Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: Lnbj0Kvpp4JNjHLV/c32v5twU6uxwctSZ/RbPSPCOHg=
Subject key identifier: 99:D7:39:87:33:E5:D2:BC:2F:65:1A:50:9E:DF:5E:33:99:8D:8C:71
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019FA899E8D05ABB7FEAFB78A05E54023A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 12:01:26 +0000
Manifest this update: Tue 28 Jul 2026 12:01:26 +0000
Manifest next update: Wed 29 Jul 2026 12:01:26 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: dtBitzQEwCLkrjpvzvv714AiBwKtM0ksadlHH6mO8to=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:e8:d0:5a:bb:7f:ea:fb:78:a0:5e:54:02:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jul 28 12:01:26 2026 GMT
Not After : Jul 29 12:01:26 2026 GMT
Subject: CN=99d7398733e5d2bc2f651a509edf5e33998d8c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:21:93:83:6c:67:79:7b:7d:84:8e:54:f2:8a:
f5:e6:3d:63:c3:0d:b5:f8:d1:72:35:5b:38:b3:d1:
cf:9d:07:a8:17:91:72:cf:c7:3d:11:88:36:f9:cf:
3a:e8:f5:56:97:52:ee:c9:ba:36:15:54:dc:1d:26:
c6:5f:7f:3c:5f:0e:15:46:68:33:b2:f9:eb:5a:09:
7c:fa:58:b4:c0:3d:dc:bc:08:02:c7:ba:93:35:8a:
c7:17:9d:78:62:6b:37:ad:4a:5a:4d:70:55:2d:ca:
dd:fa:b3:19:ba:53:73:b8:a9:72:7d:ee:3b:27:5e:
76:f6:fe:9c:75:52:03:8b:47:4e:95:e7:c3:e4:f9:
52:72:ab:c9:55:87:9c:b5:21:1d:b5:65:f2:7b:07:
a1:c0:7f:b5:19:00:20:ec:23:4e:a7:cc:11:1c:ec:
88:e4:32:bc:34:df:37:b6:b3:4a:10:86:5f:16:aa:
63:39:e6:05:8f:fb:f2:4d:2a:12:c0:e5:ae:95:c0:
d6:c6:c9:6b:83:04:41:92:ac:ed:7e:94:f1:2a:75:
7d:b3:89:6f:7d:4d:55:ec:03:3d:f1:45:c5:ca:95:
99:4a:a6:2b:07:c1:b6:5c:13:ae:a7:31:f8:39:d2:
c8:87:c1:1b:aa:7c:90:e8:f3:ac:26:4a:85:03:a7:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:39:87:33:E5:D2:BC:2F:65:1A:50:9E:DF:5E:33:99:8D:8C:71
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:b2:93:d9:13:26:25:74:ba:4f:b9:65:cd:dd:bd:bf:a7:
73:9e:a7:bb:b4:86:c2:8d:66:f4:cf:fe:ce:f1:9a:b9:3a:9d:
6f:67:64:24:cc:46:95:d2:d3:27:9f:09:8d:1b:e9:23:66:6e:
33:96:ff:0a:6b:d9:38:09:4f:4d:fe:d6:dd:78:8b:3d:05:74:
12:c7:20:8d:f6:43:8d:46:40:ab:00:05:02:d7:b3:ac:04:70:
e9:6b:7c:84:50:fc:c3:bf:d4:e1:89:83:4c:7d:2a:69:06:3b:
c6:80:c1:46:e7:d9:f6:ad:60:b6:df:9e:f5:1b:d7:5b:2c:0e:
68:c9:79:9b:94:23:98:2c:38:db:56:a3:6f:0b:d4:0c:5b:62:
52:cb:7f:d7:a6:38:6a:00:28:7f:2a:f6:f8:97:1d:1f:fa:ce:
6a:a2:c8:8e:dc:dd:20:ae:a8:8d:41:9d:d0:af:dc:4f:59:12:
51:98:9b:59:f8:38:71:48:b1:a5:8d:f8:bc:01:49:4a:c6:fe:
fe:88:74:d6:10:28:92:62:88:6a:d3:09:8d:08:f7:2c:95:9c:
36:88:4c:61:02:c2:ac:e5:3e:49:3e:86:9f:95:d4:c4:aa:d0:
1a:fa:91:f0:ec:ea:e0:f1:13:fe:47:75:5b:22:2f:d1:6a:56:
5b:01:0b:f6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+omejQWrt/6vt4oF5UAjpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj
NGMzMzIwHhcNMjYwNzI4MTIwMTI2WhcNMjYwNzI5MTIwMTI2WjAzMTEwLwYDVQQD
Eyg5OWQ3Mzk4NzMzZTVkMmJjMmY2NTFhNTA5ZWRmNWUzMzk5OGQ4YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iGTg2xneXt9hI5U8or15j1jww21
+NFyNVs4s9HPnQeoF5Fyz8c9EYg2+c866PVWl1Luybo2FVTcHSbGX388Xw4VRmgz
svnrWgl8+li0wD3cvAgCx7qTNYrHF514Yms3rUpaTXBVLcrd+rMZulNzuKlyfe47
J1529v6cdVIDi0dOlefD5PlScqvJVYectSEdtWXyewehwH+1GQAg7CNOp8wRHOyI
5DK8NN83trNKEIZfFqpjOeYFj/vyTSoSwOWulcDWxslrgwRBkqztfpTxKnV9s4lv
fU1V7AM98UXFypWZSqYrB8G2XBOupzH4OdLIh8EbqnyQ6POsJkqFA6fjkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJnXOYcz5dK8L2UaUJ7fXjOZjYxxMB8GA1UdIwQY
MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0
LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY2LzMyNDQxZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgy
MzMvMS8xLVg5cDdTYkM1R2g5dXJMbXhzeW9qUmZFd3pJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOay
k9kTJiV0uk+5Zc3dvb+nc56nu7SGwo1m9M/+zvGauTqdb2dkJMxGldLTJ58JjRvp
I2ZuM5b/CmvZOAlPTf7W3XiLPQV0EscgjfZDjUZAqwAFAtezrARw6Wt8hFD8w7/U
4YmDTH0qaQY7xoDBRufZ9q1gtt+e9RvXWywOaMl5m5QjmCw421ajbwvUDFtiUst/
16Y4agAofyr2+JcdH/rOaqLIjtzdIK6ojUGd0K/cT1kSUZibWfg4cUixpY34vAFJ
Ssb+/oh01hAokmKIatMJjQj3LJWcNohMYQLCrOU+ST6Gn5XUxKrQGvqR8Ozq4PET
/kd1WyIv0WpWWwEL9g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:06 2026 by rpki-client