Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: LVjfMBWqKd1eu1BsFscEBK55OJlKsnb2HTNIwoGtHbQ=
Subject key identifier: 68:B8:4D:65:56:FA:19:BD:5D:40:4D:ED:69:41:4C:31:AB:43:9E:5E
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019FAA87DCB4987CFDD54C17FD68FD2E989C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 21:00:58 +0000
Manifest this update: Tue 28 Jul 2026 21:00:58 +0000
Manifest next update: Wed 29 Jul 2026 21:00:58 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: noJRbTPrd0sc6ahW49HEZnEQkJMZE3r8efE92Su1z+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:dc:b4:98:7c:fd:d5:4c:17:fd:68:fd:2e:98:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Jul 28 21:00:58 2026 GMT
Not After : Jul 29 21:00:58 2026 GMT
Subject: CN=68b84d6556fa19bd5d404ded69414c31ab439e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:9a:ad:9c:43:bb:33:5c:e2:bb:66:40:58:
36:99:02:65:5b:75:c6:b4:b5:02:66:9a:4a:ec:01:
48:a8:48:f5:7b:72:1b:3f:21:41:1d:0f:70:16:3c:
4e:f5:00:c8:77:17:0e:30:b0:2f:4b:bd:36:e0:41:
51:2b:24:5d:67:c1:c8:dc:cb:27:85:8f:68:2f:53:
23:c3:83:8f:cd:25:03:c4:c0:98:36:ad:0f:b4:9f:
85:3c:bd:39:46:3d:e4:4d:b7:63:fc:e7:b6:1e:67:
d2:51:64:b5:c3:b8:59:3f:a7:57:88:1a:d0:42:45:
4e:98:24:1d:0f:0b:17:b4:74:22:f6:35:00:4e:50:
eb:2c:9b:4a:5a:c7:85:d0:c3:b3:b6:00:72:11:8e:
29:96:32:8e:3a:f7:26:52:5c:47:cb:3e:c3:eb:27:
3f:50:b4:f0:ae:a4:75:4d:bc:c8:bb:d3:10:c9:e6:
fa:8d:0b:8e:96:69:a1:19:51:dd:d6:2a:29:ff:35:
c4:a8:7b:9d:15:79:55:9d:6b:08:7b:8b:dc:df:d5:
c2:9d:e1:0a:e4:22:fe:db:e0:0b:93:b3:cc:b6:a4:
e5:3d:47:ff:c4:5b:a9:ae:13:c6:e0:a7:0b:51:a4:
2e:29:7e:0c:c7:35:a5:33:2d:68:b5:24:19:1a:f9:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:4D:65:56:FA:19:BD:5D:40:4D:ED:69:41:4C:31:AB:43:9E:5E
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:ff:e2:ca:88:79:aa:3e:04:71:57:9e:ee:67:23:80:90:
c7:3f:00:4b:b5:b8:66:19:91:bb:1b:39:00:7a:d4:85:ca:f4:
b6:01:6c:0c:d3:23:e6:83:79:b5:b9:79:5d:a6:29:45:fa:09:
e5:18:fe:2f:6c:96:20:3c:5d:ac:81:4e:fa:0b:1d:c6:d7:60:
07:35:e8:75:aa:7e:0f:09:fd:7d:43:70:20:1d:e7:da:65:1c:
11:c1:f7:6e:4d:61:88:40:9e:d1:99:30:a8:e2:3a:c1:f9:c2:
2a:33:db:37:92:d1:3b:cf:f7:07:17:92:86:48:8b:db:1a:0e:
51:62:c0:af:fe:23:e7:05:e2:e9:18:d1:0e:32:44:05:e8:06:
2b:93:c0:13:b8:f1:c5:dd:5b:d3:19:de:d9:aa:64:1d:f4:2a:
44:32:44:91:b8:5d:7a:76:30:aa:cc:71:14:71:c5:85:d6:86:
12:1c:78:1d:68:21:3a:76:8b:8b:e5:04:05:f3:c7:6e:1d:84:
9b:9a:d5:c4:8d:7c:f8:66:00:56:43:af:db:8d:c6:51:20:72:
99:90:80:0d:be:27:20:44:9a:6f:bf:ce:a7:62:8b:d9:37:85:
f9:85:20:20:4b:4a:c2:b9:91:00:b6:c8:c1:ca:ee:53:d0:e3:
65:39:66:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh9y0mHz91UwX/Wj9LpicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjYwNzI4MjEwMDU4WhcNMjYwNzI5MjEwMDU4WjAzMTEwLwYDVQQD
Eyg2OGI4NGQ2NTU2ZmExOWJkNWQ0MDRkZWQ2OTQxNGMzMWFiNDM5ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQearZxDuzNc4rtmQFg2mQJlW3XG
tLUCZppK7AFIqEj1e3IbPyFBHQ9wFjxO9QDIdxcOMLAvS7024EFRKyRdZ8HI3Msn
hY9oL1Mjw4OPzSUDxMCYNq0PtJ+FPL05Rj3kTbdj/Oe2HmfSUWS1w7hZP6dXiBrQ
QkVOmCQdDwsXtHQi9jUATlDrLJtKWseF0MOztgByEY4pljKOOvcmUlxHyz7D6yc/
ULTwrqR1TbzIu9MQyeb6jQuOlmmhGVHd1iop/zXEqHudFXlVnWsIe4vc39XCneEK
5CL+2+ALk7PMtqTlPUf/xFuprhPG4KcLUaQuKX4MxzWlMy1otSQZGvmEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi4TWVW+hm9XUBN7WlBTDGrQ55eMB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSj/4sqI
eao+BHFXnu5nI4CQxz8AS7W4ZhmRuxs5AHrUhcr0tgFsDNMj5oN5tbl5XaYpRfoJ
5Rj+L2yWIDxdrIFO+gsdxtdgBzXodap+Dwn9fUNwIB3n2mUcEcH3bk1hiECe0Zkw
qOI6wfnCKjPbN5LRO8/3BxeShkiL2xoOUWLAr/4j5wXi6RjRDjJEBegGK5PAE7jx
xd1b0xne2apkHfQqRDJEkbhdenYwqsxxFHHFhdaGEhx4HWghOnaLi+UEBfPHbh2E
m5rVxI18+GYAVkOv243GUSBymZCADb4nIESab7/Op2KL2TeF+YUgIEtKwrmRALbI
wcruU9DjZTlmUg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:41 2026 by rpki-client