Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier: dA/XYbqGGh25Shhnnb+Auyes+1PyB7A0rHUD4omFFXs=
Subject key identifier: B8:84:DB:07:4B:49:38:62:AC:50:D1:C8:71:8C:32:E3:32:B9:0E:0A
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer: /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial: 019FAD1A7F7ECE9BB4F4DAB1FC0DA900BE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number: 01B9
Signing time: Wed 29 Jul 2026 09:00:22 +0000
Manifest this update: Wed 29 Jul 2026 09:00:22 +0000
Manifest next update: Thu 30 Jul 2026 09:00:22 +0000
Files and hashes: 1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: EEjXwHpEm2c21X3mMndiwVloxN18r5X/Xzc2Ap/Zsdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:7f:7e:ce:9b:b4:f4:da:b1:fc:0d:a9:00:be:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Validity
Not Before: Jul 29 09:00:22 2026 GMT
Not After : Jul 30 09:00:22 2026 GMT
Subject: CN=b884db074b493862ac50d1c8718c32e332b90e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:d0:a3:f5:25:07:8a:01:01:95:e8:53:16:
e5:48:d7:7f:a2:b1:ea:1b:a4:15:95:26:0c:fd:28:
99:83:5a:02:54:cf:5e:92:f3:3a:70:66:62:89:0c:
35:e6:1a:d8:b5:c2:5c:55:d2:78:4a:48:fd:b2:7c:
70:ed:0d:23:4f:2b:37:c7:f6:bc:59:b9:14:4e:e7:
05:3f:8c:44:1e:21:42:21:43:fa:78:ab:ff:8e:79:
60:b1:3c:72:60:0e:a2:7e:cc:9b:30:9a:a9:fa:80:
66:69:56:de:74:1f:8d:f6:b0:03:96:ff:50:b2:f0:
fd:e4:83:00:11:31:14:a5:66:db:f2:80:d2:c4:05:
b7:da:10:c5:1c:6d:9b:ce:e2:54:d2:10:b2:a7:6d:
56:f7:29:2c:f5:1d:fc:e7:65:9d:d1:6e:0b:c0:dc:
5f:b6:a2:0d:b1:9d:df:86:85:69:ab:0b:ce:22:11:
7e:e0:58:e7:ca:4a:4a:5e:b7:e5:af:aa:ba:54:66:
11:86:6e:5e:13:c7:b9:18:c0:fa:47:f1:59:14:16:
55:93:60:69:15:5f:75:4d:07:89:64:97:fe:21:28:
38:31:b3:92:94:81:31:68:3c:5a:31:fa:d6:07:9f:
0f:8a:de:03:7b:c7:b5:a2:36:b5:d7:b7:85:be:60:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:DB:07:4B:49:38:62:AC:50:D1:C8:71:8C:32:E3:32:B9:0E:0A
X509v3 Authority Key Identifier:
keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1b:ff:19:97:85:24:1c:17:59:04:a9:75:45:2e:2c:4c:5b:
41:74:ac:28:e3:18:74:0c:70:f0:57:90:39:6f:b3:72:9f:7a:
36:da:71:cb:ff:d1:2e:3e:9b:0b:73:5a:1a:4b:18:81:07:04:
9d:66:41:62:45:4c:a2:e4:52:fe:fd:5d:f0:38:23:c8:d7:53:
79:0a:f3:d2:35:24:3c:03:55:bb:ac:1c:23:d1:78:34:62:c5:
77:46:46:16:7a:a9:8f:cf:0b:8d:8d:d1:c1:ce:62:63:c6:37:
ae:2e:a4:39:41:8b:17:4d:b6:85:4e:c7:36:24:7a:95:9a:9a:
3f:12:b7:25:33:f3:33:ca:f3:76:56:e4:52:30:ac:de:c9:24:
a6:b7:e0:1c:f0:e8:a4:8c:df:db:70:d5:30:d4:ee:ec:fe:5d:
c9:b6:f3:25:84:4e:c2:14:1e:40:ba:0a:5f:92:a9:c9:b3:ac:
13:a0:6a:78:25:8d:48:d7:1a:98:c6:63:b9:c4:e5:55:22:75:
d5:b9:ee:d1:18:92:66:44:df:1e:17:44:dc:e1:96:12:64:d3:
33:2e:6e:03:68:1b:ca:b7:01:36:b3:e8:46:c9:fc:90:eb:16:
a4:49:ac:f9:36:4c:02:e2:3c:9f:e6:f6:85:25:42:3a:10:eb:
56:6c:c6:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGn9+zpu09Nqx/A2pAL45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjdjNDU4MjcxZWM5NTNjOWYwYjg5YzIwNzBiODQ1OWFh
YTZiOTYwHhcNMjYwNzI5MDkwMDIyWhcNMjYwNzMwMDkwMDIyWjAzMTEwLwYDVQQD
EyhiODg0ZGIwNzRiNDkzODYyYWM1MGQxYzg3MThjMzJlMzMyYjkwZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bzQo/UlB4oBAZXoUxblSNd/orHq
G6QVlSYM/SiZg1oCVM9ekvM6cGZiiQw15hrYtcJcVdJ4Skj9snxw7Q0jTys3x/a8
WbkUTucFP4xEHiFCIUP6eKv/jnlgsTxyYA6ifsybMJqp+oBmaVbedB+N9rADlv9Q
svD95IMAETEUpWbb8oDSxAW32hDFHG2bzuJU0hCyp21W9yks9R3852Wd0W4LwNxf
tqINsZ3fhoVpqwvOIhF+4FjnykpKXrflr6q6VGYRhm5eE8e5GMD6R/FZFBZVk2Bp
FV91TQeJZJf+ISg4MbOSlIExaDxaMfrWB58Pit4De8e1oja117eFvmBsLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiE2wdLSThirFDRyHGMMuMyuQ4KMB8GA1UdIwQY
MBaAFEe3xFgnHslTyfC4nCBwuEWaqmuWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdmRVdDY2V5VlBKOExpY0lIQzRSWnFxYTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NGNmODktNjA4NS00MWVkLThhOGEt
MzkzNTIyYTUxYmNjLzEvUjdmRVdDY2V5VlBKOExpY0lIQzRSWnFxYTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NGNmODktNjA4NS00MWVkLThhOGEtMzkzNTIyYTUxYmNj
LzEvUjdmRVdDY2V5VlBKOExpY0lIQzRSWnFxYTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxv/GZeF
JBwXWQSpdUUuLExbQXSsKOMYdAxw8FeQOW+zcp96Ntpxy//RLj6bC3NaGksYgQcE
nWZBYkVMouRS/v1d8DgjyNdTeQrz0jUkPANVu6wcI9F4NGLFd0ZGFnqpj88LjY3R
wc5iY8Y3ri6kOUGLF022hU7HNiR6lZqaPxK3JTPzM8rzdlbkUjCs3skkprfgHPDo
pIzf23DVMNTu7P5dybbzJYROwhQeQLoKX5KpybOsE6BqeCWNSNcamMZjucTlVSJ1
1bnu0RiSZkTfHhdE3OGWEmTTMy5uA2gbyrcBNrPoRsn8kOsWpEms+TZMAuI8n+b2
hSVCOhDrVmzGNA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:31 2026 by rpki-client