Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: rsHDNJc9RBew6lJHaULC3TYx7slF72aFtO/FiI9TWzE=
Subject key identifier: E3:03:89:C9:4E:68:CC:25:6E:33:1C:FC:96:99:BE:76:90:21:33:4B
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019FA899AD8B9FA720CDFB78F63AAFB88254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 12:01:11 +0000
Manifest this update: Tue 28 Jul 2026 12:01:11 +0000
Manifest next update: Wed 29 Jul 2026 12:01:11 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: r/Lgk+Xv0NB8ZV6ZkeOpp/uYvNIy2tOsC987YFE+Ykc=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ad:8b:9f:a7:20:cd:fb:78:f6:3a:af:b8:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Jul 28 12:01:11 2026 GMT
Not After : Jul 29 12:01:11 2026 GMT
Subject: CN=e30389c94e68cc256e331cfc9699be769021334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:f9:9c:8e:81:a5:fc:6d:d4:f8:7f:dd:4c:
8e:8d:bf:92:f6:c6:72:eb:76:8a:56:db:f4:08:84:
75:c3:83:d0:ec:c5:d3:e7:76:70:97:72:3c:5e:88:
18:fe:1a:b1:f9:b2:da:24:c1:b8:85:f1:d7:ae:3a:
49:ec:09:3c:6b:d2:95:7a:6a:7a:b0:79:15:19:f3:
6f:f2:4b:41:38:96:1d:e4:30:31:0e:07:16:76:a3:
6b:9f:13:bc:cb:80:07:e3:a5:2c:72:b0:0f:f3:e8:
6c:64:da:81:4f:db:ee:3c:27:42:f7:e5:69:54:2c:
14:ef:46:f2:4d:fb:8a:90:5d:d9:c8:83:eb:da:c9:
25:e7:48:a6:da:ac:95:33:f0:9f:16:ae:8c:a4:54:
43:4d:52:82:72:34:5b:2f:2a:ee:b3:7f:2c:18:8d:
6b:27:f6:1a:40:5d:bd:34:80:49:e0:be:88:11:66:
9b:18:1e:35:6f:36:70:5c:e0:b9:02:fb:60:a7:32:
11:7f:62:d8:bb:84:1f:90:61:03:ad:91:5f:38:e3:
35:51:66:3b:12:e6:b5:76:49:42:3c:5a:9b:a3:eb:
5b:77:a9:6a:85:b5:5c:87:a0:3d:16:83:16:c1:41:
77:3b:ea:2d:10:9f:14:f8:c4:ec:0e:29:f5:a4:97:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:89:C9:4E:68:CC:25:6E:33:1C:FC:96:99:BE:76:90:21:33:4B
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:47:ba:0e:ec:9e:d5:7d:00:13:ef:0d:3a:19:97:dc:dc:8f:
a1:95:76:c6:2a:3a:bc:47:d9:d0:b4:6c:bf:94:d8:0c:74:6c:
0d:da:b8:2e:cf:d2:7a:fa:c3:d3:b8:e4:9c:41:24:ee:77:78:
be:82:68:b4:9e:d7:63:44:68:45:ec:85:aa:7f:ea:79:58:7e:
45:27:07:71:f4:2a:67:f3:d9:1a:e4:67:06:04:4a:85:5a:c6:
89:75:dd:1d:4c:14:71:1b:6b:31:4a:f7:99:a3:89:b0:65:cc:
53:8d:a7:2b:39:6a:54:67:06:ba:2f:d2:0a:df:13:ba:39:f7:
ea:e7:67:30:16:e5:ae:71:01:50:f2:49:29:bf:72:e5:59:78:
62:2e:d1:e5:3d:eb:94:25:cf:74:88:77:ad:e6:8c:44:5e:2d:
90:56:41:97:78:b1:9d:57:7b:09:d4:1d:c4:69:41:96:fb:85:
b5:1b:21:9b:68:2f:41:db:56:d4:9f:ad:69:76:18:34:de:8f:
8d:76:da:17:9e:19:51:62:10:e1:ae:4e:72:af:0a:aa:0e:f4:
9f:da:06:05:41:dd:98:e7:2f:fd:3b:75:32:5b:6e:0d:9f:2e:
93:ee:dd:d0:36:8d:1d:0f:32:15:96:ba:e2:eb:d2:df:a9:08:
1e:18:eb:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+oma2Ln6cgzft49jqvuIJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzMyMDk2MjVlMmEwM2RkZWVjZjkxYmI0ODA1NDhlNTcy
OWQ0NzkwHhcNMjYwNzI4MTIwMTExWhcNMjYwNzI5MTIwMTExWjAzMTEwLwYDVQQD
EyhlMzAzODljOTRlNjhjYzI1NmUzMzFjZmM5Njk5YmU3NjkwMjEzMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOD5nI6Bpfxt1Ph/3UyOjb+S9sZy
63aKVtv0CIR1w4PQ7MXT53Zwl3I8XogY/hqx+bLaJMG4hfHXrjpJ7Ak8a9KVemp6
sHkVGfNv8ktBOJYd5DAxDgcWdqNrnxO8y4AH46UscrAP8+hsZNqBT9vuPCdC9+Vp
VCwU70byTfuKkF3ZyIPr2skl50im2qyVM/CfFq6MpFRDTVKCcjRbLyrus38sGI1r
J/YaQF29NIBJ4L6IEWabGB41bzZwXOC5AvtgpzIRf2LYu4QfkGEDrZFfOOM1UWY7
Eua1dklCPFqbo+tbd6lqhbVch6A9FoMWwUF3O+otEJ8U+MTsDin1pJcH/QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOMDiclOaMwlbjMc/JaZvnaQITNLMB8GA1UdIwQY
MBaAFPlzIJYl4qA93uz5G7SAVI5XKdR5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YTWdsaVhpb0QzZTdQa2J0SUJVamxjcDFIay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYWY1NGU4LWJkNjMtNDI3ZC04Y2M4
LWY0ZWNlYmJiMWVjMi8xLzEtWE1nbGlYaW9EM2U3UGtidElCVWpsY3AxSGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkL2FmNTRlOC1iZDYzLTQyN2QtOGNjOC1mNGVjZWJiYjFl
YzIvMS8xLVhNZ2xpWGlvRDNlN1BrYnRJQlVqbGNwMUhrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUe6
Duye1X0AE+8NOhmX3NyPoZV2xio6vEfZ0LRsv5TYDHRsDdq4Ls/SevrD07jknEEk
7nd4voJotJ7XY0RoReyFqn/qeVh+RScHcfQqZ/PZGuRnBgRKhVrGiXXdHUwUcRtr
MUr3maOJsGXMU42nKzlqVGcGui/SCt8Tujn36udnMBblrnEBUPJJKb9y5Vl4Yi7R
5T3rlCXPdIh3reaMRF4tkFZBl3ixnVd7CdQdxGlBlvuFtRshm2gvQdtW1J+taXYY
NN6PjXbaF54ZUWIQ4a5Ocq8Kqg70n9oGBUHdmOcv/Tt1MltuDZ8uk+7d0DaNHQ8y
FZa64uvS36kIHhjrZA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:26 2026 by rpki-client