Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: hEZsnMqayKhzZsXj0feFH2XJaXy7D5HtYQi/lp962Go=
Subject key identifier: B9:44:1A:BD:66:29:5E:5B:85:B0:EE:A5:A8:16:B3:B3:90:23:A4:CF
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019FAAF5F4382CB148EDCD9651C6672979B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 1296
Signing time: Tue 28 Jul 2026 23:01:13 +0000
Manifest this update: Tue 28 Jul 2026 23:01:13 +0000
Manifest next update: Wed 29 Jul 2026 23:01:13 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: 6R/VsMwMyTA/NhnCclxoGeVKMSvaJmFXKPIa7uvz1j0=)
3: m_9DNbciOyMJhFYq6AMIc9hId24.roa (hash: tBW7znRdSpU63evh7Ukilhd1TX1abcrpsvoLCnD8lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:f4:38:2c:b1:48:ed:cd:96:51:c6:67:29:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Jul 28 23:01:13 2026 GMT
Not After : Jul 29 23:01:13 2026 GMT
Subject: CN=b9441abd66295e5b85b0eea5a816b3b39023a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:8b:1e:4a:16:1f:3c:73:a1:88:f1:34:fd:
c8:90:88:9a:d3:d8:e0:00:67:46:69:fa:25:0e:02:
85:52:ba:90:b8:53:71:f2:2d:5b:b7:97:a7:76:30:
69:e0:65:19:04:57:53:75:02:b8:da:44:d0:e2:22:
66:d1:93:94:7b:19:65:46:c9:7d:26:5f:1b:69:5c:
8e:67:66:60:1d:4a:1d:51:b8:ca:7c:06:40:d5:5d:
83:3f:a6:00:1b:86:e0:ff:be:05:56:f6:ad:6e:97:
7f:58:0c:8a:c2:b8:b2:ea:d0:28:42:af:1d:74:f2:
79:6b:3e:c5:5a:39:2b:c9:ca:70:94:fa:a1:6f:87:
0d:a8:f8:60:26:b5:4b:b7:4b:60:57:33:a5:7a:bd:
86:a8:82:70:85:6a:84:c3:c1:dc:ca:8f:ad:57:55:
7d:1d:d7:35:04:1e:bf:9e:e7:a9:61:4c:ef:d3:fb:
c8:f5:09:cf:f5:b0:03:2d:51:e5:cf:2a:80:97:d1:
07:b2:bb:e9:7f:43:00:7c:74:0f:f3:d1:91:cf:74:
7d:04:b9:ca:a9:61:44:94:cb:b1:d3:9a:7f:d7:5b:
1b:97:14:df:ad:5d:09:7c:24:7e:69:e3:bf:c3:d3:
f6:d8:81:ef:7f:97:9e:06:5c:01:50:5e:ae:1b:65:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:1A:BD:66:29:5E:5B:85:B0:EE:A5:A8:16:B3:B3:90:23:A4:CF
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d2:cf:c3:05:ae:c4:5b:cb:0d:b7:a3:9d:2f:c2:2d:63:df:
8b:3a:2f:46:76:70:ef:b6:03:46:7d:ac:3c:32:b4:29:0e:6e:
73:3c:cc:29:43:e2:07:b7:b1:1b:eb:ba:bc:b7:c4:63:eb:c9:
8a:71:30:5e:20:58:8f:d8:e2:d7:bc:33:3e:27:0e:a7:63:de:
0d:dc:23:ed:f7:51:2c:26:d8:4c:14:23:5a:ee:60:96:16:91:
ea:d2:ad:96:ba:30:fd:e7:76:8a:11:87:ff:d5:77:ce:be:eb:
38:58:15:58:a3:91:21:8e:21:95:4e:1a:5b:72:a1:5a:d6:36:
17:75:e1:58:be:d3:85:ff:75:a6:79:e9:25:bf:83:a5:8d:8c:
e9:b8:b4:b3:f4:1e:a5:b8:77:6a:b3:47:67:4a:42:db:24:78:
67:40:ef:e6:f1:2f:27:c4:21:52:c7:09:35:86:3a:5c:9f:e5:
94:f2:d8:48:f7:b1:a7:5a:92:cd:01:b0:62:8f:9a:36:cc:33:
0a:48:25:96:f3:16:62:ea:50:8d:57:32:bf:b2:0a:d1:cd:c5:
2d:03:34:8c:a5:ae:aa:c1:b5:c6:f6:3b:7b:1a:fe:91:e5:27:
7d:ec:ad:ef:d4:41:9b:80:2f:47:9b:2f:14:3a:c2:6b:fa:7f:
ac:ca:9c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9fQ4LLFI7c2WUcZnKXm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk
YTEyNjYwHhcNMjYwNzI4MjMwMTEzWhcNMjYwNzI5MjMwMTEzWjAzMTEwLwYDVQQD
EyhiOTQ0MWFiZDY2Mjk1ZTViODViMGVlYTVhODE2YjNiMzkwMjNhNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1euLHkoWHzxzoYjxNP3IkIia09jg
AGdGafolDgKFUrqQuFNx8i1bt5endjBp4GUZBFdTdQK42kTQ4iJm0ZOUexllRsl9
Jl8baVyOZ2ZgHUodUbjKfAZA1V2DP6YAG4bg/74FVvatbpd/WAyKwriy6tAoQq8d
dPJ5az7FWjkrycpwlPqhb4cNqPhgJrVLt0tgVzOler2GqIJwhWqEw8Hcyo+tV1V9
Hdc1BB6/nuepYUzv0/vI9QnP9bADLVHlzyqAl9EHsrvpf0MAfHQP89GRz3R9BLnK
qWFElMux05p/11sblxTfrV0JfCR+aeO/w9P22IHvf5eeBlwBUF6uG2XmnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlEGr1mKV5bhbDupagWs7OQI6TPMB8GA1UdIwQY
MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt
MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3
LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtLPwwWu
xFvLDbejnS/CLWPfizovRnZw77YDRn2sPDK0KQ5uczzMKUPiB7exG+u6vLfEY+vJ
inEwXiBYj9ji17wzPicOp2PeDdwj7fdRLCbYTBQjWu5glhaR6tKtlrow/ed2ihGH
/9V3zr7rOFgVWKORIY4hlU4aW3KhWtY2F3XhWL7Thf91pnnpJb+DpY2M6bi0s/Qe
pbh3arNHZ0pC2yR4Z0Dv5vEvJ8QhUscJNYY6XJ/llPLYSPexp1qSzQGwYo+aNswz
CkgllvMWYupQjVcyv7IK0c3FLQM0jKWuqsG1xvY7exr+keUnfeyt79RBm4AvR5sv
FDrCa/p/rMqcjQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:48 2026 by rpki-client