Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: /o3MltoOrzDF/f9Ea60zZKQYKzaAVFVOv7kInhR3it0=
Subject key identifier: 1B:F7:8E:87:29:2D:15:32:36:57:84:BC:40:3C:E1:FE:BF:F2:5A:6B
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 019F946D3FAF3AF7844F33397BE5C8CA7B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 14:00:15 +0000
Manifest this update: Fri 24 Jul 2026 14:00:15 +0000
Manifest next update: Sat 25 Jul 2026 14:00:15 +0000
Files and hashes: 1: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: opbnRbIrndoAbZHhk8eAn/6Lk4yBJwRdIyYKJEcdGsk=)
2: p8BGzkeZTXu6qLWOB4ZXBUN3ORs.roa (hash: OVtfVKdOOl/LSMO1Y47imdhBsBHfrXhcCR6Y3Lh7Lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:3f:af:3a:f7:84:4f:33:39:7b:e5:c8:ca:7b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jul 24 14:00:15 2026 GMT
Not After : Jul 25 14:00:15 2026 GMT
Subject: CN=1bf78e87292d1532365784bc403ce1febff25a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:2e:7c:0a:e0:57:fb:2b:b2:c9:cc:fd:b6:
cf:24:31:c2:aa:53:e5:50:ae:26:7f:e3:eb:6f:49:
10:39:45:c0:10:eb:24:96:62:a6:65:1c:5c:1b:f5:
86:c0:58:63:24:75:21:ca:09:ba:51:cb:f2:93:ec:
7a:19:1b:ab:eb:40:36:be:33:f5:3e:f1:b2:93:53:
40:d1:9b:45:8b:49:79:9e:df:05:90:92:5f:ad:28:
44:b8:ff:48:f3:4b:3e:38:68:5a:51:3c:78:b9:65:
54:e6:bf:44:56:7a:7e:91:e1:e0:7f:3f:6d:ba:98:
cd:e1:6d:40:03:d6:77:76:78:60:2d:33:c9:1a:1c:
06:41:b0:fc:cb:80:79:a7:82:c2:dc:7f:11:5e:f8:
97:46:9d:b1:ff:0d:a0:d8:fc:41:f0:98:43:24:77:
35:c5:1a:35:30:c8:3d:a6:64:2e:d7:83:fe:b4:88:
63:5c:71:d6:b2:79:39:6e:76:ec:0f:29:c3:01:cd:
f0:dd:cc:ba:60:e5:9e:83:d4:6a:c8:10:b7:c5:23:
10:1a:d3:1d:79:db:97:8b:61:b8:32:dd:7e:a0:0a:
b3:ca:1a:90:db:9f:d8:e1:9d:04:d6:c1:ba:60:76:
9e:ea:0e:db:b0:8b:27:12:56:5c:52:97:89:c5:c4:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:8E:87:29:2D:15:32:36:57:84:BC:40:3C:E1:FE:BF:F2:5A:6B
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:48:bd:33:e7:45:86:c2:fe:fe:cd:18:d2:40:19:00:99:
3f:58:f8:64:a8:eb:85:f3:af:ec:96:51:27:f3:69:1e:af:a9:
c0:be:86:e8:3c:91:f1:73:ac:0a:19:a4:b1:a2:35:92:91:29:
07:66:0c:58:c3:55:39:70:a9:27:c9:4a:53:6a:80:89:cf:4f:
d2:08:bb:c0:a4:93:61:20:93:1f:b1:92:31:d7:b3:06:d0:8d:
ee:00:80:a9:5f:6e:27:fb:51:ca:33:22:b3:f9:be:0e:63:2a:
eb:a4:42:6f:7b:26:29:c5:2c:eb:ad:0e:b6:35:35:a6:59:ad:
5c:d9:ba:18:e3:36:5c:42:68:bd:b4:40:51:b5:50:2d:4e:94:
b4:ce:14:c6:ff:09:40:e7:c7:13:49:3d:ac:24:eb:53:40:47:
e0:90:bf:46:81:a7:bf:90:74:d2:00:b5:a9:64:0a:34:db:47:
0a:5e:e8:2e:94:4a:26:23:1e:e4:0a:d9:c8:18:5c:70:66:60:
ed:96:22:3e:bd:e3:50:33:2d:79:f7:90:2d:f0:90:de:7d:2e:
5a:78:63:a2:1b:3e:e2:1f:00:7d:c4:f5:9d:c6:75:f9:ea:95:
f8:3c:8e:17:ee:dd:12:0c:ea:9e:70:c5:44:d5:f1:62:c9:52:
c1:14:3a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbT+vOveETzM5e+XIynsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjVmMDgwMzFlMzVhZjk1NDVkM2FkM2QxMzhjYWQxMDM5
NmUyY2EwHhcNMjYwNzI0MTQwMDE1WhcNMjYwNzI1MTQwMDE1WjAzMTEwLwYDVQQD
EygxYmY3OGU4NzI5MmQxNTMyMzY1Nzg0YmM0MDNjZTFmZWJmZjI1YTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t0ufArgV/srssnM/bbPJDHCqlPl
UK4mf+Prb0kQOUXAEOsklmKmZRxcG/WGwFhjJHUhygm6Ucvyk+x6GRur60A2vjP1
PvGyk1NA0ZtFi0l5nt8FkJJfrShEuP9I80s+OGhaUTx4uWVU5r9EVnp+keHgfz9t
upjN4W1AA9Z3dnhgLTPJGhwGQbD8y4B5p4LC3H8RXviXRp2x/w2g2PxB8JhDJHc1
xRo1MMg9pmQu14P+tIhjXHHWsnk5bnbsDynDAc3w3cy6YOWeg9RqyBC3xSMQGtMd
eduXi2G4Mt1+oAqzyhqQ25/Y4Z0E1sG6YHae6g7bsIsnElZcUpeJxcToVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv3jocpLRUyNleEvEA84f6/8lprMB8GA1UdIwQY
MBaAFPz18IAx41r5VF0609E4ytEDluLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUt
YmNiZmIxODk4ZWJhLzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUtYmNiZmIxODk4ZWJh
LzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazhIvTPn
RYbC/v7NGNJAGQCZP1j4ZKjrhfOv7JZRJ/NpHq+pwL6G6DyR8XOsChmksaI1kpEp
B2YMWMNVOXCpJ8lKU2qAic9P0gi7wKSTYSCTH7GSMdezBtCN7gCAqV9uJ/tRyjMi
s/m+DmMq66RCb3smKcUs660OtjU1plmtXNm6GOM2XEJovbRAUbVQLU6UtM4Uxv8J
QOfHE0k9rCTrU0BH4JC/RoGnv5B00gC1qWQKNNtHCl7oLpRKJiMe5ArZyBhccGZg
7ZYiPr3jUDMtefeQLfCQ3n0uWnhjohs+4h8AfcT1ncZ1+eqV+DyOF+7dEgzqnnDF
RNXxYslSwRQ6Mg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:36 2026 by rpki-client