Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: LSZsqr9On4JLIpkXfDrLbhrwU01jzxLZ3MBrfUlmxAo=
Subject key identifier: 35:6B:32:E4:E1:A9:A5:D9:F9:F2:BE:CC:87:4A:CD:5D:E9:5A:30:8A
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019FAB9A7A8E464F7F3EE844B5B00ED58ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 17BA
Signing time: Wed 29 Jul 2026 02:00:55 +0000
Manifest this update: Wed 29 Jul 2026 02:00:55 +0000
Manifest next update: Thu 30 Jul 2026 02:00:55 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: /JJ70wyu30SGcVGRyxJG0dj8ajsMUYkG3X1TtCPP+pw=)
2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:7a:8e:46:4f:7f:3e:e8:44:b5:b0:0e:d5:8a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jul 29 02:00:55 2026 GMT
Not After : Jul 30 02:00:55 2026 GMT
Subject: CN=356b32e4e1a9a5d9f9f2becc874acd5de95a308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:d6:8d:28:07:89:d9:ed:71:bd:45:ef:1b:
86:51:33:c8:02:38:cf:30:0d:63:07:38:3e:5b:5e:
25:3f:9f:2b:19:8b:0f:a6:bc:ca:54:4b:4a:22:cb:
99:11:1c:28:ef:7a:d3:21:5c:02:95:35:ac:d9:74:
f6:d1:e8:e3:90:b6:a9:a1:b7:04:a3:b4:ef:53:f2:
aa:95:ce:b2:35:85:dc:6c:d2:d6:5b:f4:6a:f8:a1:
75:ae:31:08:43:52:2e:c7:12:bd:eb:7f:2a:19:2d:
64:2a:07:22:1e:45:b5:14:b3:d5:8e:63:c2:6c:c1:
95:2c:96:26:6c:19:80:a8:22:55:4c:a1:a1:fa:0a:
50:bf:a2:53:e9:61:41:58:d0:b5:d9:63:1a:be:15:
a3:81:5a:37:a5:e0:51:de:34:10:8b:c4:da:52:a9:
1c:2e:3d:29:2a:16:d8:97:d8:07:b7:ff:7c:f0:1b:
df:43:30:f9:99:01:4d:42:6b:f3:28:dc:82:58:33:
65:8b:0f:c5:fe:11:28:50:d0:d0:c8:d2:73:fc:ed:
6b:fe:41:42:c6:2f:9b:90:aa:7c:82:ed:31:61:0b:
4b:8e:f5:b2:21:1a:b2:70:fa:60:af:66:04:e2:e8:
ff:34:9e:6e:1c:9a:10:88:99:23:66:f8:be:4f:35:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:32:E4:E1:A9:A5:D9:F9:F2:BE:CC:87:4A:CD:5D:E9:5A:30:8A
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:81:c8:eb:14:18:c2:51:97:cd:06:52:56:7f:d3:48:c0:d1:
9a:4c:6d:e6:92:73:46:31:91:02:27:1c:3b:7c:7b:02:5b:10:
cd:fa:c4:8d:e2:0a:57:ef:0f:cc:8f:aa:a3:d5:8f:9b:71:6b:
c7:e1:6e:0a:55:56:58:1a:e7:b9:d4:51:c7:e7:cb:cd:01:04:
a6:42:9e:37:79:bf:6c:4c:b4:da:d8:83:84:f5:a4:3c:78:3e:
ca:12:ee:b3:19:7d:a8:d0:5a:7a:da:8c:86:0d:c2:05:63:56:
16:64:60:1b:a2:5e:f4:aa:fd:67:ab:82:55:c6:8f:b9:f4:e2:
ea:cf:05:f9:cd:4a:0f:34:ae:51:0c:67:9b:5a:51:14:b9:74:
36:fd:01:0c:ff:84:04:41:98:7b:12:63:91:fc:d3:12:60:d6:
ce:ec:3f:64:22:79:07:86:01:9d:12:a5:ac:02:da:13:c5:74:
4f:95:45:d7:59:46:03:52:a5:5a:77:7b:85:15:69:b9:9f:58:
7c:18:38:28:0f:5c:a3:84:f7:b3:8b:d6:ee:55:cb:2c:22:6f:
b9:6c:10:1a:dd:49:4d:7b:64:86:c0:7a:3f:c4:ef:d0:7f:8c:
eb:f8:cc:8b:d3:26:bd:e5:e0:4b:c6:b9:24:29:8e:e4:56:2b:
8c:f9:ee:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmnqORk9/PuhEtbAO1YrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2
ZDI1YTEwHhcNMjYwNzI5MDIwMDU1WhcNMjYwNzMwMDIwMDU1WjAzMTEwLwYDVQQD
EygzNTZiMzJlNGUxYTlhNWQ5ZjlmMmJlY2M4NzRhY2Q1ZGU5NWEzMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOfWjSgHidntcb1F7xuGUTPIAjjP
MA1jBzg+W14lP58rGYsPprzKVEtKIsuZERwo73rTIVwClTWs2XT20ejjkLapobcE
o7TvU/Kqlc6yNYXcbNLWW/Rq+KF1rjEIQ1IuxxK9638qGS1kKgciHkW1FLPVjmPC
bMGVLJYmbBmAqCJVTKGh+gpQv6JT6WFBWNC12WMavhWjgVo3peBR3jQQi8TaUqkc
Lj0pKhbYl9gHt/988BvfQzD5mQFNQmvzKNyCWDNliw/F/hEoUNDQyNJz/O1r/kFC
xi+bkKp8gu0xYQtLjvWyIRqycPpgr2YE4uj/NJ5uHJoQiJkjZvi+TzU3iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVrMuThqaXZ+fK+zIdKzV3pWjCKMB8GA1UdIwQY
MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt
N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj
LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4HI6xQY
wlGXzQZSVn/TSMDRmkxt5pJzRjGRAiccO3x7AlsQzfrEjeIKV+8PzI+qo9WPm3Fr
x+FuClVWWBrnudRRx+fLzQEEpkKeN3m/bEy02tiDhPWkPHg+yhLusxl9qNBaetqM
hg3CBWNWFmRgG6Je9Kr9Z6uCVcaPufTi6s8F+c1KDzSuUQxnm1pRFLl0Nv0BDP+E
BEGYexJjkfzTEmDWzuw/ZCJ5B4YBnRKlrALaE8V0T5VF11lGA1KlWnd7hRVpuZ9Y
fBg4KA9co4T3s4vW7lXLLCJvuWwQGt1JTXtkhsB6P8Tv0H+M6/jMi9MmveXgS8a5
JCmO5FYrjPnu6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:55 2026 by rpki-client