Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: JwCRA38GBX6EWK9j+7wHI5XYJM0D659PQi4bEj/daBg=
Subject key identifier: 84:A4:58:22:E9:B6:B0:8D:16:D1:27:AD:08:A3:3E:E7:D1:3A:A3:ED
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 019FA82BB89027141786059014D35A555356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 10:01:05 +0000
Manifest this update: Tue 28 Jul 2026 10:01:05 +0000
Manifest next update: Wed 29 Jul 2026 10:01:05 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: tsH/FjQv2F7KqTumSWelhh9oBnH5aVfctF1M+PYS1H4=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:b8:90:27:14:17:86:05:90:14:d3:5a:55:53:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Jul 28 10:01:05 2026 GMT
Not After : Jul 29 10:01:05 2026 GMT
Subject: CN=84a45822e9b6b08d16d127ad08a33ee7d13aa3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:31:32:13:ac:e7:3e:d6:e9:91:da:dc:b2:
c0:70:91:d5:32:10:c0:6b:bd:d0:cd:88:f6:9c:9f:
02:1d:0e:72:aa:81:6a:eb:61:c1:3c:d5:e6:5b:0b:
7e:de:a3:27:2d:fb:da:52:98:f4:ce:2c:10:1e:d8:
77:fe:00:e7:8b:9e:c2:98:ec:53:64:63:fb:0a:b8:
9a:24:b8:89:20:e7:c4:2a:b5:d3:31:3e:14:bc:97:
60:a3:59:6f:f2:0f:63:55:18:c5:be:5a:2f:11:5b:
98:28:b0:3d:e4:0b:f4:ec:ac:52:52:d0:f3:74:35:
8c:05:fa:73:c3:5a:97:74:ea:36:26:74:2b:f7:7f:
b6:ea:85:53:36:af:09:87:c9:aa:0d:bc:cd:a0:60:
08:7a:d4:13:35:12:33:44:dd:67:be:64:97:ec:40:
67:e8:c4:ad:fd:0f:2a:fe:93:fd:fd:7b:d3:ea:00:
73:7a:8d:f8:89:a7:c0:4a:3f:8d:b5:ed:0f:41:e0:
a7:16:ed:52:7a:81:82:7f:89:e9:b2:75:b0:5c:2e:
ea:7e:f1:50:ec:9b:0d:e4:8c:8b:cf:75:77:d8:35:
56:b9:26:4a:d4:a5:60:c3:66:b5:03:87:01:ee:29:
03:b0:07:76:6d:7f:c3:72:90:95:93:20:24:cc:fc:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:58:22:E9:B6:B0:8D:16:D1:27:AD:08:A3:3E:E7:D1:3A:A3:ED
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:c9:46:e3:44:bf:a0:fa:57:c5:bb:76:0f:93:f2:ec:8c:
cc:c7:2c:f5:95:19:0c:b7:69:f3:9c:6d:96:7c:83:4c:43:03:
1d:67:62:18:f2:09:d8:f6:cc:fd:f9:b1:92:53:fb:94:88:1b:
96:89:88:8c:1f:26:e5:c0:1b:3c:17:95:e8:9d:de:27:54:b7:
83:71:6e:36:20:08:76:ab:59:33:ed:93:ca:99:50:32:66:c8:
cf:2a:cb:d7:d6:7f:6f:df:22:a0:de:0a:0c:1b:de:43:52:3d:
7d:69:ef:de:63:27:84:26:46:94:0b:1c:4e:ab:69:c6:25:e7:
c0:22:84:c2:e5:41:35:13:f1:c2:60:a2:fc:cb:a1:3f:20:0d:
a6:06:bd:da:a3:a3:3e:45:d3:6e:ba:c2:06:0d:5a:1c:3a:4e:
e3:de:bc:6b:05:50:e7:40:53:be:78:3b:6f:c3:9b:36:00:d5:
ec:6c:5e:04:f4:f6:7a:50:43:d4:7d:5f:8e:69:38:b2:bc:92:
b9:5b:7b:df:93:84:72:19:b9:f6:45:0b:ce:b1:82:74:72:bd:
2a:31:d9:e9:87:df:f1:d6:c6:f2:a5:4c:27:a2:d3:c6:4c:26:
f0:d4:cb:d3:51:a3:09:7d:ba:43:de:cf:7a:f9:96:e2:57:04:
f8:9e:a6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK7iQJxQXhgWQFNNaVVNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODlhNWRkZDMwMDJlODAwOTk5YjVjMTg2N2Y3ODY3ODFi
YWYxM2QwHhcNMjYwNzI4MTAwMTA1WhcNMjYwNzI5MTAwMTA1WjAzMTEwLwYDVQQD
Eyg4NGE0NTgyMmU5YjZiMDhkMTZkMTI3YWQwOGEzM2VlN2QxM2FhM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+wxMhOs5z7W6ZHa3LLAcJHVMhDA
a73QzYj2nJ8CHQ5yqoFq62HBPNXmWwt+3qMnLfvaUpj0ziwQHth3/gDni57CmOxT
ZGP7CriaJLiJIOfEKrXTMT4UvJdgo1lv8g9jVRjFvlovEVuYKLA95Av07KxSUtDz
dDWMBfpzw1qXdOo2JnQr93+26oVTNq8Jh8mqDbzNoGAIetQTNRIzRN1nvmSX7EBn
6MSt/Q8q/pP9/XvT6gBzeo34iafASj+Nte0PQeCnFu1SeoGCf4npsnWwXC7qfvFQ
7JsN5IyLz3V32DVWuSZK1KVgw2a1A4cB7ikDsAd2bX/DcpCVkyAkzPyveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISkWCLptrCNFtEnrQijPufROqPtMB8GA1UdIwQY
MBaAFNSJpd3TAC6ACZm1wYZ/eGeBuvE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmIt
NTI1OWVlZGNhMDdjLzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmItNTI1OWVlZGNhMDdj
LzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOivJRuNE
v6D6V8W7dg+T8uyMzMcs9ZUZDLdp85xtlnyDTEMDHWdiGPIJ2PbM/fmxklP7lIgb
lomIjB8m5cAbPBeV6J3eJ1S3g3FuNiAIdqtZM+2TyplQMmbIzyrL19Z/b98ioN4K
DBveQ1I9fWnv3mMnhCZGlAscTqtpxiXnwCKEwuVBNRPxwmCi/MuhPyANpga92qOj
PkXTbrrCBg1aHDpO4968awVQ50BTvng7b8ObNgDV7GxeBPT2elBD1H1fjmk4sryS
uVt735OEchm59kULzrGCdHK9KjHZ6Yff8dbG8qVMJ6LTxkwm8NTL01GjCX26Q97P
evmW4lcE+J6mHg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:36 2026 by rpki-client