Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: 1re7YNrcMyV6tUjVlWF3Bx9g4NIWh3fy2zJrE1L28KQ=
Subject key identifier: D7:A2:2F:C1:89:13:FD:D3:6C:EA:65:43:BB:82:BE:EC:AD:C0:DD:21
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019FAA888159FC95E595738B8BAFB148ABB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0978
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: UwJPL15HKXZGnSflSydH3+LS6fKpoo71nngPZYiCETk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:81:59:fc:95:e5:95:73:8b:8b:af:b1:48:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=d7a22fc18913fdd36cea6543bb82beecadc0dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:f2:0a:9f:f4:dc:ad:f6:bf:bc:02:42:d6:
dc:44:dc:7b:55:95:2d:a3:c0:8d:38:3f:03:78:c0:
b5:b0:79:03:fa:c9:b4:84:3e:e8:56:fd:cd:0c:19:
42:9c:ba:29:cb:d8:3a:eb:4a:ed:cb:b5:23:4a:bd:
c7:62:20:34:36:33:da:a8:a1:f6:52:d2:bf:eb:34:
09:1f:fb:51:8e:3d:8f:ad:b9:e6:97:6e:96:cc:29:
08:bf:3b:fd:f5:3e:5e:6d:5b:a2:16:12:d1:31:ce:
cc:14:77:df:f0:bc:0c:ff:db:72:45:f6:0d:41:cb:
0d:e3:67:96:70:ab:62:4f:68:97:17:d4:06:7f:a4:
a5:45:53:85:27:4b:5d:8e:b3:d3:1a:f4:d9:2c:73:
02:37:02:fa:cf:1b:e9:5a:ed:54:11:ac:01:1d:03:
ac:0e:6d:9c:47:8a:32:39:ef:d9:3b:50:9f:34:a4:
52:5e:a0:fe:cd:c7:0e:fc:55:fb:aa:c5:32:eb:92:
a8:b6:d8:2a:5b:7a:71:57:67:be:04:20:b8:cd:b1:
b0:44:69:1e:4a:1f:d6:76:50:d3:f5:49:3d:57:4f:
bb:fd:8f:8a:a6:b5:9d:7a:cc:9d:88:13:68:bd:f5:
71:c2:5b:06:0c:83:d7:ef:34:3e:86:66:ae:fc:d6:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A2:2F:C1:89:13:FD:D3:6C:EA:65:43:BB:82:BE:EC:AD:C0:DD:21
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b5:5a:12:7c:b8:73:2e:45:23:cf:8d:e9:39:87:bf:35:ef:
e5:50:c7:dd:2c:df:a9:ce:b9:64:ff:d4:b5:ec:41:ae:2d:d1:
71:d8:75:b5:72:1e:d6:b3:bc:45:7b:4d:7d:77:4b:1e:e1:1e:
df:2b:3a:40:d2:40:c3:39:6b:d8:94:88:c5:b1:71:3b:40:04:
c5:75:44:d8:0a:55:a1:fe:48:41:4f:b6:a5:a7:2b:2c:b7:92:
4d:be:ff:7f:23:14:08:12:c5:5d:af:4e:ad:0c:b7:b5:59:46:
28:aa:58:b3:ca:54:53:d1:cb:be:2b:ad:da:15:0a:8a:60:c5:
24:a3:a7:ea:bd:e1:5f:45:4b:f6:19:7b:30:ef:8c:03:9a:68:
eb:46:24:ab:52:8f:2d:2f:d2:38:ca:e8:52:59:4a:e4:92:c9:
e4:20:c7:5e:14:10:11:6a:b2:4c:7b:ee:69:f5:e1:03:8f:8b:
3f:d1:6e:01:b8:2f:3d:83:51:d3:21:92:61:5c:c8:1d:00:f1:
57:ca:06:8c:b3:a2:f9:dd:89:b7:71:92:a6:24:f3:34:c8:98:
55:5e:74:96:6a:19:28:83:2c:15:38:3e:03:bb:0c:fc:9f:1b:
b1:2a:4e:63:16:04:c2:9e:ff:7f:90:77:bb:7c:fe:b6:07:d7:
bf:76:4d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiIFZ/JXllXOLi6+xSKu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwNzI4MjEwMTQwWhcNMjYwNzI5MjEwMTQwWjAzMTEwLwYDVQQD
EyhkN2EyMmZjMTg5MTNmZGQzNmNlYTY1NDNiYjgyYmVlY2FkYzBkZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAninyCp/03K32v7wCQtbcRNx7VZUt
o8CNOD8DeMC1sHkD+sm0hD7oVv3NDBlCnLopy9g660rty7UjSr3HYiA0NjPaqKH2
UtK/6zQJH/tRjj2Prbnml26WzCkIvzv99T5ebVuiFhLRMc7MFHff8LwM/9tyRfYN
QcsN42eWcKtiT2iXF9QGf6SlRVOFJ0tdjrPTGvTZLHMCNwL6zxvpWu1UEawBHQOs
Dm2cR4oyOe/ZO1CfNKRSXqD+zccO/FX7qsUy65KottgqW3pxV2e+BCC4zbGwRGke
Sh/WdlDT9Uk9V0+7/Y+KprWdesydiBNovfVxwlsGDIPX7zQ+hmau/NbdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeiL8GJE/3TbOplQ7uCvuytwN0hMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbVaEny4
cy5FI8+N6TmHvzXv5VDH3Szfqc65ZP/UtexBri3Rcdh1tXIe1rO8RXtNfXdLHuEe
3ys6QNJAwzlr2JSIxbFxO0AExXVE2ApVof5IQU+2pacrLLeSTb7/fyMUCBLFXa9O
rQy3tVlGKKpYs8pUU9HLviut2hUKimDFJKOn6r3hX0VL9hl7MO+MA5po60Ykq1KP
LS/SOMroUllK5JLJ5CDHXhQQEWqyTHvuafXhA4+LP9FuAbgvPYNR0yGSYVzIHQDx
V8oGjLOi+d2Jt3GSpiTzNMiYVV50lmoZKIMsFTg+A7sM/J8bsSpOYxYEwp7/f5B3
u3z+tgfXv3ZNxg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:55 2026 by rpki-client