Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: OUQl/jL7ubgTMnqyPm1xQfcTfa0MYISbgDh6vae0i/Q=
Subject key identifier: 43:F2:C3:76:ED:D7:EC:75:C0:66:20:7C:D6:2E:EB:76:A8:F8:19:ED
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 019FAABF3555083655023D1220F0D154D991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 22:01:25 +0000
Manifest this update: Tue 28 Jul 2026 22:01:25 +0000
Manifest next update: Wed 29 Jul 2026 22:01:25 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: ihHIYbmX8KNslNK4lkWpIRJtpRv33tjHcT+eFv4MieQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:35:55:08:36:55:02:3d:12:20:f0:d1:54:d9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Jul 28 22:01:25 2026 GMT
Not After : Jul 29 22:01:25 2026 GMT
Subject: CN=43f2c376edd7ec75c066207cd62eeb76a8f819ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:ac:4e:85:db:7f:8c:83:85:0f:82:11:17:
7c:01:40:83:fa:b8:b1:31:cc:45:76:2a:8d:cb:d4:
6b:27:db:d6:dd:83:8a:4b:38:99:b1:3d:40:6d:57:
50:e4:c5:be:a6:f3:e1:08:f1:b3:9a:78:77:62:1e:
20:7e:64:90:f0:d8:d6:a9:af:83:b7:2d:37:09:58:
78:aa:50:58:c2:ba:a4:c9:88:ae:57:61:b9:5b:ce:
b6:53:3e:6a:24:92:50:22:3e:af:d4:15:a0:1b:79:
5c:78:a3:1c:00:4f:24:88:8d:fd:4a:db:c9:8f:97:
0a:35:4b:2f:83:bf:69:65:47:85:3e:e3:73:4a:14:
1d:60:9a:f9:ba:21:e0:3a:12:f3:90:3c:83:4e:8e:
8e:bc:46:30:ae:70:ad:d3:fb:ee:43:65:60:a3:56:
09:c3:61:64:00:b6:ed:06:02:da:06:23:5a:f1:ac:
a3:f8:00:97:2e:6c:d9:1c:1d:cf:38:e1:bd:59:86:
e4:c6:d3:3a:b8:09:27:b5:f7:4e:51:aa:68:55:5b:
38:0b:fb:29:11:6e:13:7c:1f:46:7b:d4:66:5f:97:
b4:4a:01:5a:ee:50:96:86:66:73:1b:d8:1f:71:ac:
28:3d:e5:73:96:a6:d5:db:93:0d:5a:8a:28:2f:8d:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:C3:76:ED:D7:EC:75:C0:66:20:7C:D6:2E:EB:76:A8:F8:19:ED
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:bd:7e:d2:2e:e1:61:a9:7d:32:ee:ff:6e:9a:47:4d:2a:
f9:d5:fd:b5:7c:b9:9d:cc:e6:b2:16:15:2f:67:52:56:d7:e6:
ad:e1:a1:48:83:a9:a9:6b:55:05:5a:47:78:1f:80:22:ba:40:
38:e7:1d:fa:05:ce:2a:28:05:6e:76:ed:cb:54:65:19:28:d7:
c7:cf:de:83:ab:1c:7b:ad:0e:98:ff:63:53:f6:dd:12:1b:c0:
10:c3:32:be:42:4c:6a:fc:08:31:a7:4e:52:59:76:52:2e:68:
79:a2:01:28:f9:75:08:86:db:2a:ec:bd:cb:2f:03:4d:a7:50:
70:2f:1a:93:4c:94:f1:00:aa:56:24:8f:1e:ec:37:cf:62:bb:
53:36:c3:ff:46:33:3e:89:4a:29:65:4b:2c:7b:9c:2a:05:f4:
28:37:c3:8d:e2:0e:1d:8e:c3:6e:13:06:9c:2d:44:27:72:00:
25:5e:90:a0:3d:75:ab:29:91:88:7d:48:45:d0:79:11:c3:eb:
16:5f:43:d9:f8:69:cd:aa:29:8f:77:2e:ef:d4:08:8f:b9:0f:
86:7b:e9:13:10:3c:9f:ba:a1:c7:91:f9:fa:31:f5:05:90:ff:
e4:e9:84:7d:ae:d6:76:92:09:4f:28:2d:f0:b8:b0:68:31:5a:
65:aa:aa:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvzVVCDZVAj0SIPDRVNmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDYwZDIwMTc5NWE2YTk5MmVkNGFjMThiYjdjNTJjMTA4
Yjc4NTIwHhcNMjYwNzI4MjIwMTI1WhcNMjYwNzI5MjIwMTI1WjAzMTEwLwYDVQQD
Eyg0M2YyYzM3NmVkZDdlYzc1YzA2NjIwN2NkNjJlZWI3NmE4ZjgxOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vusToXbf4yDhQ+CERd8AUCD+rix
McxFdiqNy9RrJ9vW3YOKSziZsT1AbVdQ5MW+pvPhCPGzmnh3Yh4gfmSQ8NjWqa+D
ty03CVh4qlBYwrqkyYiuV2G5W862Uz5qJJJQIj6v1BWgG3lceKMcAE8kiI39StvJ
j5cKNUsvg79pZUeFPuNzShQdYJr5uiHgOhLzkDyDTo6OvEYwrnCt0/vuQ2Vgo1YJ
w2FkALbtBgLaBiNa8ayj+ACXLmzZHB3POOG9WYbkxtM6uAkntfdOUapoVVs4C/sp
EW4TfB9Ge9RmX5e0SgFa7lCWhmZzG9gfcawoPeVzlqbV25MNWoooL438LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPyw3bt1+x1wGYgfNYu63ao+BntMB8GA1UdIwQY
MBaAFNtGDSAXlaapku1KwYu3xSwQi3hSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2Ut
ZTgyZWQzZDc2YTg3LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2UtZTgyZWQzZDc2YTg3
LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwu9ftIu
4WGpfTLu/26aR00q+dX9tXy5nczmshYVL2dSVtfmreGhSIOpqWtVBVpHeB+AIrpA
OOcd+gXOKigFbnbty1RlGSjXx8/eg6sce60OmP9jU/bdEhvAEMMyvkJMavwIMadO
Ull2Ui5oeaIBKPl1CIbbKuy9yy8DTadQcC8ak0yU8QCqViSPHuw3z2K7UzbD/0Yz
PolKKWVLLHucKgX0KDfDjeIOHY7DbhMGnC1EJ3IAJV6QoD11qymRiH1IRdB5EcPr
Fl9D2fhpzaopj3cu79QIj7kPhnvpExA8n7qhx5H5+jH1BZD/5OmEfa7WdpIJTygt
8LiwaDFaZaqqwg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:52 2026 by rpki-client