Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: 97/pksCxI/Y6RXLY8xm7B+zKDLG819jv1ATFFu8DkPg=
Subject key identifier: FF:89:60:F6:63:3D:8B:CB:47:F4:40:B2:26:DE:60:F9:CA:BB:8C:E2
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 019FACE3F7CF1DB78509C979C6BF476CCDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 08:00:48 +0000
Manifest this update: Wed 29 Jul 2026 08:00:48 +0000
Manifest next update: Thu 30 Jul 2026 08:00:48 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: QqL0V1QpqWb6vu8qr3tTLmdetkC598S6iYw8ggO6N04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:f7:cf:1d:b7:85:09:c9:79:c6:bf:47:6c:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jul 29 08:00:48 2026 GMT
Not After : Jul 30 08:00:48 2026 GMT
Subject: CN=ff8960f6633d8bcb47f440b226de60f9cabb8ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:c6:46:cd:83:b0:09:e6:53:50:63:f7:9d:
5d:ce:82:c8:c4:4b:58:65:d9:7a:56:b7:d6:f6:8a:
0d:bc:19:f5:06:69:3c:58:94:1e:0e:58:ad:52:2c:
ed:85:38:f3:9b:58:78:11:47:73:6f:d4:b2:38:ff:
4a:0d:9c:29:3a:65:16:54:cf:51:56:3b:56:8f:ea:
6b:4e:59:99:25:fe:e7:6a:97:fb:59:5a:57:01:c0:
a4:56:37:c0:60:51:bf:c7:b5:c4:f0:13:e4:b2:e3:
d6:49:b5:96:9a:2a:bb:f9:d5:2e:b4:49:f0:05:de:
59:2f:12:3c:a5:26:5e:04:0d:09:8c:2b:4f:b2:be:
94:c8:75:25:20:08:0d:f9:51:a1:f9:c3:5a:ef:85:
c2:28:df:4f:27:11:f4:b3:f9:5f:14:e6:e7:4c:61:
1a:60:de:b5:72:0a:ea:42:81:27:e2:e7:91:b3:79:
a5:c8:34:57:f1:76:21:ca:0e:e2:a8:61:e0:16:c0:
2d:cc:de:99:3f:43:47:ed:61:a4:6e:d9:96:5a:d8:
55:26:11:da:e1:11:bd:6b:99:6e:21:81:9f:b3:6e:
80:6a:a9:dd:de:15:4a:7a:db:47:9b:e0:c1:90:84:
26:1b:22:50:71:c4:20:9b:82:b7:a3:3e:8d:d0:69:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:60:F6:63:3D:8B:CB:47:F4:40:B2:26:DE:60:F9:CA:BB:8C:E2
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c4:09:5e:3f:32:84:92:86:60:ec:35:d0:1b:31:ee:bf:92:
40:4c:5d:fe:a6:77:8d:2b:bb:15:a9:0d:9d:21:77:e7:19:f4:
20:a1:ea:29:6a:1e:88:d0:f0:d3:0a:f0:ec:dd:e2:31:7a:47:
2e:b0:e1:39:b7:b3:e1:41:01:ba:52:e6:8b:db:69:bf:4f:0f:
61:fc:ac:39:96:ba:c1:b7:f9:53:d9:59:f6:a7:ab:33:97:e2:
2a:c6:56:d8:9d:c6:08:25:4b:69:4b:1a:6f:1f:21:7c:45:fc:
8b:a5:f4:ce:21:b6:6b:53:55:63:29:c4:c9:eb:77:39:9d:0f:
46:f6:66:84:23:51:2c:27:b8:e9:62:8e:48:05:36:a1:47:e8:
91:4d:45:e1:68:a9:7c:d7:01:42:83:55:cb:30:75:b8:0a:dc:
0e:d3:42:40:46:2e:3a:38:35:31:f1:70:11:ea:65:5e:98:e3:
7b:9e:b1:14:5c:f0:8c:9c:0b:c4:28:5c:57:f7:ce:39:27:03:
25:b4:9f:5d:78:36:7b:20:6c:ad:7d:91:6b:8e:ec:dc:2c:80:
a6:ce:76:c3:ad:a1:4c:09:dc:6b:a1:84:b2:f7:91:61:5d:cd:
3c:dd:9a:48:a5:10:e7:b9:a3:41:6b:31:1d:1b:d3:f5:a6:ce:
64:4b:5a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s4/fPHbeFCcl5xr9HbM3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3
ODhlZjUwHhcNMjYwNzI5MDgwMDQ4WhcNMjYwNzMwMDgwMDQ4WjAzMTEwLwYDVQQD
EyhmZjg5NjBmNjYzM2Q4YmNiNDdmNDQwYjIyNmRlNjBmOWNhYmI4Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXLGRs2DsAnmU1Bj951dzoLIxEtY
Zdl6VrfW9ooNvBn1Bmk8WJQeDlitUizthTjzm1h4EUdzb9SyOP9KDZwpOmUWVM9R
VjtWj+prTlmZJf7napf7WVpXAcCkVjfAYFG/x7XE8BPksuPWSbWWmiq7+dUutEnw
Bd5ZLxI8pSZeBA0JjCtPsr6UyHUlIAgN+VGh+cNa74XCKN9PJxH0s/lfFObnTGEa
YN61cgrqQoEn4ueRs3mlyDRX8XYhyg7iqGHgFsAtzN6ZP0NH7WGkbtmWWthVJhHa
4RG9a5luIYGfs26Aaqnd3hVKettHm+DBkIQmGyJQccQgm4K3oz6N0GlnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+JYPZjPYvLR/RAsibeYPnKu4ziMB8GA1UdIwQY
MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt
MjMwN2JiNTkyMjVmLzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm
LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcQJXj8y
hJKGYOw10Bsx7r+SQExd/qZ3jSu7FakNnSF35xn0IKHqKWoeiNDw0wrw7N3iMXpH
LrDhObez4UEBulLmi9tpv08PYfysOZa6wbf5U9lZ9qerM5fiKsZW2J3GCCVLaUsa
bx8hfEX8i6X0ziG2a1NVYynEyet3OZ0PRvZmhCNRLCe46WKOSAU2oUfokU1F4Wip
fNcBQoNVyzB1uArcDtNCQEYuOjg1MfFwEeplXpjje56xFFzwjJwLxChcV/fOOScD
JbSfXXg2eyBsrX2Ra47s3CyAps52w62hTAnca6GEsveRYV3NPN2aSKUQ57mjQWsx
HRvT9abOZEtaZw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:23:51 2026 by rpki-client