Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: QPq1KgQjAk70qQGwracDLsV8D+ItVKNr+j0U7Sm1TCc=
Subject key identifier: 92:EE:44:40:0F:77:C6:EA:2D:E0:D0:3A:E2:B8:75:4B:53:FF:03:57
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019FA9AB8F5CF4185C1A23FD232B029B9FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 19AC
Signing time: Tue 28 Jul 2026 17:00:20 +0000
Manifest this update: Tue 28 Jul 2026 17:00:20 +0000
Manifest next update: Wed 29 Jul 2026 17:00:20 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: GP7n02mdvBcsJS4fZ9i0B5z2ywHhdFpM5Aq/R8PGx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:8f:5c:f4:18:5c:1a:23:fd:23:2b:02:9b:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Jul 28 17:00:20 2026 GMT
Not After : Jul 29 17:00:20 2026 GMT
Subject: CN=92ee44400f77c6ea2de0d03ae2b8754b53ff0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:30:0b:63:ec:b8:ef:8f:42:c3:2f:ce:1f:
8f:cc:20:91:62:3e:43:a9:02:8a:53:90:53:d5:b2:
4e:5c:fa:89:92:30:3b:7a:92:85:36:c7:73:9c:52:
1d:4f:0c:f6:6c:97:c1:98:3f:8e:7c:05:bd:6d:31:
4a:92:ad:14:c3:09:f7:17:1c:26:3d:3d:de:15:52:
1d:d1:7c:0e:0c:90:39:e1:55:f5:80:6d:07:d9:14:
e4:30:42:ca:3f:0a:1b:4c:f2:fc:8f:8a:c0:d2:b9:
b5:01:07:d9:aa:71:44:db:23:3d:3d:a7:22:64:2e:
81:b2:83:4e:89:99:b9:c6:55:be:68:6a:70:41:97:
09:bc:84:a3:5b:b7:ec:25:f6:8a:b6:cb:44:c5:b6:
a9:42:18:db:d2:8b:ff:9a:2a:4e:8c:a1:11:6b:3c:
bb:c4:f9:b0:ca:f6:76:13:f6:8c:86:f6:5e:0b:ce:
26:74:7f:7f:ec:74:a5:fd:e5:8a:2a:88:4c:ed:ad:
7c:f6:0a:3f:15:ad:31:7e:41:ad:02:02:a7:73:ff:
2b:89:d5:4d:af:e7:ad:27:e1:07:29:f0:65:c3:42:
75:f5:b0:10:c4:e0:23:f5:f0:a7:21:b4:7e:f5:17:
7e:4e:9b:9a:60:60:42:b1:f5:af:77:64:1e:66:06:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:44:40:0F:77:C6:EA:2D:E0:D0:3A:E2:B8:75:4B:53:FF:03:57
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7c:c5:d1:1d:92:cd:fc:69:af:aa:07:c1:d2:78:d5:91:5b:
6d:5d:8e:bb:82:50:23:6f:ed:62:46:ea:0b:8a:f9:37:bf:31:
b6:81:05:6b:aa:95:87:2e:0e:a9:21:ae:b8:3c:09:46:fa:e9:
bd:ae:c6:e0:0d:c1:c9:fe:0a:19:b5:eb:c8:c3:e8:41:d2:88:
33:d4:98:63:a2:01:f3:f5:66:b9:f8:04:62:19:ea:4b:b3:6e:
95:eb:bc:d1:8f:80:98:d5:ae:b2:4d:3a:b8:a1:4b:9b:53:db:
d7:cb:f8:73:59:0c:be:66:7e:9f:61:ad:dd:8d:8a:1c:70:42:
e6:4e:a3:ad:71:9b:3d:08:fa:8b:3b:95:99:0f:af:9b:64:94:
f6:bc:2c:df:70:3c:a5:a8:2b:7b:a8:40:48:17:64:22:c8:51:
5e:f9:19:93:41:2e:ec:38:90:30:7b:13:49:a0:26:f3:19:f4:
01:22:02:25:51:0b:5f:27:61:21:b5:55:e6:0e:27:a5:8b:e7:
81:b3:55:5a:fe:e3:c5:9c:8d:40:db:c7:43:08:61:5c:7c:ea:
ed:5b:66:81:56:ae:ba:a9:c0:56:f5:41:d6:83:06:b1:51:fc:
39:11:3e:a9:3e:a8:0d:86:6a:71:1f:38:7f:a3:cb:62:f2:f9:
5d:68:30:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq49c9BhcGiP9IysCm5/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw
MmJmODEwHhcNMjYwNzI4MTcwMDIwWhcNMjYwNzI5MTcwMDIwWjAzMTEwLwYDVQQD
Eyg5MmVlNDQ0MDBmNzdjNmVhMmRlMGQwM2FlMmI4NzU0YjUzZmYwMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51YwC2PsuO+PQsMvzh+PzCCRYj5D
qQKKU5BT1bJOXPqJkjA7epKFNsdznFIdTwz2bJfBmD+OfAW9bTFKkq0Uwwn3Fxwm
PT3eFVId0XwODJA54VX1gG0H2RTkMELKPwobTPL8j4rA0rm1AQfZqnFE2yM9Paci
ZC6BsoNOiZm5xlW+aGpwQZcJvISjW7fsJfaKtstExbapQhjb0ov/mipOjKERazy7
xPmwyvZ2E/aMhvZeC84mdH9/7HSl/eWKKohM7a189go/Fa0xfkGtAgKnc/8ridVN
r+etJ+EHKfBlw0J19bAQxOAj9fCnIbR+9Rd+TpuaYGBCsfWvd2QeZgY9MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLuREAPd8bqLeDQOuK4dUtT/wNXMB8GA1UdIwQY
MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt
NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj
LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnzF0R2S
zfxpr6oHwdJ41ZFbbV2Ou4JQI2/tYkbqC4r5N78xtoEFa6qVhy4OqSGuuDwJRvrp
va7G4A3Byf4KGbXryMPoQdKIM9SYY6IB8/VmufgEYhnqS7Nuleu80Y+AmNWusk06
uKFLm1Pb18v4c1kMvmZ+n2Gt3Y2KHHBC5k6jrXGbPQj6izuVmQ+vm2SU9rws33A8
pagre6hASBdkIshRXvkZk0Eu7DiQMHsTSaAm8xn0ASICJVELXydhIbVV5g4npYvn
gbNVWv7jxZyNQNvHQwhhXHzq7VtmgVauuqnAVvVB1oMGsVH8ORE+qT6oDYZqcR84
f6PLYvL5XWgwFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:18 2026 by rpki-client