Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: qWziQbmCXZBfH+fkWg+IHcDDzgsW19vufSiFY0koBbU=
Subject key identifier: 90:A6:89:7C:26:07:B5:5A:00:BA:95:34:D6:A0:86:43:DA:0E:3C:E2
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019F93FF9867D5828E5C1CBFE2EC5662111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 12:00:29 +0000
Manifest this update: Fri 24 Jul 2026 12:00:29 +0000
Manifest next update: Sat 25 Jul 2026 12:00:29 +0000
Files and hashes: 1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: wwxHDwPqxkQTglNM9/bmEObKdOKfZBVglZPkgFX28cc=)
3: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:98:67:d5:82:8e:5c:1c:bf:e2:ec:56:62:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jul 24 12:00:29 2026 GMT
Not After : Jul 25 12:00:29 2026 GMT
Subject: CN=90a6897c2607b55a00ba9534d6a08643da0e3ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:5f:1d:97:75:7d:d8:6c:bc:99:e4:e6:84:
22:34:3b:b1:ed:c4:ed:9b:c9:34:d4:8d:b4:35:a0:
a2:12:6f:c1:e6:7e:f6:7c:ea:0c:26:12:ee:62:2b:
79:39:ca:8a:96:dd:cd:a7:2d:80:b6:00:41:7c:11:
6b:06:ff:7e:15:d4:7c:50:d6:88:24:d1:9f:32:d6:
07:41:e5:4a:d9:f7:d4:ff:76:1c:49:e1:82:8d:3f:
39:30:85:a7:51:73:6d:78:bd:76:cc:02:77:fc:0a:
3e:f8:a6:4f:72:5b:95:20:8c:aa:23:07:78:51:cd:
d6:bb:87:ed:ba:ae:bd:c9:d4:b7:a7:c3:60:06:c8:
4c:d6:35:a3:eb:f0:b8:7d:19:dd:53:e1:96:35:6c:
f0:74:a0:27:70:b1:ad:a6:56:4b:f4:1a:d6:df:1b:
8e:98:9f:43:03:79:c3:11:a2:ee:4f:c5:a5:72:9a:
c1:ae:05:f3:6c:f8:7e:a0:74:53:e5:93:89:15:6b:
89:60:e3:dd:22:df:5d:f5:69:5a:4e:42:7e:bc:08:
e7:82:8d:55:4f:68:ff:a7:1c:18:cf:c9:58:f4:06:
04:01:63:31:4e:94:b1:b6:26:e1:23:fa:78:0e:ee:
36:c9:b6:3e:95:fd:5a:26:e5:f9:ab:b8:c1:b6:7e:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:89:7C:26:07:B5:5A:00:BA:95:34:D6:A0:86:43:DA:0E:3C:E2
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d0:7f:fd:d0:e5:82:2d:f6:09:2f:92:f8:f9:d1:44:ea:b3:
b3:48:39:9f:59:87:61:0f:c0:5a:50:f0:ac:30:b0:76:67:d6:
63:cf:95:a9:fc:26:e5:9c:95:ee:fc:c4:cb:3d:e5:8a:bb:c0:
2e:51:93:e1:ae:f3:45:aa:78:12:4b:8c:d6:44:e0:4e:3a:e3:
22:45:ec:46:fa:a2:86:3d:c5:6f:54:fd:30:37:aa:eb:c3:6f:
9b:e2:78:97:c4:ed:1c:b6:8f:7a:a6:ad:d2:a7:e5:9e:f7:bc:
08:a5:3f:36:73:e0:38:45:e0:c8:f2:66:96:c5:fb:68:c0:58:
6f:ed:e3:17:ac:31:22:f9:94:ad:ae:6c:2e:3d:71:63:1a:d7:
1e:ef:3a:07:7b:80:ea:7d:e6:d0:b5:e3:ba:38:7e:b0:05:ee:
62:8e:57:a5:0f:5b:48:2b:e0:cc:eb:69:f7:e5:f9:f6:97:f3:
bb:9e:08:b6:81:31:a7:4d:ae:98:39:64:02:27:35:c5:bc:41:
8e:da:55:58:58:54:2d:47:11:f5:0d:64:1e:fb:2e:9e:61:11:
d9:2d:37:c3:c0:0e:e9:2d:a1:e6:5e:55:d6:62:6a:a5:0c:22:
2d:e4:28:d1:04:a4:de:98:07:b6:e8:2b:f4:f7:c7:c2:89:52:
e4:3f:44:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/5hn1YKOXBy/4uxWYhEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk
YzkxZWYwHhcNMjYwNzI0MTIwMDI5WhcNMjYwNzI1MTIwMDI5WjAzMTEwLwYDVQQD
Eyg5MGE2ODk3YzI2MDdiNTVhMDBiYTk1MzRkNmEwODY0M2RhMGUzY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvtfHZd1fdhsvJnk5oQiNDux7cTt
m8k01I20NaCiEm/B5n72fOoMJhLuYit5OcqKlt3Npy2AtgBBfBFrBv9+FdR8UNaI
JNGfMtYHQeVK2ffU/3YcSeGCjT85MIWnUXNteL12zAJ3/Ao++KZPcluVIIyqIwd4
Uc3Wu4ftuq69ydS3p8NgBshM1jWj6/C4fRndU+GWNWzwdKAncLGtplZL9BrW3xuO
mJ9DA3nDEaLuT8WlcprBrgXzbPh+oHRT5ZOJFWuJYOPdIt9d9WlaTkJ+vAjngo1V
T2j/pxwYz8lY9AYEAWMxTpSxtibhI/p4Du42ybY+lf1aJuX5q7jBtn5vDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCmiXwmB7VaALqVNNaghkPaDjziMB8GA1UdIwQY
MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct
NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1
LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtB//dDl
gi32CS+S+PnRROqzs0g5n1mHYQ/AWlDwrDCwdmfWY8+Vqfwm5ZyV7vzEyz3lirvA
LlGT4a7zRap4EkuM1kTgTjrjIkXsRvqihj3Fb1T9MDeq68Nvm+J4l8TtHLaPeqat
0qflnve8CKU/NnPgOEXgyPJmlsX7aMBYb+3jF6wxIvmUra5sLj1xYxrXHu86B3uA
6n3m0LXjujh+sAXuYo5XpQ9bSCvgzOtp9+X59pfzu54ItoExp02umDlkAic1xbxB
jtpVWFhULUcR9Q1kHvsunmER2S03w8AO6S2h5l5V1mJqpQwiLeQo0QSk3pgHtugr
9PfHwolS5D9ElA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:20 2026 by rpki-client