
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: 0SF4ExL/u1BkmVzjFrmORoYboHNWigoSn72mc1comZI=
Subject key identifier: 72:CC:58:CA:B4:0C:2D:95:48:2D:02:9A:79:89:07:59:B7:C5:5A:E2
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019FAA507B1893B113EEA4AA46D9022FB357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 20:00:28 +0000
Manifest this update: Tue 28 Jul 2026 20:00:28 +0000
Manifest next update: Wed 29 Jul 2026 20:00:28 +0000
Files and hashes: 1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: yJbqsPf9HtFPspsIgtyZuzXTipDEkmgNZ3KfeECt2wU=)
6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7b:18:93:b1:13:ee:a4:aa:46:d9:02:2f:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jul 28 20:00:28 2026 GMT
Not After : Jul 29 20:00:28 2026 GMT
Subject: CN=72cc58cab40c2d95482d029a79890759b7c55ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:31:1b:a7:6d:48:ca:dc:9a:26:d0:31:19:
fc:f6:25:ce:01:2a:fa:d4:15:e6:f8:d2:8e:fe:e3:
a4:40:83:9e:e1:2b:70:78:bb:07:60:7e:40:e2:2e:
34:e3:30:78:06:76:db:85:b7:9d:38:1e:ce:2f:36:
a8:72:5f:da:6f:29:2d:6f:08:40:c5:7b:39:65:ff:
c7:8f:9a:4d:13:57:6e:94:08:c4:e9:41:91:39:25:
3d:80:2c:24:e6:59:e5:1d:c9:64:13:5c:aa:ff:64:
f4:e5:15:05:d1:f2:0d:f2:9f:0f:b9:1a:a0:95:c1:
4a:46:06:d2:d6:0b:84:eb:ed:65:26:b6:4e:8e:54:
71:b9:16:27:8e:51:e7:d8:9f:ba:cd:63:2b:98:66:
21:74:02:9b:d6:5e:66:4d:3d:09:c5:c0:50:86:da:
80:ed:13:87:64:db:13:fa:87:bb:9a:84:33:8c:9a:
dd:67:83:1f:a3:35:1f:1a:0c:99:9f:e6:25:56:e2:
f5:37:11:6f:43:af:4d:bf:a3:e7:0f:0c:11:9b:38:
d4:51:71:93:91:85:ed:f1:dc:24:55:ea:fe:73:7a:
14:ea:3d:d4:61:4f:51:93:98:53:00:0a:15:62:2c:
94:ca:1e:27:8d:df:ba:7c:22:8d:60:7e:08:52:cc:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CC:58:CA:B4:0C:2D:95:48:2D:02:9A:79:89:07:59:B7:C5:5A:E2
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7c:6b:93:56:f5:2d:bf:3c:32:17:82:38:8a:fb:30:58:b0:
4f:83:1c:76:e3:bc:42:91:f6:1b:2b:ea:90:12:b2:24:1b:75:
8a:03:1f:aa:73:53:5b:08:1b:a8:b4:9d:ae:00:7b:03:1c:af:
36:a0:94:61:5a:5a:5b:9b:8a:b5:73:83:42:e2:68:cd:db:bf:
6b:a8:1a:ee:10:25:fd:3a:77:ea:e1:12:3f:47:cf:85:2b:47:
6e:2a:7b:9d:39:40:33:7b:04:9f:fa:04:32:fb:e5:71:ce:f3:
63:8f:de:9a:b6:27:2c:94:d3:d4:8c:c3:64:53:2f:96:9a:52:
6c:cd:93:00:52:0d:3e:d3:78:b2:3a:e0:f4:41:de:c8:16:08:
86:12:0c:43:74:d7:b9:7b:c6:de:ee:cb:d2:0a:4c:8e:97:21:
33:e8:f5:0a:1b:a7:a6:6e:14:6e:f7:fe:fe:7c:47:ae:42:1a:
27:51:98:c1:68:6d:5d:10:a2:5b:04:35:0a:f9:ee:84:2a:e4:
00:e7:17:39:aa:9e:ee:3f:c6:5f:2c:62:ba:93:7d:54:ce:6e:
09:1b:98:ed:b7:da:9f:bc:48:39:f9:25:c1:8b:48:fb:14:ed:
83:92:fc:da:14:46:43:51:59:67:ea:c4:77:16:41:27:6f:87:
11:38:8e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUHsYk7ET7qSqRtkCL7NXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5
NDkzNjAwHhcNMjYwNzI4MjAwMDI4WhcNMjYwNzI5MjAwMDI4WjAzMTEwLwYDVQQD
Eyg3MmNjNThjYWI0MGMyZDk1NDgyZDAyOWE3OTg5MDc1OWI3YzU1YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A8xG6dtSMrcmibQMRn89iXOASr6
1BXm+NKO/uOkQIOe4StweLsHYH5A4i404zB4BnbbhbedOB7OLzaocl/abyktbwhA
xXs5Zf/Hj5pNE1dulAjE6UGROSU9gCwk5lnlHclkE1yq/2T05RUF0fIN8p8PuRqg
lcFKRgbS1guE6+1lJrZOjlRxuRYnjlHn2J+6zWMrmGYhdAKb1l5mTT0JxcBQhtqA
7ROHZNsT+oe7moQzjJrdZ4MfozUfGgyZn+YlVuL1NxFvQ69Nv6PnDwwRmzjUUXGT
kYXt8dwkVer+c3oU6j3UYU9Rk5hTAAoVYiyUyh4njd+6fCKNYH4IUswvxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLMWMq0DC2VSC0CmnmJB1m3xVriMB8GA1UdIwQY
MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt
NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw
LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHxrk1b1
Lb88MheCOIr7MFiwT4McduO8QpH2GyvqkBKyJBt1igMfqnNTWwgbqLSdrgB7Axyv
NqCUYVpaW5uKtXODQuJozdu/a6ga7hAl/Tp36uESP0fPhStHbip7nTlAM3sEn/oE
Mvvlcc7zY4/emrYnLJTT1IzDZFMvlppSbM2TAFINPtN4sjrg9EHeyBYIhhIMQ3TX
uXvG3u7L0gpMjpchM+j1Chunpm4Ubvf+/nxHrkIaJ1GYwWhtXRCiWwQ1CvnuhCrk
AOcXOaqe7j/GXyxiupN9VM5uCRuY7bfan7xIOfklwYtI+xTtg5L82hRGQ1FZZ+rE
dxZBJ2+HETiOZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:06 2026 by rpki-client