Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: jvPIUZ3xeJRzDzdbfcLiQ0gYlBzZ1H25nwtZhKxXSHE=
Subject key identifier: 44:20:E7:A4:BA:6F:58:BF:F0:A0:B0:EA:40:E8:24:44:D2:13:4E:79
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019FA9E3043B00CF5A685BE0166919B8CD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1968
Signing time: Tue 28 Jul 2026 18:00:54 +0000
Manifest this update: Tue 28 Jul 2026 18:00:54 +0000
Manifest next update: Wed 29 Jul 2026 18:00:54 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: 8OKVCD+mbrv3UGYG+VrDabRL2AcU/mlwiJavULc5/14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:04:3b:00:cf:5a:68:5b:e0:16:69:19:b8:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jul 28 18:00:54 2026 GMT
Not After : Jul 29 18:00:54 2026 GMT
Subject: CN=4420e7a4ba6f58bff0a0b0ea40e82444d2134e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:d4:ed:82:37:63:41:c7:81:16:25:56:66:
aa:df:bf:06:fa:58:d6:5d:78:3c:fa:16:c3:de:c8:
dd:97:f2:b4:3c:38:69:71:0b:08:47:fb:65:f9:88:
b8:af:ee:5b:17:27:39:08:e8:cf:56:7b:19:e2:f0:
3b:7f:95:bb:80:40:75:bf:c8:c9:08:9b:d1:bd:8d:
68:f6:0c:ea:33:b4:5b:dd:0a:26:85:e6:bc:ba:d1:
99:55:53:e0:1a:6b:66:81:9a:de:1b:6d:aa:13:bd:
87:91:da:08:59:b5:6c:37:7e:73:6f:b8:47:09:07:
3a:3d:49:10:6e:14:87:3d:e9:37:be:61:35:14:9c:
82:ad:30:f8:6e:09:a5:49:4d:8b:89:98:8d:4e:c2:
57:c1:00:b7:70:5f:d8:4d:ea:64:1b:f4:2e:2b:2a:
4a:b3:75:a7:a8:4a:d2:6b:cb:f4:88:fc:e1:6d:0c:
61:47:0a:f9:73:cb:01:4d:b6:c8:7c:b1:6d:66:ac:
8a:6e:b1:cb:28:ec:f2:10:12:fd:9b:e8:e9:08:39:
ce:38:8c:c0:a5:f1:9f:53:27:da:f7:31:42:1a:ea:
4a:9f:18:0f:40:ae:4b:90:45:91:f0:ce:b6:23:36:
e3:8b:3f:46:9c:fb:63:47:eb:67:a5:34:e6:1b:6a:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:E7:A4:BA:6F:58:BF:F0:A0:B0:EA:40:E8:24:44:D2:13:4E:79
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:f4:2e:e2:c3:d8:e9:59:5d:47:f4:04:04:83:8c:26:70:
1b:2e:af:48:ea:2b:7d:ca:ad:db:ed:1f:12:1b:a8:38:d2:d8:
a0:bd:eb:7d:83:58:3f:ba:79:1b:27:13:f3:09:4b:97:0a:6d:
fe:24:7d:60:20:f8:9e:3b:1a:45:ce:de:7a:6f:70:c2:71:de:
95:cb:26:5a:80:5f:6e:af:e5:08:11:56:3e:2e:ac:8c:1c:5d:
20:5a:d8:9e:9f:d4:c5:fe:6f:36:ee:3f:c1:03:d9:98:ba:73:
8e:6b:c8:d8:c8:2a:e6:ca:84:06:df:25:80:42:e3:e4:8c:84:
7a:dd:e1:9f:51:73:71:31:53:5f:37:02:3f:d9:8b:19:49:8c:
60:32:51:1e:35:9f:c0:6d:c8:7b:07:2e:fd:ac:00:7e:15:91:
43:7c:5c:40:67:c6:23:10:e0:31:69:29:7f:67:30:ab:1c:86:
d0:a1:f8:08:63:f3:e4:a6:0e:54:60:94:48:04:1a:a8:21:2e:
15:99:fa:b7:1e:a2:cb:6b:3a:1f:bd:d3:51:39:71:ed:30:e3:
ab:c5:1c:f7:52:1e:22:52:b2:a4:c9:48:c1:c2:82:a4:92:74:
c6:66:3a:d9:6f:c6:39:45:51:8d:b3:84:04:ab:ea:20:e9:f4:
27:fc:c3:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4wQ7AM9aaFvgFmkZuM2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw
MjI5NTkwHhcNMjYwNzI4MTgwMDU0WhcNMjYwNzI5MTgwMDU0WjAzMTEwLwYDVQQD
Eyg0NDIwZTdhNGJhNmY1OGJmZjBhMGIwZWE0MGU4MjQ0NGQyMTM0ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1njU7YI3Y0HHgRYlVmaq378G+ljW
XXg8+hbD3sjdl/K0PDhpcQsIR/tl+Yi4r+5bFyc5COjPVnsZ4vA7f5W7gEB1v8jJ
CJvRvY1o9gzqM7Rb3Qomhea8utGZVVPgGmtmgZreG22qE72HkdoIWbVsN35zb7hH
CQc6PUkQbhSHPek3vmE1FJyCrTD4bgmlSU2LiZiNTsJXwQC3cF/YTepkG/QuKypK
s3WnqErSa8v0iPzhbQxhRwr5c8sBTbbIfLFtZqyKbrHLKOzyEBL9m+jpCDnOOIzA
pfGfUyfa9zFCGupKnxgPQK5LkEWR8M62Izbjiz9GnPtjR+tnpTTmG2r4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQg56S6b1i/8KCw6kDoJETSE055MB8GA1UdIwQY
MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt
NGVhN2ExYWU5OGRlLzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgtNGVhN2ExYWU5OGRl
LzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRj0LuLD
2OlZXUf0BASDjCZwGy6vSOorfcqt2+0fEhuoONLYoL3rfYNYP7p5GycT8wlLlwpt
/iR9YCD4njsaRc7eem9wwnHelcsmWoBfbq/lCBFWPi6sjBxdIFrYnp/Uxf5vNu4/
wQPZmLpzjmvI2Mgq5sqEBt8lgELj5IyEet3hn1FzcTFTXzcCP9mLGUmMYDJRHjWf
wG3Iewcu/awAfhWRQ3xcQGfGIxDgMWkpf2cwqxyG0KH4CGPz5KYOVGCUSAQaqCEu
FZn6tx6iy2s6H73TUTlx7TDjq8Uc91IeIlKypMlIwcKCpJJ0xmY62W/GOUVRjbOE
BKvqIOn0J/zDHw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:24 2026 by rpki-client