Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: vlLUXnjcsmiAYzJCW+EGVPUBP/UffYJoGVgync3i9p0=
Subject key identifier: 40:A5:53:10:B6:C7:66:FC:18:B3:24:AD:8A:88:CA:A7:73:B6:D1:09
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019FAD1AF3BF4C551D05C9865B4DEAA47047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 09:00:52 +0000
Manifest this update: Wed 29 Jul 2026 09:00:52 +0000
Manifest next update: Thu 30 Jul 2026 09:00:52 +0000
Files and hashes: 1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: cqCzfg1jNsQiApDCkj6IJB2xyVxp0PUUY9rynOMrOyo=)
3: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f3:bf:4c:55:1d:05:c9:86:5b:4d:ea:a4:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jul 29 09:00:52 2026 GMT
Not After : Jul 30 09:00:52 2026 GMT
Subject: CN=40a55310b6c766fc18b324ad8a88caa773b6d109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:c5:0f:b9:74:f0:9a:3c:d5:3e:58:6e:6d:
aa:fa:cc:1b:10:4d:b1:8f:38:98:90:9e:c1:a1:dd:
47:61:74:b4:1e:a7:cc:48:aa:d5:62:90:30:a7:1d:
b7:b6:30:33:0d:c1:82:f0:5f:df:07:03:c1:9c:21:
11:97:fc:23:bc:c2:7d:7b:65:c2:f6:d7:bb:75:3a:
1c:6e:65:39:e7:5a:55:81:ff:9d:59:f1:ea:eb:21:
a9:66:03:b6:db:51:ac:22:0b:b3:36:89:b0:0e:fa:
98:44:7b:f7:99:c7:44:46:ce:77:42:58:28:e2:0c:
2f:73:af:b8:7e:c1:fa:82:de:01:4c:db:db:8e:83:
bd:b4:6a:9e:ed:78:b7:a4:d9:44:fd:9a:60:c4:df:
34:7e:fd:95:1a:4d:84:cd:d3:f4:15:f1:3e:3b:b7:
05:44:14:6f:88:d0:36:14:3e:29:48:74:c9:1f:d3:
40:1d:e7:0f:19:7f:98:9d:80:a4:12:d3:15:d5:4d:
22:60:b3:f6:d6:64:a0:4a:88:2a:f8:67:ff:c7:a3:
a6:31:2a:a3:e0:6a:ab:90:ff:09:cd:f4:dc:14:e9:
17:f3:9b:c2:40:cf:cb:dd:fc:06:bb:fe:d5:ff:6e:
0a:27:fc:9a:df:9d:f8:83:71:77:45:77:4b:79:fe:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:53:10:B6:C7:66:FC:18:B3:24:AD:8A:88:CA:A7:73:B6:D1:09
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bd:47:cc:c6:88:2e:e7:94:88:ac:04:12:a2:0e:ae:00:0b:
40:7a:c9:96:92:0d:cd:45:ea:b0:1f:05:7f:8e:b8:c8:3c:39:
d6:e8:db:8e:9c:46:40:bf:92:d9:78:19:ea:40:2e:ee:aa:f5:
74:da:02:cc:d3:65:62:28:52:b4:7e:ba:03:97:eb:54:ba:f0:
44:5a:4b:ff:c2:80:02:9b:23:92:95:80:f0:6e:13:59:a6:35:
d1:72:2c:1e:70:d7:8d:df:fe:6d:d9:d8:4d:c1:75:e4:b7:8d:
97:3b:af:00:3f:53:d8:f9:a9:94:ab:0e:8a:ed:c6:87:a5:3c:
a0:2f:52:ce:77:f8:c6:85:6a:15:57:51:2d:39:7b:8d:00:02:
5d:76:ba:f9:c8:82:59:8c:42:ef:13:20:22:ee:31:ef:41:a0:
db:47:4a:54:50:7f:b8:06:6a:d3:f4:c7:cf:20:c3:7f:73:18:
17:a6:20:6a:a9:ae:35:93:fb:ab:5f:0f:f8:25:19:2f:c9:cc:
63:0b:a3:89:c1:16:d7:94:b0:54:5f:7c:83:2a:4f:fe:7a:3e:
44:61:61:21:2f:a1:60:c7:8e:3e:c0:c7:68:1f:1f:38:f8:de:
77:bd:f8:4a:60:37:e3:36:93:94:b1:56:e4:62:ce:ae:ea:4f:
16:e1:c3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGvO/TFUdBcmGW03qpHBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk
YzkxZWYwHhcNMjYwNzI5MDkwMDUyWhcNMjYwNzMwMDkwMDUyWjAzMTEwLwYDVQQD
Eyg0MGE1NTMxMGI2Yzc2NmZjMThiMzI0YWQ4YTg4Y2FhNzczYjZkMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyPFD7l08Jo81T5Ybm2q+swbEE2x
jziYkJ7Bod1HYXS0HqfMSKrVYpAwpx23tjAzDcGC8F/fBwPBnCERl/wjvMJ9e2XC
9te7dTocbmU551pVgf+dWfHq6yGpZgO221GsIguzNomwDvqYRHv3mcdERs53Qlgo
4gwvc6+4fsH6gt4BTNvbjoO9tGqe7Xi3pNlE/ZpgxN80fv2VGk2EzdP0FfE+O7cF
RBRviNA2FD4pSHTJH9NAHecPGX+YnYCkEtMV1U0iYLP21mSgSogq+Gf/x6OmMSqj
4GqrkP8JzfTcFOkX85vCQM/L3fwGu/7V/24KJ/ya3534g3F3RXdLef4XnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEClUxC2x2b8GLMkrYqIyqdzttEJMB8GA1UdIwQY
MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct
NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1
LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL1HzMaI
LueUiKwEEqIOrgALQHrJlpINzUXqsB8Ff464yDw51ujbjpxGQL+S2XgZ6kAu7qr1
dNoCzNNlYihStH66A5frVLrwRFpL/8KAApsjkpWA8G4TWaY10XIsHnDXjd/+bdnY
TcF15LeNlzuvAD9T2PmplKsOiu3Gh6U8oC9Sznf4xoVqFVdRLTl7jQACXXa6+ciC
WYxC7xMgIu4x70Gg20dKVFB/uAZq0/THzyDDf3MYF6YgaqmuNZP7q18P+CUZL8nM
YwujicEW15SwVF98gypP/no+RGFhIS+hYMeOPsDHaB8fOPjed734SmA34zaTlLFW
5GLOrupPFuHDBw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:19 2026 by rpki-client