Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: SiigQzJiWk3xeCa/HYbZeWp01p3RTX4KxNgCH0MvCKo=
Subject key identifier: 48:F2:A0:AF:E7:BF:B1:5D:52:6D:92:AF:BB:68:AC:7D:05:A5:37:0B
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019FAA87E1750BA6B52DEFEB8BC7D1A7EC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 21:00:59 +0000
Manifest this update: Tue 28 Jul 2026 21:00:59 +0000
Manifest next update: Wed 29 Jul 2026 21:00:59 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: a2m2C2tJv6ujuVsMzuft/iOznTcFvre40cASBAexmAc=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:e1:75:0b:a6:b5:2d:ef:eb:8b:c7:d1:a7:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jul 28 21:00:59 2026 GMT
Not After : Jul 29 21:00:59 2026 GMT
Subject: CN=48f2a0afe7bfb15d526d92afbb68ac7d05a5370b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:c7:75:f7:67:2a:b5:17:72:0f:6b:b2:44:
6f:e9:01:0d:c6:d9:e0:b4:85:f7:8d:a5:f7:c4:5c:
ff:cd:08:18:fa:b9:9f:12:15:44:29:6c:4a:3a:d5:
5d:fd:90:f3:ef:46:a4:df:cd:9f:b6:85:8c:9f:93:
75:98:a0:2c:2e:11:e5:72:ef:3d:66:22:86:6f:68:
8c:b7:66:e3:f7:9f:c6:f3:07:f6:42:f3:80:b2:5e:
cd:68:93:5c:5b:20:25:11:93:11:35:33:2d:b1:e0:
18:1e:16:0e:67:65:2a:c8:4c:59:fe:5d:bf:2e:a1:
21:7c:ab:d0:07:bb:7d:11:81:cd:ba:56:6c:ef:3d:
b3:ba:15:f7:8b:ba:81:b7:d1:c5:5d:5a:c6:fe:e8:
cf:04:a3:bc:4d:85:e7:fe:3e:4a:04:b5:90:49:54:
3e:0d:9e:1e:18:e5:4e:d2:64:dd:22:8c:f0:80:28:
8a:b5:e3:af:3f:ab:58:02:59:6c:f6:ca:63:92:f2:
60:76:a6:0e:41:03:1c:79:0a:63:c3:af:d2:17:0c:
47:6d:d1:f2:93:01:c6:30:de:96:2a:f6:23:80:20:
0e:77:14:56:4b:b3:b9:ef:30:d0:38:db:c4:6d:03:
c6:11:99:f6:c0:fe:06:89:90:16:9b:78:c7:13:28:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F2:A0:AF:E7:BF:B1:5D:52:6D:92:AF:BB:68:AC:7D:05:A5:37:0B
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:bf:10:7e:ce:cc:a1:bc:60:93:9d:94:ce:dd:a9:ad:52:
7a:b3:8b:f0:43:37:08:78:be:4e:26:4f:6c:3e:cb:84:d9:fd:
9f:5a:4e:03:61:02:a5:c6:9f:f5:fe:f4:de:24:05:48:f6:dc:
11:9c:a0:09:3d:50:ad:69:e2:60:70:84:95:1c:f1:5a:28:6d:
93:6d:9c:7b:6c:a9:ae:15:c5:a9:9e:79:1c:41:ed:17:6c:ee:
17:de:e3:25:cb:f0:7f:4a:3b:b0:be:e7:39:fd:2b:0f:fb:a8:
c2:57:d5:66:4c:4e:0a:ee:5d:19:a9:81:e4:2c:d3:f1:ea:ac:
86:b6:68:8b:ef:68:d3:3b:1c:9c:61:e1:78:4d:15:6c:38:49:
11:f0:bc:4a:8f:a6:ac:4d:31:c7:2a:33:62:68:13:7c:12:59:
07:90:57:f8:f0:1a:79:62:b3:5c:b1:97:af:89:2e:9d:64:53:
c4:9a:57:65:02:25:9c:6a:76:c2:9c:df:7a:2a:c5:f9:f1:e5:
4d:76:85:58:27:3c:3b:00:7c:a9:fc:c0:61:48:c6:ce:fd:10:
6a:d7:41:5d:c3:17:5f:0d:00:c6:4e:59:55:cc:1f:26:a3:08:
38:d0:0d:b7:10:13:ac:e8:46:75:2d:b0:ec:3f:31:94:10:2f:
e5:64:16:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh+F1C6a1Le/ri8fRp+xxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjYwNzI4MjEwMDU5WhcNMjYwNzI5MjEwMDU5WjAzMTEwLwYDVQQD
Eyg0OGYyYTBhZmU3YmZiMTVkNTI2ZDkyYWZiYjY4YWM3ZDA1YTUzNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/zHdfdnKrUXcg9rskRv6QENxtng
tIX3jaX3xFz/zQgY+rmfEhVEKWxKOtVd/ZDz70ak382ftoWMn5N1mKAsLhHlcu89
ZiKGb2iMt2bj95/G8wf2QvOAsl7NaJNcWyAlEZMRNTMtseAYHhYOZ2UqyExZ/l2/
LqEhfKvQB7t9EYHNulZs7z2zuhX3i7qBt9HFXVrG/ujPBKO8TYXn/j5KBLWQSVQ+
DZ4eGOVO0mTdIozwgCiKteOvP6tYAlls9spjkvJgdqYOQQMceQpjw6/SFwxHbdHy
kwHGMN6WKvYjgCAOdxRWS7O57zDQONvEbQPGEZn2wP4GiZAWm3jHEyga0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjyoK/nv7FdUm2Sr7torH0FpTcLMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn2/EH7O
zKG8YJOdlM7dqa1SerOL8EM3CHi+TiZPbD7LhNn9n1pOA2ECpcaf9f703iQFSPbc
EZygCT1QrWniYHCElRzxWihtk22ce2yprhXFqZ55HEHtF2zuF97jJcvwf0o7sL7n
Of0rD/uowlfVZkxOCu5dGamB5CzT8eqshrZoi+9o0zscnGHheE0VbDhJEfC8So+m
rE0xxyozYmgTfBJZB5BX+PAaeWKzXLGXr4kunWRTxJpXZQIlnGp2wpzfeirF+fHl
TXaFWCc8OwB8qfzAYUjGzv0QatdBXcMXXw0Axk5ZVcwfJqMIONANtxATrOhGdS2w
7D8xlBAv5WQWtg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:35 2026 by rpki-client