Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: S3uYWETx/0Jlwn07oIf0/s8CphbvR9Q0obfkSALq9Qo=
Subject key identifier: 49:0E:2B:DC:8E:DD:CE:53:BE:27:F4:4E:2F:D7:4B:6E:A2:BF:ED:E6
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 019FA899B0F644BB4600F0B209C2E5CAF282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 1797
Signing time: Tue 28 Jul 2026 12:01:12 +0000
Manifest this update: Tue 28 Jul 2026 12:01:12 +0000
Manifest next update: Wed 29 Jul 2026 12:01:12 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: AyBn0ca9gIZsUyI9PTj4aC047C4T+gb85x2q4DCIzFI=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:b0:f6:44:bb:46:00:f0:b2:09:c2:e5:ca:f2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jul 28 12:01:12 2026 GMT
Not After : Jul 29 12:01:12 2026 GMT
Subject: CN=490e2bdc8eddce53be27f44e2fd74b6ea2bfede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:ad:72:a0:97:d0:19:bb:c4:d5:21:69:ed:
54:f5:63:73:de:63:af:96:ec:67:2c:ab:9e:d2:b2:
ef:b9:1f:d1:99:68:7c:da:59:f5:0c:94:ba:a3:5a:
1f:cb:7b:3e:94:27:a6:23:d2:ca:52:06:59:d5:b4:
66:6d:3c:f2:07:80:b5:37:38:cc:a2:32:f7:da:10:
1a:03:1b:21:c4:5a:9c:f7:c0:45:6b:3f:06:27:12:
9a:0e:21:a0:5b:7e:7b:5a:a2:c3:6b:ba:3d:be:48:
d5:cb:fa:6b:b8:e6:2d:0b:d1:3f:7d:53:90:b2:5d:
04:75:07:c2:ca:6d:d2:55:75:89:c9:eb:54:26:b0:
b5:8d:9e:a0:64:55:ad:97:42:58:41:aa:55:15:76:
8b:31:e9:95:43:6d:a3:f2:3d:9d:6f:37:86:bf:35:
d7:df:96:a4:01:9d:23:68:cb:20:1d:05:07:02:a5:
d9:ec:89:0c:3f:2a:97:b4:00:ba:91:27:59:32:0d:
21:34:90:ec:29:ba:6b:e1:18:80:69:d1:ee:92:fb:
de:b9:e3:3f:52:d8:8f:3a:3a:00:59:f9:28:ec:a4:
ad:2a:07:94:83:ef:b9:9f:6e:e0:3f:0b:50:20:68:
30:2b:94:ae:de:66:73:30:ae:b0:7a:5b:aa:ed:2e:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:2B:DC:8E:DD:CE:53:BE:27:F4:4E:2F:D7:4B:6E:A2:BF:ED:E6
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f0:15:88:d5:ca:e1:85:bf:73:da:d4:f4:42:75:de:ab:9d:
a4:a1:82:b8:e6:f4:db:db:30:ea:f6:fc:b5:e9:d9:f1:b0:af:
ea:0d:cb:18:4f:47:be:4a:d2:15:e4:a1:20:3b:92:51:ba:9b:
3d:d1:ab:03:15:be:76:76:e6:d6:05:e0:c0:8b:d7:b6:b1:5d:
9e:bb:dc:8b:2b:0c:d6:91:6c:92:c7:ea:9c:cf:20:50:02:2c:
df:5b:29:c1:ef:18:c6:58:54:c1:63:01:a5:78:36:57:dd:5d:
7a:8b:cd:45:e7:e2:0a:4f:0c:26:7a:27:9d:b2:11:ec:63:28:
f0:0b:4f:f5:cd:98:f7:ef:f9:3f:68:05:1b:4f:af:b5:8e:82:
07:12:78:1c:cf:f8:2d:fc:b1:a3:3b:a8:60:da:3d:59:4a:d7:
7c:70:6a:77:b9:c1:9c:d9:18:ac:b6:98:be:61:e9:89:79:34:
28:d7:c3:b1:38:7e:5e:6c:50:52:27:94:55:32:be:92:f7:04:
04:72:59:2c:4a:d3:30:8e:d2:b8:34:75:29:d7:da:50:de:e4:
83:64:c9:d0:4e:3e:5d:15:51:82:6f:19:1c:98:76:1b:7b:ad:
d2:54:c8:f3:c2:9c:de:9f:3d:a1:51:5f:46:7f:8d:02:c6:6b:
7c:9c:1d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ombD2RLtGAPCyCcLlyvKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjYwNzI4MTIwMTEyWhcNMjYwNzI5MTIwMTEyWjAzMTEwLwYDVQQD
Eyg0OTBlMmJkYzhlZGRjZTUzYmUyN2Y0NGUyZmQ3NGI2ZWEyYmZlZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnratcqCX0Bm7xNUhae1U9WNz3mOv
luxnLKue0rLvuR/RmWh82ln1DJS6o1ofy3s+lCemI9LKUgZZ1bRmbTzyB4C1NzjM
ojL32hAaAxshxFqc98BFaz8GJxKaDiGgW357WqLDa7o9vkjVy/pruOYtC9E/fVOQ
sl0EdQfCym3SVXWJyetUJrC1jZ6gZFWtl0JYQapVFXaLMemVQ22j8j2dbzeGvzXX
35akAZ0jaMsgHQUHAqXZ7IkMPyqXtAC6kSdZMg0hNJDsKbpr4RiAadHukvveueM/
UtiPOjoAWfko7KStKgeUg++5n27gPwtQIGgwK5Su3mZzMK6weluq7S74FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkOK9yO3c5Tvif0Ti/XS26iv+3mMB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPAViNXK
4YW/c9rU9EJ13qudpKGCuOb029sw6vb8tenZ8bCv6g3LGE9HvkrSFeShIDuSUbqb
PdGrAxW+dnbm1gXgwIvXtrFdnrvciysM1pFsksfqnM8gUAIs31spwe8YxlhUwWMB
pXg2V91deovNRefiCk8MJnonnbIR7GMo8AtP9c2Y9+/5P2gFG0+vtY6CBxJ4HM/4
LfyxozuoYNo9WUrXfHBqd7nBnNkYrLaYvmHpiXk0KNfDsTh+XmxQUieUVTK+kvcE
BHJZLErTMI7SuDR1KdfaUN7kg2TJ0E4+XRVRgm8ZHJh2G3ut0lTI88Kc3p89oVFf
Rn+NAsZrfJwdjA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:30 2026 by rpki-client