Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: 9fkqLpLrtFsrc/9M45K1/cZVGo9TTYWXlWD6bjvMTts=
Subject key identifier: FF:44:27:F3:EE:8A:CA:14:FB:61:9B:03:45:6F:E2:08:44:E5:9B:C7
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019FA9756C8755DA48CE301B45C29DED5A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 16:01:12 +0000
Manifest this update: Tue 28 Jul 2026 16:01:12 +0000
Manifest next update: Wed 29 Jul 2026 16:01:12 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: WCi1zkLKiKiG5+iAaMUGmVWqAokuhqeUO/Zc4HtWHLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6c:87:55:da:48:ce:30:1b:45:c2:9d:ed:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jul 28 16:01:12 2026 GMT
Not After : Jul 29 16:01:12 2026 GMT
Subject: CN=ff4427f3ee8aca14fb619b03456fe20844e59bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:02:8a:95:bd:59:d9:f4:75:e7:a7:bc:b7:
b3:58:25:ed:9e:87:27:7a:53:97:81:0d:f2:26:55:
a1:10:42:77:58:d4:a1:92:ff:91:66:1b:f2:42:61:
0f:0c:aa:48:7f:ae:b8:a8:84:92:ae:ce:4d:a5:22:
77:99:1a:8a:ef:16:b0:74:be:f8:bb:70:76:36:65:
11:8f:21:db:86:f3:99:04:f2:27:b1:c2:ea:ea:be:
34:9e:a4:f6:4f:7a:e9:6f:02:a8:2e:7f:90:88:5a:
b2:93:7b:95:3f:f3:57:48:15:a0:4a:e6:b2:df:3e:
a4:3c:d2:43:61:d7:c5:88:90:74:17:46:6c:5e:11:
70:9c:13:61:8b:be:ab:8d:b7:e0:78:53:70:02:21:
9c:2d:2b:b1:d1:15:c9:3d:dc:72:0b:b5:91:da:69:
f5:d2:f2:1e:ef:67:b4:83:51:6a:8a:63:3b:98:c5:
7a:4a:d8:e0:36:2e:a0:13:5f:53:e7:12:5b:55:a8:
35:e4:08:2f:d1:2a:e0:24:b7:3a:8b:e2:6c:56:24:
e2:01:ee:fa:cc:42:f4:7c:a3:31:a1:87:49:f7:3d:
07:e5:a5:67:48:bd:83:01:a2:39:26:9e:02:1c:82:
77:43:b5:47:12:af:62:18:18:cb:2b:1c:82:13:89:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:27:F3:EE:8A:CA:14:FB:61:9B:03:45:6F:E2:08:44:E5:9B:C7
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:50:a3:0f:7f:d7:96:60:e5:e6:f9:23:f3:12:c6:8a:ba:51:
4f:0c:a3:55:91:33:83:36:7f:a7:f3:60:2d:37:bf:f5:fc:49:
9a:1b:d7:55:7e:4a:34:89:81:2e:0c:64:a3:61:6f:af:de:d0:
f4:96:66:9e:59:9b:42:c9:06:2c:ac:ad:bf:0d:32:a4:b5:79:
5c:d7:e9:52:b1:ff:81:27:33:c6:c3:c9:83:d5:ca:f9:0b:08:
7a:4b:83:bc:e3:7e:b1:7d:bf:e6:91:06:16:ba:58:ab:3f:43:
33:fd:0d:33:65:0b:2d:ed:3a:0f:f0:74:4b:f1:6c:d2:9c:e4:
0b:f5:a1:0c:dc:ae:17:82:c1:b8:d1:85:9a:ef:e9:c8:3d:5d:
f9:c7:1e:d7:d2:f3:1a:9f:36:b7:11:bc:3d:33:ad:24:88:09:
e0:1d:23:07:d2:1a:57:4c:f8:2c:1f:94:01:5d:cf:07:32:47:
36:e8:e1:de:86:28:47:80:d1:90:ba:2a:12:e9:42:72:71:14:
ec:ab:13:20:23:65:16:b2:57:31:ad:e7:8e:f2:71:9b:a1:e2:
02:3c:39:ab:51:7a:e4:c4:9f:01:5c:40:84:87:4c:b0:c8:0e:
0f:23:1a:cc:07:62:9f:ee:76:aa:0a:81:cf:23:da:95:48:2c:
39:ab:00:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdWyHVdpIzjAbRcKd7VpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjYwNzI4MTYwMTEyWhcNMjYwNzI5MTYwMTEyWjAzMTEwLwYDVQQD
EyhmZjQ0MjdmM2VlOGFjYTE0ZmI2MTliMDM0NTZmZTIwODQ0ZTU5YmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxgCipW9Wdn0deenvLezWCXtnocn
elOXgQ3yJlWhEEJ3WNShkv+RZhvyQmEPDKpIf664qISSrs5NpSJ3mRqK7xawdL74
u3B2NmURjyHbhvOZBPInscLq6r40nqT2T3rpbwKoLn+QiFqyk3uVP/NXSBWgSuay
3z6kPNJDYdfFiJB0F0ZsXhFwnBNhi76rjbfgeFNwAiGcLSux0RXJPdxyC7WR2mn1
0vIe72e0g1FqimM7mMV6StjgNi6gE19T5xJbVag15Agv0SrgJLc6i+JsViTiAe76
zEL0fKMxoYdJ9z0H5aVnSL2DAaI5Jp4CHIJ3Q7VHEq9iGBjLKxyCE4kPuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9EJ/PuisoU+2GbA0Vv4ghE5ZvHMB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1CjD3/X
lmDl5vkj8xLGirpRTwyjVZEzgzZ/p/NgLTe/9fxJmhvXVX5KNImBLgxko2Fvr97Q
9JZmnlmbQskGLKytvw0ypLV5XNfpUrH/gSczxsPJg9XK+QsIekuDvON+sX2/5pEG
FrpYqz9DM/0NM2ULLe06D/B0S/Fs0pzkC/WhDNyuF4LBuNGFmu/pyD1d+cce19Lz
Gp82txG8PTOtJIgJ4B0jB9IaV0z4LB+UAV3PBzJHNujh3oYoR4DRkLoqEulCcnEU
7KsTICNlFrJXMa3njvJxm6HiAjw5q1F65MSfAVxAhIdMsMgODyMazAdin+52qgqB
zyPalUgsOasA5g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:29:55 2026 by rpki-client