Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: pxQmm/kkNrEflCAEXadcV0pzSPAWSPzoA98suoeV++c=
Subject key identifier: 8D:7E:84:01:F0:7B:C2:2A:2E:79:F5:2C:DC:64:C2:C6:6C:2D:8A:72
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 019FAB631E7C66DA9B5D0EFC48E7DC69A62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 01:00:27 +0000
Manifest this update: Wed 29 Jul 2026 01:00:27 +0000
Manifest next update: Thu 30 Jul 2026 01:00:27 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: tN03gs1YW+iSlT2tRfQC960LmqnH76bkrTNmDYqxrN8=)
2: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
3: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
4: kj8-3DtT32XqscwKCiQPzi9o7X4.roa (hash: VlQ7LnPKpNwk4BdUZ5Ryr+mzC2TSKzAr4UDFF48gtfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:1e:7c:66:da:9b:5d:0e:fc:48:e7:dc:69:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jul 29 01:00:27 2026 GMT
Not After : Jul 30 01:00:27 2026 GMT
Subject: CN=8d7e8401f07bc22a2e79f52cdc64c2c66c2d8a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:ca:6c:7b:84:c7:b9:de:08:35:f7:b3:da:
50:a5:0b:30:ea:ce:aa:e8:52:34:b2:67:dd:2e:e7:
9d:89:b3:82:3f:c4:0b:39:e6:f5:c3:db:dc:d9:ea:
2a:03:30:d8:fe:d1:3e:63:c7:0c:b5:43:4c:30:b6:
c9:08:c1:1a:dc:a9:68:9d:f1:20:3c:c8:4b:10:4c:
37:28:f6:3c:ee:06:b8:34:d0:a0:61:33:9b:39:78:
14:44:b4:b3:ee:44:32:bd:6b:17:d8:a0:75:a3:ac:
35:fc:d2:07:33:00:0e:85:c1:27:89:d1:54:2b:f6:
86:4f:59:b1:a6:70:b3:f2:d3:08:c6:1f:0b:b2:a2:
35:27:bd:81:83:db:ee:f0:78:83:76:a1:fb:7d:07:
f8:63:c1:81:f6:20:b9:fd:22:46:22:a8:63:30:0b:
0d:21:4a:69:87:d3:b0:58:e7:fc:e3:c8:0d:d1:33:
9a:99:e9:c4:48:aa:8e:29:34:4c:d2:f3:94:49:18:
66:0b:ab:43:bd:c1:3c:64:88:5c:f3:ec:56:fe:a1:
f3:ba:47:0e:4d:4a:3d:04:7b:08:01:0c:ca:e8:b8:
df:17:c1:45:77:0b:34:76:49:29:83:ca:21:da:55:
82:a3:5a:5c:59:96:c0:98:9c:ed:97:d0:fa:14:72:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:84:01:F0:7B:C2:2A:2E:79:F5:2C:DC:64:C2:C6:6C:2D:8A:72
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:7c:0d:50:cd:6e:d3:89:58:ca:bb:fd:c6:1d:64:a8:8f:
be:4c:69:9e:69:d3:64:6a:94:f7:27:02:10:d7:48:63:0f:10:
96:96:b4:d6:0c:8f:b2:4b:58:39:9f:01:9b:80:dd:83:81:28:
50:ad:c3:c2:62:3a:1c:76:3c:89:86:e9:62:37:71:b2:37:1f:
c0:86:ce:31:ae:d0:3e:51:23:f1:19:67:ad:73:54:47:5b:a5:
85:4a:6b:8d:3c:c1:67:53:7a:f8:db:a1:f4:01:ed:63:02:d9:
97:c7:01:c0:0d:de:21:d1:a3:c0:47:ac:b7:f6:36:53:1a:33:
f9:37:d4:d9:ea:aa:98:35:d0:3f:4c:0c:4e:19:e0:87:c7:25:
a9:02:bf:2a:45:8a:62:c4:86:57:62:3c:4c:83:43:e8:d5:e2:
2c:17:dc:cf:0f:fb:4f:93:6b:70:e6:9a:28:a1:13:fc:96:e4:
e3:9f:37:a8:8d:7f:df:7b:48:d1:e2:31:4c:d9:6d:21:92:c7:
ef:cc:97:c3:25:b5:14:69:6f:53:b5:af:93:47:6d:37:6b:ac:
50:19:29:72:7e:2e:0b:ed:ee:24:f3:74:68:8a:e1:3a:35:cc:
a7:ac:e0:eb:fc:60:24:43:2a:27:33:13:a3:16:f8:58:d6:5a:
42:e6:56:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYx58ZtqbXQ78SOfcaaYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjYwNzI5MDEwMDI3WhcNMjYwNzMwMDEwMDI3WjAzMTEwLwYDVQQD
Eyg4ZDdlODQwMWYwN2JjMjJhMmU3OWY1MmNkYzY0YzJjNjZjMmQ4YTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHDKbHuEx7neCDX3s9pQpQsw6s6q
6FI0smfdLuedibOCP8QLOeb1w9vc2eoqAzDY/tE+Y8cMtUNMMLbJCMEa3KlonfEg
PMhLEEw3KPY87ga4NNCgYTObOXgURLSz7kQyvWsX2KB1o6w1/NIHMwAOhcEnidFU
K/aGT1mxpnCz8tMIxh8LsqI1J72Bg9vu8HiDdqH7fQf4Y8GB9iC5/SJGIqhjMAsN
IUpph9OwWOf848gN0TOamenESKqOKTRM0vOUSRhmC6tDvcE8ZIhc8+xW/qHzukcO
TUo9BHsIAQzK6LjfF8FFdws0dkkpg8oh2lWCo1pcWZbAmJztl9D6FHJwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1+hAHwe8IqLnn1LNxkwsZsLYpyMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU58DVDN
btOJWMq7/cYdZKiPvkxpnmnTZGqU9ycCENdIYw8Qlpa01gyPsktYOZ8Bm4Ddg4Eo
UK3DwmI6HHY8iYbpYjdxsjcfwIbOMa7QPlEj8RlnrXNUR1ulhUprjTzBZ1N6+Nuh
9AHtYwLZl8cBwA3eIdGjwEest/Y2Uxoz+TfU2eqqmDXQP0wMThngh8clqQK/KkWK
YsSGV2I8TIND6NXiLBfczw/7T5NrcOaaKKET/Jbk4583qI1/33tI0eIxTNltIZLH
78yXwyW1FGlvU7Wvk0dtN2usUBkpcn4uC+3uJPN0aIrhOjXMp6zg6/xgJEMqJzMT
oxb4WNZaQuZWXA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:47 2026 by rpki-client