Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: qK01rDCTLcsKgWzGMURlMSZwXp9QYnSVlalnjXvWjN8=
Subject key identifier: 7F:23:FA:23:52:AA:06:2B:55:8D:28:18:85:8F:10:CE:05:CB:A8:EE
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019F8E34B7C7FC3E1127EBB8A864B924961D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: FF
Signing time: Thu 23 Jul 2026 09:00:47 +0000
Manifest this update: Thu 23 Jul 2026 09:00:47 +0000
Manifest next update: Fri 24 Jul 2026 09:00:47 +0000
Files and hashes: 1: _klIEgNXjNLrjq0AntRvKPJg8cQ.roa (hash: N8TiDW/8kVRpYH8qFr2ikVHK1WBz/CBEaBf5JoLgSGQ=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: L0JdR7axnvzpoXyNWpRwaZA04e2eH2BvyTQL2WboX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:b7:c7:fc:3e:11:27:eb:b8:a8:64:b9:24:96:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Jul 23 09:00:47 2026 GMT
Not After : Jul 24 09:00:47 2026 GMT
Subject: CN=7f23fa2352aa062b558d2818858f10ce05cba8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:ec:ec:bc:8c:70:f8:d8:ba:df:57:e9:bd:
76:af:93:0f:4e:e6:c8:07:de:0d:a2:07:9e:5d:ae:
5e:52:df:5f:86:e6:98:f3:a0:48:86:b5:4c:c6:90:
19:f0:e2:ac:5f:d7:bc:72:b3:56:cc:50:a8:b1:33:
70:10:4b:1c:f7:86:c3:5d:88:be:73:81:a9:f3:a8:
59:8c:65:4d:fb:87:b6:df:58:6f:48:16:a9:2e:dc:
6a:63:64:fe:1e:09:4e:76:c3:76:12:b1:3f:df:95:
5b:63:5c:1d:10:4b:0d:b4:82:a4:23:09:e6:42:d4:
87:c0:ba:c6:d1:a2:c2:19:55:e6:b6:68:49:b1:c4:
93:ee:2c:a9:57:3d:de:95:46:d6:43:48:89:fc:c2:
eb:09:42:a9:e6:80:e3:c3:1e:22:6c:f6:60:b4:2a:
a9:91:cc:c4:db:3d:a2:27:4a:9b:db:43:9f:30:b3:
02:35:0e:eb:0c:fe:9a:cb:82:1a:d6:c9:f2:06:93:
89:c0:b9:4b:9c:5b:fa:e7:60:e7:b2:03:c5:36:c6:
50:6e:f9:63:47:5b:0d:d0:fe:b2:bc:b1:1d:16:7e:
f2:97:81:4f:b5:f7:e3:1c:5a:3e:3d:9d:e5:1e:c0:
0d:b9:4a:bc:dc:c6:65:4a:65:d8:f5:71:f5:82:f0:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:FA:23:52:AA:06:2B:55:8D:28:18:85:8F:10:CE:05:CB:A8:EE
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ba:ba:a0:07:49:8b:57:1f:7d:9c:59:dc:6b:6d:a3:de:67:
f0:ff:ae:1a:31:2e:74:8a:e5:9e:94:21:24:1e:f8:35:72:7b:
08:21:4d:b0:4e:3b:28:20:bb:73:6d:79:45:54:75:b8:f3:e4:
64:b5:89:fa:37:b5:dc:ad:33:90:fb:d7:9c:6b:5f:29:79:2e:
84:7c:e1:e7:3a:55:8f:43:6e:83:bc:42:32:c4:10:86:7e:9a:
4c:a8:0e:39:78:a8:ed:b1:10:51:af:e4:33:a0:6a:a7:2b:22:
2a:86:81:30:22:49:ae:f2:95:14:6e:70:24:6d:45:cb:c3:3d:
a0:b5:e9:e1:54:e8:4f:64:cf:d6:81:01:64:e8:a6:2b:c9:32:
2e:ef:79:a6:f5:3c:7b:7c:25:74:f4:40:fb:15:bd:ff:06:71:
4e:9a:be:d9:e8:62:b6:a7:71:5e:a1:0a:5e:f2:1e:e5:85:61:
7d:e2:a0:5d:65:1c:f6:fd:55:37:ab:99:4b:27:09:21:df:12:
7c:6f:98:16:d9:c2:d7:63:1a:77:7d:8d:da:8d:c1:ff:97:fb:
c5:9c:e2:64:45:5f:a2:15:2c:ef:ef:77:34:7f:c3:f9:3e:d2:
6a:a0:41:2f:95:9a:a5:f4:47:92:c0:3c:5d:55:6a:96:bd:12:
e5:7f:eb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ONLfH/D4RJ+u4qGS5JJYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDQ2NDE5ZjVlNmIxYmVkOTdiOWY2NzE4NjhhMDgyY2I3
MjkwZjAwHhcNMjYwNzIzMDkwMDQ3WhcNMjYwNzI0MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZjIzZmEyMzUyYWEwNjJiNTU4ZDI4MTg4NThmMTBjZTA1Y2JhOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4bs7LyMcPjYut9X6b12r5MPTubI
B94NogeeXa5eUt9fhuaY86BIhrVMxpAZ8OKsX9e8crNWzFCosTNwEEsc94bDXYi+
c4Gp86hZjGVN+4e231hvSBapLtxqY2T+HglOdsN2ErE/35VbY1wdEEsNtIKkIwnm
QtSHwLrG0aLCGVXmtmhJscST7iypVz3elUbWQ0iJ/MLrCUKp5oDjwx4ibPZgtCqp
kczE2z2iJ0qb20OfMLMCNQ7rDP6ay4Ia1snyBpOJwLlLnFv652DnsgPFNsZQbvlj
R1sN0P6yvLEdFn7yl4FPtffjHFo+PZ3lHsANuUq83MZlSmXY9XH1gvD1JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8j+iNSqgYrVY0oGIWPEM4Fy6juMB8GA1UdIwQY
MBaAFLFEZBn15rG+2XufZxhooILLcpDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VSa0dmWG1zYjdaZTU5bkdHaWdnc3R5a1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80YTU1OWYtZGQ1Zi00ZDAxLWIwODIt
YjA3ODg5ZWI4ZTkzLzEvc1VSa0dmWG1zYjdaZTU5bkdHaWdnc3R5a1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80YTU1OWYtZGQ1Zi00ZDAxLWIwODItYjA3ODg5ZWI4ZTkz
LzEvc1VSa0dmWG1zYjdaZTU5bkdHaWdnc3R5a1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLq6oAdJ
i1cffZxZ3Gtto95n8P+uGjEudIrlnpQhJB74NXJ7CCFNsE47KCC7c215RVR1uPPk
ZLWJ+je13K0zkPvXnGtfKXkuhHzh5zpVj0Nug7xCMsQQhn6aTKgOOXio7bEQUa/k
M6BqpysiKoaBMCJJrvKVFG5wJG1Fy8M9oLXp4VToT2TP1oEBZOimK8kyLu95pvU8
e3wldPRA+xW9/wZxTpq+2ehitqdxXqEKXvIe5YVhfeKgXWUc9v1VN6uZSycJId8S
fG+YFtnC12Mad32N2o3B/5f7xZziZEVfohUs7+93NH/D+T7SaqBBL5WapfRHksA8
XVVqlr0S5X/rIg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:37 2026 by rpki-client