Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: O43EHuSr9DYzHKf6rUz9kgwEiMuEaeetE7DCdj570hQ=
Subject key identifier: 84:EF:23:1A:CD:60:F4:23:B1:65:A1:E5:1E:FC:F3:AD:FD:49:C3:3A
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019FA907464A7FDEFC865CF9060B7483B87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 17A1
Signing time: Tue 28 Jul 2026 14:00:53 +0000
Manifest this update: Tue 28 Jul 2026 14:00:53 +0000
Manifest next update: Wed 29 Jul 2026 14:00:53 +0000
Files and hashes: 1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: y1rIOLBuaJ7RZbyaVLWhyIuCOXHrQFDZuU0C1L8qucM=)
3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:46:4a:7f:de:fc:86:5c:f9:06:0b:74:83:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Jul 28 14:00:53 2026 GMT
Not After : Jul 29 14:00:53 2026 GMT
Subject: CN=84ef231acd60f423b165a1e51efcf3adfd49c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:78:07:36:a2:e4:7a:1b:b6:2f:84:36:4e:
32:4e:f8:59:70:ad:58:df:7e:c9:20:02:56:c8:4d:
22:a7:f1:b5:c4:92:28:5b:41:f4:36:0c:a1:5f:a5:
a6:e6:d5:d4:1f:00:2d:e4:1b:7f:cf:fe:56:44:81:
8e:15:41:cc:b0:ef:4a:64:0b:ef:55:a4:d2:8f:35:
6b:52:d4:e4:0c:39:9b:1f:0b:fb:ff:6a:c6:48:a3:
c9:95:41:7e:01:c2:88:69:fe:c6:ad:ea:29:91:ec:
36:a5:ff:76:76:33:e0:96:9d:8a:9e:ce:15:c6:8f:
b0:ba:f3:3d:36:8a:c7:d6:bf:a8:30:89:15:17:d1:
2c:11:45:6b:34:80:5f:67:6c:54:65:27:5d:06:19:
4b:e3:1e:fd:8c:37:8e:bb:2f:cc:58:a2:17:8f:bc:
87:71:44:c3:7e:49:c5:61:95:8c:0a:19:41:03:92:
3c:38:ae:88:a8:ff:6a:df:c5:f3:11:fa:c2:b0:ba:
98:48:c8:0d:4b:37:b0:8a:fe:cf:a2:af:21:d6:ad:
25:7c:a5:22:62:6b:0c:cf:e9:a9:ec:38:d7:21:8a:
61:cf:9a:f6:54:c8:8d:10:e6:e9:7e:ce:ba:4c:3e:
4d:8d:a8:f0:6b:84:4a:ba:cf:b0:91:1a:c3:47:93:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:23:1A:CD:60:F4:23:B1:65:A1:E5:1E:FC:F3:AD:FD:49:C3:3A
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:a8:db:cb:57:fa:7c:91:f0:a3:ec:e9:7e:97:6f:41:92:
f5:fd:12:5b:06:58:5a:50:aa:10:f9:af:df:0f:2f:73:09:6e:
92:bb:98:c9:d4:45:db:08:35:17:44:52:75:44:03:f7:2e:69:
bc:a3:cc:18:4c:c1:f3:9a:ae:49:d7:5f:86:74:4f:7c:9f:63:
aa:ff:4a:39:28:28:89:92:5e:ba:ba:ff:1b:88:c1:b7:1e:38:
95:35:82:dc:03:2a:7f:78:20:c8:8f:9f:bb:3d:ef:02:55:22:
9f:c8:bb:b6:bb:ac:0d:3f:47:33:95:b3:b2:dd:a4:08:26:a5:
a4:e9:7b:de:85:9c:75:90:66:52:5b:43:87:7e:a7:03:83:60:
d7:d5:ac:39:63:3e:c4:e9:9a:18:26:5a:c3:59:13:c1:72:0f:
98:68:6c:64:fa:f8:df:fc:ba:c7:a8:4c:8d:9a:c5:9a:59:94:
00:de:4d:d7:a4:c0:91:60:fc:06:9b:fd:55:4b:ca:8d:fd:03:
f1:1d:dc:57:dd:5f:5b:40:94:1f:5d:57:5c:62:be:3b:6d:a0:
7c:6a:b4:35:37:bc:9b:db:2b:9a:db:67:cd:95:c8:e6:53:a8:
5e:31:a1:71:71:76:bc:f1:bc:28:35:31:85:bf:6c:f5:c3:e2:
74:f8:6b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB0ZKf978hlz5Bgt0g7h9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjYwNzI4MTQwMDUzWhcNMjYwNzI5MTQwMDUzWjAzMTEwLwYDVQQD
Eyg4NGVmMjMxYWNkNjBmNDIzYjE2NWExZTUxZWZjZjNhZGZkNDljMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37l4Bzai5Hobti+ENk4yTvhZcK1Y
337JIAJWyE0ip/G1xJIoW0H0NgyhX6Wm5tXUHwAt5Bt/z/5WRIGOFUHMsO9KZAvv
VaTSjzVrUtTkDDmbHwv7/2rGSKPJlUF+AcKIaf7Greopkew2pf92djPglp2Kns4V
xo+wuvM9NorH1r+oMIkVF9EsEUVrNIBfZ2xUZSddBhlL4x79jDeOuy/MWKIXj7yH
cUTDfknFYZWMChlBA5I8OK6IqP9q38XzEfrCsLqYSMgNSzewiv7Poq8h1q0lfKUi
YmsMz+mp7DjXIYphz5r2VMiNEObpfs66TD5Njajwa4RKus+wkRrDR5O+NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITvIxrNYPQjsWWh5R788639ScM6MB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcSo28tX
+nyR8KPs6X6Xb0GS9f0SWwZYWlCqEPmv3w8vcwlukruYydRF2wg1F0RSdUQD9y5p
vKPMGEzB85quSddfhnRPfJ9jqv9KOSgoiZJeurr/G4jBtx44lTWC3AMqf3ggyI+f
uz3vAlUin8i7trusDT9HM5Wzst2kCCalpOl73oWcdZBmUltDh36nA4Ng19WsOWM+
xOmaGCZaw1kTwXIPmGhsZPr43/y6x6hMjZrFmlmUAN5N16TAkWD8Bpv9VUvKjf0D
8R3cV91fW0CUH11XXGK+O22gfGq0NTe8m9srmttnzZXI5lOoXjGhcXF2vPG8KDUx
hb9s9cPidPhrtw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:44 2026 by rpki-client