Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: zrLnb/3mgGZcHUDGHfK7mw7XcstkVuezv6j2eKUkjr8=
Subject key identifier: F9:66:62:A8:4B:66:A7:81:84:DB:B4:75:06:E0:63:B5:99:FA:17:19
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 019F92B65ACC32BDEE7FC733371E4EC83C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 1358
Signing time: Fri 24 Jul 2026 06:00:52 +0000
Manifest this update: Fri 24 Jul 2026 06:00:52 +0000
Manifest next update: Sat 25 Jul 2026 06:00:52 +0000
Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: 59EMFPl60qK4RppJAT1gGI4moeP+zqPaXSnnh3ciXEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5a:cc:32:bd:ee:7f:c7:33:37:1e:4e:c8:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Jul 24 06:00:52 2026 GMT
Not After : Jul 25 06:00:52 2026 GMT
Subject: CN=f96662a84b66a78184dbb47506e063b599fa1719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:c9:76:8b:7d:ef:64:3f:2c:59:e3:c9:0c:
23:cd:4a:df:59:51:90:8a:36:77:04:4e:d4:5f:fe:
6a:69:2c:36:6a:c5:c7:1d:72:18:96:e1:1f:a1:43:
bf:15:74:50:1a:d6:f4:c1:5f:a1:8f:91:73:13:61:
82:96:b6:a0:84:7f:12:d8:4a:42:cb:59:50:f2:a9:
2a:e2:1c:c4:cc:b3:2d:cd:0f:00:d0:1e:97:55:c4:
7c:f7:8c:28:14:55:eb:1c:6a:60:2c:64:8c:6c:c1:
25:a9:a6:34:3f:d1:d8:15:dd:63:a3:b9:c6:e4:ab:
cb:7e:ce:f0:b5:ba:55:d3:9c:6e:1c:88:ac:5a:99:
c6:7b:64:ec:ee:fd:03:d6:61:8e:53:a7:03:b2:67:
44:1c:b1:19:95:68:7c:13:36:79:e8:93:17:70:1e:
fa:2d:65:95:d4:93:d2:69:3e:5b:dc:45:e3:f9:68:
dd:cc:fa:23:a9:1a:51:7d:78:8f:db:b3:3c:a6:28:
14:81:e5:30:89:e0:d4:53:02:aa:96:44:42:f9:9e:
60:07:38:0b:0c:a9:4e:aa:90:20:da:81:f0:c2:79:
46:a8:f7:66:1d:cf:9c:e1:2c:9d:94:4b:fb:45:e0:
3e:f9:e3:ff:f2:ec:cf:2d:1b:ac:bd:d3:d9:66:f2:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:62:A8:4B:66:A7:81:84:DB:B4:75:06:E0:63:B5:99:FA:17:19
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:28:57:31:9e:4f:54:13:f5:93:c6:53:df:0c:d1:cc:2c:
09:1f:bc:6d:63:ca:68:f0:bc:8d:da:e5:5d:d2:36:46:5e:3a:
1c:fc:30:ed:0b:fc:7b:4f:76:50:8c:d4:d5:90:9b:43:1d:56:
bc:a6:78:0d:00:54:c1:fb:cb:3e:10:c2:5c:d3:87:58:ff:4a:
8a:02:3d:3f:05:95:d3:9a:75:8a:eb:4d:ec:e2:02:e4:ed:89:
aa:a3:d9:39:9b:fa:67:aa:d5:58:75:03:48:0d:20:61:e9:c1:
e1:5f:60:e8:d6:22:62:2b:1f:c1:eb:d2:db:d4:6c:a8:90:99:
8f:db:f5:9f:78:b6:dc:5b:e9:30:f9:39:62:95:3a:c3:33:a1:
d5:8a:12:ee:7a:e8:f4:3e:b2:09:2f:2e:80:21:35:93:d0:56:
35:72:f9:ff:5f:18:b8:fb:ca:9b:43:df:97:f4:1e:a1:a2:6d:
f6:d8:f4:03:b0:11:99:cc:e5:bf:82:04:9f:3d:e2:68:e5:1d:
f5:c0:db:01:4a:15:06:ee:4f:3e:d8:c9:9e:a0:b7:99:e1:e9:
b3:11:9a:14:09:7b:c0:4d:da:a0:1d:16:9a:d7:70:e9:f2:6d:
43:c0:25:09:fb:30:49:fb:76:70:76:27:58:56:b3:f4:32:b0:
64:e1:3c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StlrMMr3uf8czNx5OyDxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjYwNzI0MDYwMDUyWhcNMjYwNzI1MDYwMDUyWjAzMTEwLwYDVQQD
EyhmOTY2NjJhODRiNjZhNzgxODRkYmI0NzUwNmUwNjNiNTk5ZmExNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmzJdot972Q/LFnjyQwjzUrfWVGQ
ijZ3BE7UX/5qaSw2asXHHXIYluEfoUO/FXRQGtb0wV+hj5FzE2GClraghH8S2EpC
y1lQ8qkq4hzEzLMtzQ8A0B6XVcR894woFFXrHGpgLGSMbMElqaY0P9HYFd1jo7nG
5KvLfs7wtbpV05xuHIisWpnGe2Ts7v0D1mGOU6cDsmdEHLEZlWh8EzZ56JMXcB76
LWWV1JPSaT5b3EXj+WjdzPojqRpRfXiP27M8pigUgeUwieDUUwKqlkRC+Z5gBzgL
DKlOqpAg2oHwwnlGqPdmHc+c4SydlEv7ReA++eP/8uzPLRusvdPZZvLV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlmYqhLZqeBhNu0dQbgY7WZ+hcZMB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS8oVzGe
T1QT9ZPGU98M0cwsCR+8bWPKaPC8jdrlXdI2Rl46HPww7Qv8e092UIzU1ZCbQx1W
vKZ4DQBUwfvLPhDCXNOHWP9KigI9PwWV05p1iutN7OIC5O2JqqPZOZv6Z6rVWHUD
SA0gYenB4V9g6NYiYisfwevS29RsqJCZj9v1n3i23FvpMPk5YpU6wzOh1YoS7nro
9D6yCS8ugCE1k9BWNXL5/18YuPvKm0Pfl/QeoaJt9tj0A7ARmczlv4IEnz3iaOUd
9cDbAUoVBu5PPtjJnqC3meHpsxGaFAl7wE3aoB0Wmtdw6fJtQ8AlCfswSft2cHYn
WFaz9DKwZOE8wg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:44 2026 by rpki-client