Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: lr6BgtMi53VfNDPW3bscn7IdEMWxIq/9qaoQUu+DyKw=
Subject key identifier: FA:D4:F3:3E:6D:29:60:6C:BB:BD:CE:D5:7F:91:B7:5E:B3:E8:1F:A4
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 019FA9E2ABAD472B12411AD0814F7A4B6CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 18:00:32 +0000
Manifest this update: Tue 28 Jul 2026 18:00:32 +0000
Manifest next update: Wed 29 Jul 2026 18:00:32 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: kWIpD0YSxYLIHAan3oU3gBzz+Hr5mXtM0rcs6ujM5ks=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ab:ad:47:2b:12:41:1a:d0:81:4f:7a:4b:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jul 28 18:00:32 2026 GMT
Not After : Jul 29 18:00:32 2026 GMT
Subject: CN=fad4f33e6d29606cbbbdced57f91b75eb3e81fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:53:6b:f8:8a:88:7b:63:a4:5c:85:64:b2:
c0:d9:d8:d6:20:41:d6:c4:59:72:9d:1b:8b:29:50:
ba:b5:2c:b2:3a:ca:37:95:fd:35:d0:6e:b8:16:09:
65:e0:12:34:e8:cf:a6:f1:01:a4:1b:c2:20:bf:e0:
ee:78:c7:ff:6d:54:c0:bc:50:e8:8f:f3:ac:c6:3f:
ed:db:9e:15:7d:3f:f9:6f:c1:7d:54:d0:a8:f5:2a:
47:c8:5f:55:03:62:05:90:a2:46:b4:d3:e5:a9:ee:
e7:33:86:f5:51:7b:7d:f4:23:9c:13:77:3f:c7:40:
e7:b5:48:fe:73:99:1a:9e:83:e8:21:be:d4:a4:dc:
e6:d2:6a:64:b6:7f:c9:ef:53:d0:f3:e6:c7:6b:a5:
4b:f3:5a:67:a7:69:80:e6:0f:11:e9:d3:75:33:26:
0d:4d:e9:9f:0e:df:a7:ac:32:cf:a9:bd:4d:8d:5a:
35:a8:9a:aa:e7:78:08:03:2b:cd:e5:b0:26:37:1d:
f3:45:a7:1e:b2:50:f8:37:de:34:69:4b:76:ad:50:
2d:ec:55:a6:ba:70:8c:62:5b:29:79:69:db:a1:1d:
59:9f:07:86:28:3a:3f:71:03:9f:49:64:9c:a7:8a:
95:00:fe:93:9c:10:43:3f:55:78:1b:b9:fb:72:64:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D4:F3:3E:6D:29:60:6C:BB:BD:CE:D5:7F:91:B7:5E:B3:E8:1F:A4
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:28:3b:d2:b9:4e:f4:9e:df:90:50:44:b2:2b:1b:6d:81:a0:
f7:4b:ec:da:44:92:29:26:59:9b:60:48:ae:48:58:4f:76:18:
78:49:1c:96:8d:07:e8:4f:f4:a0:43:5d:7d:f1:b7:22:7a:21:
10:f7:e1:45:4e:20:68:e4:2d:5f:e6:1c:11:db:c0:1f:38:8c:
9e:c1:f1:02:c2:4f:04:85:37:e4:de:bd:35:03:8f:97:c2:e0:
30:95:bb:e1:ed:da:b7:2c:36:39:e4:67:f6:87:cb:63:05:42:
97:23:89:4c:82:07:aa:fd:f1:86:ef:a4:25:a3:29:34:12:b1:
49:14:a2:8a:aa:1b:75:52:88:4b:fc:2a:53:97:f1:61:67:2c:
4b:81:cc:9b:88:39:43:02:a7:6c:a0:82:3c:77:3a:3a:83:96:
12:a4:9b:99:24:e1:dc:2c:08:60:30:d7:0a:2e:7f:ce:7d:b5:
a7:7a:94:be:4f:24:07:69:53:54:34:37:1b:63:96:2c:0b:8c:
5b:e5:1f:73:ea:3a:5d:62:6a:77:ad:98:61:75:79:29:e5:c8:
34:07:ce:f3:a5:3a:01:b6:33:01:92:12:e3:cc:ff:e6:ed:16:
8b:02:c2:20:7b:aa:04:dd:d3:f7:02:9d:d8:b7:d7:1b:b9:05:
5c:1b:f0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4qutRysSQRrQgU96S2zmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx
YzM3MjAwHhcNMjYwNzI4MTgwMDMyWhcNMjYwNzI5MTgwMDMyWjAzMTEwLwYDVQQD
EyhmYWQ0ZjMzZTZkMjk2MDZjYmJiZGNlZDU3ZjkxYjc1ZWIzZTgxZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0xTa/iKiHtjpFyFZLLA2djWIEHW
xFlynRuLKVC6tSyyOso3lf010G64Fgll4BI06M+m8QGkG8Igv+DueMf/bVTAvFDo
j/Osxj/t254VfT/5b8F9VNCo9SpHyF9VA2IFkKJGtNPlqe7nM4b1UXt99COcE3c/
x0DntUj+c5kanoPoIb7UpNzm0mpktn/J71PQ8+bHa6VL81pnp2mA5g8R6dN1MyYN
TemfDt+nrDLPqb1NjVo1qJqq53gIAyvN5bAmNx3zRaceslD4N940aUt2rVAt7FWm
unCMYlspeWnboR1ZnweGKDo/cQOfSWScp4qVAP6TnBBDP1V4G7n7cmRFZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrU8z5tKWBsu73O1X+Rt16z6B+kMB8GA1UdIwQY
MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct
ZWY3MTBlYzdiMmZlLzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl
LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKig70rlO
9J7fkFBEsisbbYGg90vs2kSSKSZZm2BIrkhYT3YYeEkclo0H6E/0oENdffG3Inoh
EPfhRU4gaOQtX+YcEdvAHziMnsHxAsJPBIU35N69NQOPl8LgMJW74e3atyw2OeRn
9ofLYwVClyOJTIIHqv3xhu+kJaMpNBKxSRSiiqobdVKIS/wqU5fxYWcsS4HMm4g5
QwKnbKCCPHc6OoOWEqSbmSTh3CwIYDDXCi5/zn21p3qUvk8kB2lTVDQ3G2OWLAuM
W+Ufc+o6XWJqd62YYXV5KeXINAfO86U6AbYzAZIS48z/5u0WiwLCIHuqBN3T9wKd
2LfXG7kFXBvwVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:48 2026 by rpki-client