Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: Yfz2LXXvju7XrUgnBqWL/s4O/Kj4Y9SOAgfMxXxjxaI=
Subject key identifier: F9:FE:3D:35:90:EF:22:D9:0B:0B:7B:3A:4E:77:28:9F:81:95:DB:38
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019F90FF47746CBDFAD3ED36223ED520FBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 07BB
Signing time: Thu 23 Jul 2026 22:01:16 +0000
Manifest this update: Thu 23 Jul 2026 22:01:16 +0000
Manifest next update: Fri 24 Jul 2026 22:01:16 +0000
Files and hashes: 1: KV9d7BSlB2bKlwJY62KIXsG4Wz0.roa (hash: R5kvK926QqdFk8i2+ipQZcd5Ih9FO34LMPFzB8nRWl4=)
2: nM83HlJMcq3XGr88tOJ2Jgml18Q.roa (hash: iKLSCb2eHBRO55h1ctPBOi2BUx1jjcn6kLFniadlimw=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: iPMEwuyb+xLh+D5Om2psbXvltvU919cc9/3uqTdoTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:47:74:6c:bd:fa:d3:ed:36:22:3e:d5:20:fb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jul 23 22:01:16 2026 GMT
Not After : Jul 24 22:01:16 2026 GMT
Subject: CN=f9fe3d3590ef22d90b0b7b3a4e77289f8195db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:64:41:84:21:7f:2b:c2:af:3d:79:00:f1:
df:06:85:04:8a:df:0d:89:28:42:08:58:83:a3:f4:
ed:2e:63:64:31:87:d1:60:ef:1f:ef:66:1d:c0:5d:
00:50:e0:bc:40:c5:25:0f:c3:75:ae:4f:77:22:a9:
d1:f7:d7:44:d2:58:7d:7e:74:30:00:1a:49:ac:d5:
b9:b5:09:e4:53:a0:9f:82:05:3f:af:6b:7f:7f:42:
da:bc:69:fc:39:71:39:9d:ac:97:0c:cc:21:25:40:
9a:e4:2a:f4:f6:16:81:4b:06:c5:e0:6d:3b:61:27:
f9:da:a1:fe:2b:56:38:20:b2:a5:0e:d4:6e:22:a1:
1e:97:fb:a5:68:54:d1:c3:81:97:71:87:20:a7:cb:
e6:4a:9a:ce:08:7e:71:3d:42:7d:79:8a:ee:d0:06:
c0:54:03:72:20:a3:58:00:29:85:34:ee:2f:c9:95:
23:16:d6:13:31:27:8c:39:b9:8b:e1:17:db:e3:18:
89:14:d2:a3:a1:3c:be:7d:3f:ad:e5:26:e6:e2:7d:
09:15:ef:18:bb:a8:2f:7b:6e:ea:99:19:1d:cf:dd:
3c:fc:1d:a0:ec:f0:ef:85:62:3f:11:77:39:2e:37:
a8:e6:1b:76:3b:91:43:46:f4:5b:f8:39:55:22:e6:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:3D:35:90:EF:22:D9:0B:0B:7B:3A:4E:77:28:9F:81:95:DB:38
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0b:81:c0:9b:3a:24:e2:d5:8d:51:a9:34:ae:c2:6f:b2:af:
7d:cf:bb:af:74:a4:81:24:d0:4c:11:07:5d:2f:ce:11:8e:5b:
a8:d6:32:3a:f7:96:94:9f:1b:86:fc:98:1f:29:bd:e2:4d:fe:
16:e0:ef:d2:1d:18:2f:6f:3a:28:88:ca:2c:7a:08:60:41:d7:
5f:64:ae:75:18:8e:84:85:cf:4d:24:32:d9:45:49:2f:fa:ac:
d2:b0:df:4c:49:78:02:c2:56:f0:6f:83:d9:d2:d8:cf:6b:04:
02:3b:37:c5:7b:a9:b6:25:6b:a2:f4:a7:63:29:c4:ec:26:4c:
38:69:b6:b8:78:9f:8e:9d:a3:c1:20:95:2f:27:62:10:96:93:
fa:fb:3c:3e:64:65:da:f2:ef:43:e3:44:36:4a:1b:29:ba:9b:
7a:1d:6a:be:3c:3d:c0:52:86:76:f7:b5:02:ee:2c:34:5b:6a:
1f:c4:f1:a8:98:5a:53:3c:1e:0c:9b:f9:88:09:36:6c:e6:7b:
74:b1:cd:9a:40:22:e4:0d:4f:95:b8:80:28:b6:5f:c4:11:3f:
dd:ab:fd:a5:01:3e:80:23:0f:ba:9c:2b:7f:9e:5c:7f:e9:d0:
78:d2:16:54:92:57:55:d9:df:a2:ab:cd:30:6f:79:4d:64:e4:
23:05:8a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/0d0bL360+02Ij7VIPvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjYwNzIzMjIwMTE2WhcNMjYwNzI0MjIwMTE2WjAzMTEwLwYDVQQD
EyhmOWZlM2QzNTkwZWYyMmQ5MGIwYjdiM2E0ZTc3Mjg5ZjgxOTVkYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo69kQYQhfyvCrz15APHfBoUEit8N
iShCCFiDo/TtLmNkMYfRYO8f72YdwF0AUOC8QMUlD8N1rk93IqnR99dE0lh9fnQw
ABpJrNW5tQnkU6CfggU/r2t/f0LavGn8OXE5nayXDMwhJUCa5Cr09haBSwbF4G07
YSf52qH+K1Y4ILKlDtRuIqEel/ulaFTRw4GXcYcgp8vmSprOCH5xPUJ9eYru0AbA
VANyIKNYACmFNO4vyZUjFtYTMSeMObmL4Rfb4xiJFNKjoTy+fT+t5Sbm4n0JFe8Y
u6gve27qmRkdz908/B2g7PDvhWI/EXc5Ljeo5ht2O5FDRvRb+DlVIuazWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn+PTWQ7yLZCwt7Ok53KJ+Blds4MB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAuBwJs6
JOLVjVGpNK7Cb7Kvfc+7r3SkgSTQTBEHXS/OEY5bqNYyOveWlJ8bhvyYHym94k3+
FuDv0h0YL286KIjKLHoIYEHXX2SudRiOhIXPTSQy2UVJL/qs0rDfTEl4AsJW8G+D
2dLYz2sEAjs3xXuptiVrovSnYynE7CZMOGm2uHifjp2jwSCVLydiEJaT+vs8PmRl
2vLvQ+NENkobKbqbeh1qvjw9wFKGdve1Au4sNFtqH8TxqJhaUzweDJv5iAk2bOZ7
dLHNmkAi5A1PlbiAKLZfxBE/3av9pQE+gCMPupwrf55cf+nQeNIWVJJXVdnfoqvN
MG95TWTkIwWKzg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:51:48 2026 by rpki-client