Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: c2SR0p6MOuMF1oI+3o1BOmdVdmH+3Yh0bZl3oXHce3E=
Subject key identifier: C7:EA:CD:0C:B4:02:06:74:26:62:9D:24:E6:34:83:FB:92:CC:45:F7
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019FAC3F1122C81CB694B94C4617A5FFF89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 043D
Signing time: Wed 29 Jul 2026 05:00:42 +0000
Manifest this update: Wed 29 Jul 2026 05:00:42 +0000
Manifest next update: Thu 30 Jul 2026 05:00:42 +0000
Files and hashes: 1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: Q16RjU3vxlBBSsbdJF2hi2FiAKFlEPOhXg2GjsvrqMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:11:22:c8:1c:b6:94:b9:4c:46:17:a5:ff:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Jul 29 05:00:42 2026 GMT
Not After : Jul 30 05:00:42 2026 GMT
Subject: CN=c7eacd0cb402067426629d24e63483fb92cc45f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:5e:f2:0d:f2:e1:90:bc:f7:09:1f:1c:dc:
97:93:d0:25:fc:48:ff:82:76:99:21:bf:61:db:21:
9c:f8:e2:33:0c:c9:ff:75:a5:4c:ce:32:b8:f2:a8:
8d:15:77:d3:21:fa:63:0c:70:b7:ec:e3:15:33:5a:
4b:e2:69:94:d0:38:e5:5f:6f:55:74:e7:9f:e1:fb:
ee:08:c8:77:3e:99:b2:d4:64:d7:fd:50:63:d3:62:
d1:40:a7:48:1f:c3:8a:7d:7e:29:53:02:7b:ac:8b:
67:4a:f2:66:fb:b5:68:f3:25:6c:ec:44:d7:af:f3:
79:ff:91:93:4c:ff:0a:08:24:2c:51:4e:b8:36:b2:
44:19:5d:2f:70:e1:3c:47:90:cb:10:af:53:a8:01:
eb:6e:5f:04:83:69:66:cc:ab:62:3d:c1:7b:b2:e7:
81:57:f0:03:82:8b:4b:24:09:e7:81:83:e2:3e:09:
4e:0d:ee:da:72:9c:96:09:f9:2e:30:6c:5d:66:7c:
bf:2a:34:5e:a7:51:df:46:ff:42:e9:fb:e1:5a:09:
3f:c8:5a:0f:6b:de:07:69:4f:65:e6:0a:45:16:61:
4b:78:21:32:53:15:96:42:6e:08:41:05:5b:95:46:
f0:01:06:a2:ce:fa:1b:98:4d:27:c2:99:9b:9e:a4:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:CD:0C:B4:02:06:74:26:62:9D:24:E6:34:83:FB:92:CC:45:F7
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:9a:3b:af:6e:9f:e9:d2:b3:f1:24:9c:ed:e9:36:55:e8:
f5:f2:46:b1:e8:77:53:83:9a:d3:5e:34:38:d6:9c:a6:d0:0f:
95:07:50:7b:e5:13:11:d2:77:03:84:13:e8:2b:a9:a1:72:e1:
8e:4f:27:6c:f4:a0:58:7b:36:58:a6:36:d9:4f:18:3a:87:09:
d1:85:24:03:f3:3b:88:85:e1:85:eb:17:b3:34:01:1f:d4:45:
22:b5:f9:85:3e:32:67:c3:52:84:3c:ab:c8:23:56:cd:19:57:
10:86:62:a1:f2:56:36:61:cb:69:8f:56:93:d3:ae:5b:83:a1:
4e:64:e2:6d:aa:bc:fa:b8:0c:a2:34:3c:c3:4e:36:f2:78:9c:
53:20:e5:de:a6:65:64:f6:9b:19:f7:69:c3:3b:24:11:e0:7b:
65:06:96:a6:49:30:d6:99:1b:99:5a:23:4f:94:df:58:bc:e6:
1c:e3:32:28:f0:e5:d7:d1:ac:a3:87:a7:e7:f9:98:47:e0:18:
95:1e:0c:a5:8b:15:6d:a2:06:dd:e7:8e:a0:1f:d4:3a:6f:e9:
f3:39:f6:ae:aa:f5:d5:4d:46:8d:23:ce:fc:e0:c7:c0:c7:74:
7a:72:b9:8e:05:35:57:0a:a8:36:39:66:a1:e5:0e:92:a5:16:
d6:f5:e0:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPxEiyBy2lLlMRhel//ifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm
MjYwZmYwHhcNMjYwNzI5MDUwMDQyWhcNMjYwNzMwMDUwMDQyWjAzMTEwLwYDVQQD
EyhjN2VhY2QwY2I0MDIwNjc0MjY2MjlkMjRlNjM0ODNmYjkyY2M0NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj9e8g3y4ZC89wkfHNyXk9Al/Ej/
gnaZIb9h2yGc+OIzDMn/daVMzjK48qiNFXfTIfpjDHC37OMVM1pL4mmU0DjlX29V
dOef4fvuCMh3Ppmy1GTX/VBj02LRQKdIH8OKfX4pUwJ7rItnSvJm+7Vo8yVs7ETX
r/N5/5GTTP8KCCQsUU64NrJEGV0vcOE8R5DLEK9TqAHrbl8Eg2lmzKtiPcF7sueB
V/ADgotLJAnngYPiPglODe7acpyWCfkuMGxdZny/KjRep1HfRv9C6fvhWgk/yFoP
a94HaU9l5gpFFmFLeCEyUxWWQm4IQQVblUbwAQaizvobmE0nwpmbnqRsbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfqzQy0AgZ0JmKdJOY0g/uSzEX3MB8GA1UdIwQY
MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut
ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj
LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqqaO69u
n+nSs/EknO3pNlXo9fJGseh3U4Oa0140ONacptAPlQdQe+UTEdJ3A4QT6CupoXLh
jk8nbPSgWHs2WKY22U8YOocJ0YUkA/M7iIXhhesXszQBH9RFIrX5hT4yZ8NShDyr
yCNWzRlXEIZiofJWNmHLaY9Wk9OuW4OhTmTibaq8+rgMojQ8w0428nicUyDl3qZl
ZPabGfdpwzskEeB7ZQaWpkkw1pkbmVojT5TfWLzmHOMyKPDl19Gso4en5/mYR+AY
lR4MpYsVbaIG3eeOoB/UOm/p8zn2rqr11U1GjSPO/ODHwMd0enK5jgU1VwqoNjlm
oeUOkqUW1vXggA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:22 2026 by rpki-client