Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
File: sFcIRcI56ZkcibxcUEMekIeGDE0.mft (raw, json)
Hash identifier: 7ku5nD/NTYY04cnV+E3aky37Ee8VE3uvaIL0g8EBbWc=
Subject key identifier: D7:DE:FF:22:F7:BE:60:C5:9F:D6:1B:74:8A:8A:96:0D:6C:FD:6C:A7
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 019F8FECA678A49AE08BBEA31BE9E68C531E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
Manifest number: 044E
Signing time: Thu 23 Jul 2026 17:01:18 +0000
Manifest this update: Thu 23 Jul 2026 17:01:18 +0000
Manifest next update: Fri 24 Jul 2026 17:01:18 +0000
Files and hashes: 1: FkN5wCpqf47xHpP2qPmsCVpZA5A.roa (hash: 6NsTbMJNSxy3emhsWHcWB2UjLqNQnQDr6NiMOXPxTg4=)
2: InFnBGmGL8Q0FS0kuwygTEx8_Lw.asa (hash: zLqLkWTB98DOsRwXQTGdXmZzjw6dskDN5dpYGFPv88s=)
3: sFcIRcI56ZkcibxcUEMekIeGDE0.crl (hash: vlXTMR9Tf+eG5vGQUbemVbncbrkUIJnywG1PpOO8Kww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a6:78:a4:9a:e0:8b:be:a3:1b:e9:e6:8c:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: Jul 23 17:01:18 2026 GMT
Not After : Jul 24 17:01:18 2026 GMT
Subject: CN=d7deff22f7be60c59fd61b748a8a960d6cfd6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:d3:c7:64:4c:8f:09:2d:48:7e:b7:67:92:
2a:11:7c:f9:c1:cc:c1:60:93:b9:e7:2f:8d:fc:9b:
9f:69:89:40:50:04:dd:45:13:7f:cd:1b:43:f8:d3:
56:e7:aa:e5:46:36:a1:61:e2:70:dc:45:c4:a8:0f:
2a:99:a0:9b:71:2f:90:28:9b:02:d9:8f:e9:b1:76:
2b:62:ce:78:c6:c5:26:80:e4:01:f5:ba:1d:4e:f9:
30:cc:ac:1d:5b:fa:fb:46:be:21:ec:70:19:1f:62:
00:88:94:33:7d:da:f4:36:54:30:9b:66:82:cd:d5:
1d:55:80:40:04:6f:9f:f2:62:6c:80:5e:b3:47:b9:
de:0d:4f:8c:75:ac:f7:51:5a:9f:75:11:b7:a3:1d:
50:e9:f7:9c:3f:ac:5f:3c:62:35:38:ca:c4:1e:8e:
65:ff:a9:61:87:f6:0c:7d:87:ef:81:66:08:ea:09:
62:64:18:80:c7:a0:6c:a4:94:4d:d5:47:a6:3f:31:
49:e5:81:55:14:69:f0:80:6c:ee:a7:3b:0e:4a:0a:
17:ac:75:d1:5e:b6:b2:8c:b0:ab:70:ed:d7:04:2d:
09:83:02:d4:93:e4:07:89:55:c8:e1:fe:a2:57:08:
16:89:43:f5:2f:8b:7d:a5:7f:c0:48:9e:39:30:e9:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:FF:22:F7:BE:60:C5:9F:D6:1B:74:8A:8A:96:0D:6C:FD:6C:A7
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:65:ca:00:fe:ae:e4:c6:35:34:40:ab:36:de:cc:ad:dc:49:
7e:22:90:30:c7:ea:eb:9f:91:7d:61:1e:05:8e:7b:29:29:df:
87:11:85:50:f6:ab:8a:f9:91:33:1b:c2:52:ea:cf:56:3f:77:
