Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: 6F9pisBz9KxkSV09shbrxH68gmG2lkmKmbL1XE+8c2A=
Subject key identifier: 21:22:FE:FA:71:29:5F:61:80:07:0A:FD:78:BA:8C:27:40:15:4E:4D
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019FAB2C65E59361459F60962D47398110B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 00:00:41 +0000
Manifest this update: Wed 29 Jul 2026 00:00:41 +0000
Manifest next update: Thu 30 Jul 2026 00:00:41 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: b5VQvpxafWQpJkMtHG8pokekoXFK4mL0ibHl8gV+ZmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:65:e5:93:61:45:9f:60:96:2d:47:39:81:10:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jul 29 00:00:41 2026 GMT
Not After : Jul 30 00:00:41 2026 GMT
Subject: CN=2122fefa71295f6180070afd78ba8c2740154e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:d8:bd:59:25:89:09:f7:13:95:dc:e8:a6:
7b:2f:e5:6d:6e:d0:22:c1:56:57:70:22:e4:f7:7c:
9a:b1:8b:56:97:97:5e:cf:2f:77:d6:de:a9:ae:82:
38:3c:fe:93:c7:a4:f8:d8:18:1a:14:bf:d0:04:1c:
b3:d1:55:d0:69:1b:2f:55:f8:5d:62:46:eb:f7:a3:
da:f5:18:56:2e:3f:5b:41:aa:4f:d4:52:18:82:45:
40:23:9d:46:06:2a:95:e6:f2:41:97:c5:db:04:f9:
78:b9:fb:01:88:bd:3f:c8:f9:56:11:de:cf:fb:00:
50:cd:9a:d6:28:59:e1:56:7b:73:bc:ad:d2:8d:ed:
75:39:45:bc:9c:42:bb:35:c6:62:ab:f4:12:0b:88:
1b:40:63:a9:86:0a:8f:78:2e:7d:28:08:7f:08:60:
8c:32:03:ec:90:20:28:0f:73:ae:e0:0b:a0:50:42:
54:9f:91:94:e1:71:4b:31:ce:ff:48:f0:08:a2:d6:
d2:31:aa:94:4c:71:b7:8c:e9:39:5b:5e:c1:8b:fb:
cb:a4:0b:eb:2a:34:53:68:76:2c:df:fe:dc:b7:05:
7c:8c:73:34:15:1b:ef:e2:e1:48:02:4d:27:5e:62:
02:49:6d:78:f1:84:ec:ef:bf:23:2d:5e:48:e6:1d:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:FE:FA:71:29:5F:61:80:07:0A:FD:78:BA:8C:27:40:15:4E:4D
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f2:5e:d3:2c:aa:de:47:47:39:cb:92:95:bd:4b:09:0a:72:
1c:4e:e4:44:68:63:64:49:7b:18:0e:8a:c8:24:aa:ef:02:d6:
6d:a0:3b:de:1b:bd:a8:a6:d5:d8:7c:00:30:39:d8:0f:1a:b8:
73:8f:b6:9f:15:83:0b:e0:c3:e8:84:89:4c:54:ad:17:b2:a8:
3f:ba:6b:70:bd:a2:3d:3c:ee:86:a1:18:fe:a8:9b:90:0e:8b:
a6:ae:b9:17:85:9a:50:f5:5a:e1:0c:1f:84:7c:98:f3:2a:18:
59:02:10:24:65:11:28:d9:6e:21:61:24:dd:84:af:55:a4:b3:
e2:fa:db:49:ca:57:68:df:0c:a1:50:98:3a:dd:de:92:f8:91:
97:be:9a:43:38:51:33:59:0f:50:a0:46:f7:c1:63:46:ea:6d:
14:6e:ae:41:83:98:8a:26:cb:3b:e2:07:54:c4:bd:24:fe:14:
63:ac:34:c0:5a:cf:fa:e7:d2:e5:d8:e5:82:72:10:2a:d4:85:
1e:39:dd:ee:03:44:ca:21:ec:e4:09:04:01:59:47:30:4e:76:
57:2a:e3:44:67:f8:84:9c:fd:b7:0a:b6:f0:35:82:6f:8a:c5:
3e:a4:8c:22:6d:2e:e9:eb:71:76:84:de:42:a4:6f:ed:13:1e:
40:8a:56:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLGXlk2FFn2CWLUc5gRC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjYwNzI5MDAwMDQxWhcNMjYwNzMwMDAwMDQxWjAzMTEwLwYDVQQD
EygyMTIyZmVmYTcxMjk1ZjYxODAwNzBhZmQ3OGJhOGMyNzQwMTU0ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY3YvVkliQn3E5Xc6KZ7L+VtbtAi
wVZXcCLk93yasYtWl5dezy931t6proI4PP6Tx6T42BgaFL/QBByz0VXQaRsvVfhd
Ykbr96Pa9RhWLj9bQapP1FIYgkVAI51GBiqV5vJBl8XbBPl4ufsBiL0/yPlWEd7P
+wBQzZrWKFnhVntzvK3Sje11OUW8nEK7NcZiq/QSC4gbQGOphgqPeC59KAh/CGCM
MgPskCAoD3Ou4AugUEJUn5GU4XFLMc7/SPAIotbSMaqUTHG3jOk5W17Bi/vLpAvr
KjRTaHYs3/7ctwV8jHM0FRvv4uFIAk0nXmICSW148YTs778jLV5I5h054wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEi/vpxKV9hgAcK/Xi6jCdAFU5NMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifJe0yyq
3kdHOcuSlb1LCQpyHE7kRGhjZEl7GA6KyCSq7wLWbaA73hu9qKbV2HwAMDnYDxq4
c4+2nxWDC+DD6ISJTFStF7KoP7prcL2iPTzuhqEY/qibkA6Lpq65F4WaUPVa4Qwf
hHyY8yoYWQIQJGURKNluIWEk3YSvVaSz4vrbScpXaN8MoVCYOt3ekviRl76aQzhR
M1kPUKBG98FjRuptFG6uQYOYiibLO+IHVMS9JP4UY6w0wFrP+ufS5djlgnIQKtSF
Hjnd7gNEyiHs5AkEAVlHME52VyrjRGf4hJz9twq28DWCb4rFPqSMIm0u6etxdoTe
QqRv7RMeQIpWaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:28 2026 by rpki-client