Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: vZ9cTq6HJAblY03biSX32KACj18gQf/qL/4ODXfyKs8=
Subject key identifier: F5:46:E4:5E:11:24:0E:70:7A:B5:28:99:7D:49:84:02:FA:A1:F9:6F
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 019F93C8B58EFE3C64E496E4D876E354DB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 15CE
Signing time: Fri 24 Jul 2026 11:00:31 +0000
Manifest this update: Fri 24 Jul 2026 11:00:31 +0000
Manifest next update: Sat 25 Jul 2026 11:00:31 +0000
Files and hashes: 1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: Ackx/QaL829IWmAWCl15aPzgb/cN+cU4nWwYxDzfAwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:b5:8e:fe:3c:64:e4:96:e4:d8:76:e3:54:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Jul 24 11:00:31 2026 GMT
Not After : Jul 25 11:00:31 2026 GMT
Subject: CN=f546e45e11240e707ab528997d498402faa1f96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:7b:db:d7:f2:02:dc:2a:af:82:2d:2e:4a:
fa:c4:02:c4:c4:4c:b4:ec:61:d1:1f:cb:4e:09:fc:
03:a0:14:af:43:c2:8b:03:6f:cd:40:1f:63:e0:a7:
a7:7a:f2:e9:4b:11:5c:32:ab:ae:da:10:03:3f:73:
8a:9a:55:c2:57:f5:cd:d1:b9:f0:1e:aa:d0:c7:11:
08:38:78:5d:6a:8c:a5:62:bc:3d:62:4d:42:8b:e3:
6e:ca:27:9f:00:a2:79:e4:31:43:a3:34:54:ea:63:
08:52:c0:6e:b0:84:79:b7:b3:37:ed:25:17:63:5c:
5a:4f:a3:56:4e:77:20:4e:a0:9e:d1:a6:73:86:8b:
ee:76:d8:38:c9:ce:4b:7f:27:58:01:76:1c:64:41:
14:85:5b:54:f0:80:eb:37:a7:20:cc:95:71:b2:04:
03:44:d6:47:39:0c:3a:a4:05:cc:8b:59:88:36:52:
25:92:1b:f3:b0:b6:1d:ab:08:ce:09:a8:59:77:f1:
5b:d3:01:8a:c4:c9:06:93:27:75:4c:5f:57:3f:45:
ef:8d:4d:bc:72:5e:d8:20:88:83:be:68:b3:f1:62:
77:8b:16:27:9d:33:7b:0f:88:34:47:b5:3d:1a:0d:
c2:42:a5:d6:ca:df:1b:1c:92:9d:75:32:1c:32:39:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:E4:5E:11:24:0E:70:7A:B5:28:99:7D:49:84:02:FA:A1:F9:6F
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:85:3c:d8:c3:89:88:03:9e:3f:3d:29:63:3e:33:96:a7:ad:
60:d1:b2:ed:07:5b:b6:6b:28:91:b6:03:15:2e:41:f5:0e:5b:
57:83:b6:4b:c3:38:d9:5f:07:1b:24:dd:67:dd:89:dd:11:03:
a4:d4:99:16:7f:d4:57:77:fe:6e:32:03:76:a6:6a:f7:65:cf:
ad:4a:6d:c1:73:92:6f:0d:b9:21:71:77:f6:97:95:82:3a:ad:
10:ce:d5:fb:ad:a3:de:e0:57:3f:6a:b6:79:a0:0c:ff:41:f8:
e0:4c:f6:d1:e0:3b:62:ca:12:71:ee:1f:70:ef:aa:66:23:d9:
fa:8f:a1:d6:8c:81:80:12:f7:d0:b8:cd:7d:77:c4:b6:74:cf:
e2:0b:ac:95:77:13:38:1b:1f:b6:1f:d0:86:2e:1c:96:bf:b7:
9a:4d:3e:22:f4:86:df:19:fa:8b:b4:5a:b5:29:57:24:57:29:
0c:92:87:d3:bd:a9:a1:3b:17:54:5f:88:c5:50:18:d8:38:cd:
01:f1:b5:7f:52:09:00:77:4b:0c:54:33:c9:e2:aa:ec:2e:2f:
5e:5d:b3:41:72:1e:bb:95:22:36:b5:2f:98:0d:ae:d9:4d:de:
4d:da:ab:40:8d:2c:7b:3a:37:9d:39:1b:89:0b:cd:f7:55:7f:
f1:b6:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:34 2026 by rpki-client