0e:8d:a2:af:58:3c:90:2c:6e:c2:9e:dc:81:35:fd:c4:02:76:
8c:6f:d0:28:d3:c4:a8:70:c4:5c:38:8a:7d:7c:ea:f4:97:a8:
5f:79:cb:5b:59:9a:eb:c3:f6:09:7d:d5:0a:59:38:c3:3f:82:
35:21:4d:ab:54:ca:49:dd:4f:99:a4:3b:95:5c:14:3d:fc:48:
8b:0d:5c:ca:b5:18:54:c4:e4:8f:c1:74:77:5f:90:17:9f:53:
d8:47:da:2f:5c:b0:fb:66:51:3d:8f:28:68:6a:71:15:67:bf:
67:b2:b7:f7:3b:8c:a3:84:ab:27:b0:78:88:c4:e8:47:ba:11:
a2:84:6d:41:af:c9:53:d3:49:47:a1:9f:b1:a2:91:9c:5a:8d:
82:3d:84:68:ad:b8:2a:3d:65:e4:76:f9:ae:4e:dc:ea:c8:00:
12:65:f1:1c:cd:fc:dc:1c:e4:71:77:b4:5b:ae:cd:17:9d:90:
d9:cf:0a:d8:09:1c:a9:7a:03:ea:41:47:49:b3:e0:42:12:ae:
67:b0:84:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7KZ4pJrgi76jG+nmjFMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTcwODQ1YzIzOWU5OTkxYzg5YmM1YzUwNDMxZTkwODc4
NjBjNGQwHhcNMjYwNzIzMTcwMTE4WhcNMjYwNzI0MTcwMTE4WjAzMTEwLwYDVQQD
EyhkN2RlZmYyMmY3YmU2MGM1OWZkNjFiNzQ4YThhOTYwZDZjZmQ2Y2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YbTx2RMjwktSH63Z5IqEXz5wczB
YJO55y+N/JufaYlAUATdRRN/zRtD+NNW56rlRjahYeJw3EXEqA8qmaCbcS+QKJsC
2Y/psXYrYs54xsUmgOQB9bodTvkwzKwdW/r7Rr4h7HAZH2IAiJQzfdr0NlQwm2aC
zdUdVYBABG+f8mJsgF6zR7neDU+Mdaz3UVqfdRG3ox1Q6fecP6xfPGI1OMrEHo5l
/6lhh/YMfYfvgWYI6gliZBiAx6BspJRN1UemPzFJ5YFVFGnwgGzupzsOSgoXrHXR
XrayjLCrcO3XBC0JgwLUk+QHiVXI4f6iVwgWiUP1L4t9pX/ASJ45MOncawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfe/yL3vmDFn9YbdIqKlg1s/WynMB8GA1UdIwQY
MBaAFLBXCEXCOemZHIm8XFBDHpCHhgxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZjSVJjSTU2WmtjaWJ4Y1VFTWVrSWVHREUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZTdjNDgtZjhjMi00Njc5LWI3NzEt
NDZjYTI2YWZmNTQ1LzEvc0ZjSVJjSTU2WmtjaWJ4Y1VFTWVrSWVHREUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xZTdjNDgtZjhjMi00Njc5LWI3NzEtNDZjYTI2YWZmNTQ1
LzEvc0ZjSVJjSTU2WmtjaWJ4Y1VFTWVrSWVHREUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWXKAP6u
5MY1NECrNt7MrdxJfiKQMMfq65+RfWEeBY57KSnfhxGFUParivmRMxvCUurPVj93
Do2ir1g8kCxuwp7cgTX9xAJ2jG/QKNPEqHDEXDiKfXzq9JeoX3nLW1ma68P2CX3V
Clk4wz+CNSFNq1TKSd1PmaQ7lVwUPfxIiw1cyrUYVMTkj8F0d1+QF59T2EfaL1yw
+2ZRPY8oaGpxFWe/Z7K39zuMo4SrJ7B4iMToR7oRooRtQa/JU9NJR6GfsaKRnFqN
gj2EaK24Kj1l5Hb5rk7c6sgAEmXxHM383BzkcXe0W67NF52Q2c8K2AkcqXoD6kFH
SbPgQhKuZ7CEow==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:08 2026 by rpki-client