eb:
57:5d:d6:e5:29:80:e2:22:25:c5:ec:eb:1f:4d:2f:
e4:b7:20:3e:6b:b9:4a:3d:10:c8:e7:d0:e8:8b:53:
d4:40:3d:fb:6a:f5:6f:c8:8c:df:fe:b2:d9:a6:37:
b2:86:df:3a:6c:57:da:fd:f9:14:82:d8:ef:4e:1c:
8a:cd:ce:60:f7:d0:6d:df:18:b5:99:e0:10:3d:1c:
41:b2:ab:a7:2e:1a:ad:01:b6:89:6a:b3:7a:e7:4f:
a1:99:0f:36:56:80:e8:59:79:7d:30:1e:36:8f:ad:
bd:a3:f4:a0:ce:bc:67:80:97:94:a3:d3:4b:bd:34:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:3E:AE:8E:32:99:1A:8F:25:EB:C8:E5:C0:4C:9E:84:A9:EC:02
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ec:b1:ca:46:fd:9d:e5:7d:1d:30:5e:6b:df:29:bb:c0:8b:
ed:bc:9a:24:d5:c4:4f:0c:f6:04:72:b9:48:fe:1b:eb:0b:55:
65:35:f4:34:13:5f:1c:d8:97:5f:02:7b:50:e2:9e:1d:d7:0b:
fe:e6:63:b1:e5:a9:56:95:ee:2f:4d:fc:c7:7d:38:27:4b:93:
70:18:e6:af:65:3e:9b:00:d3:35:ce:f5:4e:c9:0c:09:a9:f9:
95:4c:84:25:03:b1:a0:90:7f:aa:d4:34:46:e3:df:e6:60:46:
3e:18:94:07:7f:95:38:f4:ec:5a:01:5d:f7:11:f7:66:6a:91:
ba:80:11:53:94:20:90:98:70:ec:b8:4c:13:51:92:13:02:fa:
31:5d:cf:02:44:2d:9e:c8:d2:96:78:c1:12:d8:8b:45:0b:f8:
34:f6:42:a1:ad:58:25:49:3c:26:7a:ee:a0:c5:3f:c4:e9:a4:
4b:f9:d9:1f:e5:fe:57:54:45:6b:5c:e3:f1:97:fc:68:e3:1c:
2b:6f:69:a2:dd:ed:0d:8a:51:21:dd:34:99:02:6f:57:5a:12:
f2:f7:b6:98:ba:48:dc:1d:72:31:48:b2:25:4f:32:94:96:cb:
53:eb:a4:b5:e1:47:09:29:8f:3a:9e:32:d4:fc:e7:44:e7:1e:
92:3b:38:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyR7YS5PcHhV5BQXJW8KAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl
M2E2OGMwHhcNMjYwNzI0MTEwMDU5WhcNMjYwNzI1MTEwMDU5WjAzMTEwLwYDVQQD
Eyg3MzkwM2VhZThlMzI5OTFhOGYyNWViYzhlNWMwNGM5ZTg0YTllYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q3xlOgvkZ2M0BZLdEiyd477xsLl
ZpwAiT6oGTJx2TE+0XNJBN2aRw1o1m+9OgjdJai2j3VcSvF5bYWubGOXRXXtuW6l
cMEVQ7qY+Q2F4mpsHCYv1fEvQtoBTc4FVGtWyXekZeCaj2+knJNcDsLYLFdkzceS
mA2c7/ULh+PAtJ6r6hH4DOtXXdblKYDiIiXF7OsfTS/ktyA+a7lKPRDI59Doi1PU
QD37avVvyIzf/rLZpjeyht86bFfa/fkUgtjvThyKzc5g99Bt3xi1meAQPRxBsqun
LhqtAbaJarN650+hmQ82VoDoWXl9MB42j629o/SgzrxngJeUo9NLvTQ7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOQPq6OMpkajyXryOXATJ6EqewCMB8GA1UdIwQY
MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt
MjQyMDFjMjUyOThmLzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm
LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuyxykb9
neV9HTBea98pu8CL7byaJNXETwz2BHK5SP4b6wtVZTX0NBNfHNiXXwJ7UOKeHdcL
/uZjseWpVpXuL038x304J0uTcBjmr2U+mwDTNc71TskMCan5lUyEJQOxoJB/qtQ0
RuPf5mBGPhiUB3+VOPTsWgFd9xH3ZmqRuoARU5QgkJhw7LhME1GSEwL6MV3PAkQt
nsjSlnjBEtiLRQv4NPZCoa1YJUk8JnruoMU/xOmkS/nZH+X+V1RFa1zj8Zf8aOMc
K29pot3tDYpRId00mQJvV1oS8ve2mLpI3B1yMUiyJU8ylJbLU+ukteFHCSmPOp4y
1PznROcekjs4vQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:46 2026 by rpki-client