Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: ltwW6vRLwxd9LJPEIwxm9Y76sCKOLf/jNGF5GMRV6EQ=
Subject key identifier: 91:2B:BB:EB:AF:8A:D0:5E:89:0C:36:A7:9E:E7:12:48:DB:12:2B:77
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019FAC75DAED6958CCFD45AEBFBD36495C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 06:00:32 +0000
Manifest this update: Wed 29 Jul 2026 06:00:32 +0000
Manifest next update: Thu 30 Jul 2026 06:00:32 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: IuW7+XQjT9yLUPVOUe7Ve34jCVt+YB9yzPhSAKIcC28=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:da:ed:69:58:cc:fd:45:ae:bf:bd:36:49:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jul 29 06:00:32 2026 GMT
Not After : Jul 30 06:00:32 2026 GMT
Subject: CN=912bbbebaf8ad05e890c36a79ee71248db122b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:13:cd:14:61:08:3c:5e:3a:89:c3:8a:50:
d9:94:53:41:e5:4f:4a:64:d7:4b:62:d7:88:7a:e0:
18:99:fa:94:e1:1e:b1:be:c8:a5:53:bf:84:8d:b2:
2b:de:9c:d3:b0:35:bb:df:79:13:57:e7:47:fb:bc:
9a:50:37:4e:f2:f7:d3:1e:46:86:e8:b4:8e:1a:b4:
70:99:12:dd:4b:40:c7:3a:9b:19:ff:a3:13:62:82:
2f:ee:c6:08:9a:77:bd:4c:8a:40:b5:60:fe:25:27:
a2:93:ab:a1:4e:61:70:90:1f:d7:11:50:ba:8d:dc:
61:8c:7f:99:da:44:fc:5a:bb:a5:43:52:30:0f:92:
dc:b8:c3:f9:8f:fc:ee:b1:5c:58:d7:0b:0b:60:b2:
cb:f4:94:9d:94:31:8f:4c:c8:e0:ff:37:be:df:89:
f0:53:ff:df:67:45:1d:68:0a:7d:83:e1:5e:41:c4:
dd:16:9f:b1:56:13:2a:38:2f:4a:09:04:47:b2:16:
d2:fa:cc:30:da:54:d7:55:34:49:30:71:e0:53:ba:
66:56:8d:e7:46:e9:b9:fc:dc:a5:4e:94:b0:b8:28:
48:09:97:fe:2c:9d:c6:3d:73:18:c7:fb:88:0e:fe:
cc:05:65:cc:68:05:bd:a7:59:6c:5f:36:95:a1:4b:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:BB:EB:AF:8A:D0:5E:89:0C:36:A7:9E:E7:12:48:DB:12:2B:77
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:ef:c7:30:91:f7:47:9d:e4:ce:7f:65:1b:26:33:d7:a9:
c4:16:3f:01:99:3b:38:74:7d:e1:72:38:80:63:37:e2:f8:14:
27:bf:b1:a1:ea:a3:ec:91:2b:47:52:27:9c:e0:24:bf:78:2f:
b1:90:5c:e3:fe:3c:55:43:7e:6d:9a:56:62:a7:d8:a8:5b:e8:
04:3d:3b:cd:9e:53:69:26:94:41:48:43:19:7e:6b:b1:47:26:
19:47:ab:d4:f7:eb:32:76:75:df:a3:8a:0a:0c:a0:10:1c:c4:
70:4d:00:bd:e0:0c:40:3e:2c:9f:7a:0b:d7:38:1f:25:56:bb:
05:32:24:96:25:3a:06:c6:21:50:80:44:28:10:20:ff:63:50:
df:5b:39:24:e3:36:46:eb:4c:73:78:5c:3c:58:68:29:2a:89:
95:87:cf:7f:86:1c:88:c7:6f:22:50:96:28:7d:b0:9b:26:3f:
62:b4:c0:b2:59:f9:a6:32:fe:da:f4:8e:ec:88:3e:a7:35:25:
3f:cd:f6:f9:19:70:62:ac:98:7f:8e:e5:df:7a:f2:e8:47:56:
92:b0:9f:e7:5f:93:f7:19:f8:6e:5d:cd:c8:f9:ea:d3:88:e2:
25:a7:3f:27:d9:38:17:18:0d:b9:b3:3a:00:9e:4f:e1:9b:cb:
ca:b2:52:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sddrtaVjM/UWuv702SVwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjYwNzI5MDYwMDMyWhcNMjYwNzMwMDYwMDMyWjAzMTEwLwYDVQQD
Eyg5MTJiYmJlYmFmOGFkMDVlODkwYzM2YTc5ZWU3MTI0OGRiMTIyYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lITzRRhCDxeOonDilDZlFNB5U9K
ZNdLYteIeuAYmfqU4R6xvsilU7+EjbIr3pzTsDW733kTV+dH+7yaUDdO8vfTHkaG
6LSOGrRwmRLdS0DHOpsZ/6MTYoIv7sYImne9TIpAtWD+JSeik6uhTmFwkB/XEVC6
jdxhjH+Z2kT8WrulQ1IwD5LcuMP5j/zusVxY1wsLYLLL9JSdlDGPTMjg/ze+34nw
U//fZ0UdaAp9g+FeQcTdFp+xVhMqOC9KCQRHshbS+sww2lTXVTRJMHHgU7pmVo3n
Rum5/NylTpSwuChICZf+LJ3GPXMYx/uIDv7MBWXMaAW9p1lsXzaVoUv2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEru+uvitBeiQw2p57nEkjbEit3MB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrrvxzCR
90ed5M5/ZRsmM9epxBY/AZk7OHR94XI4gGM34vgUJ7+xoeqj7JErR1InnOAkv3gv
sZBc4/48VUN+bZpWYqfYqFvoBD07zZ5TaSaUQUhDGX5rsUcmGUer1PfrMnZ136OK
CgygEBzEcE0AveAMQD4sn3oL1zgfJVa7BTIkliU6BsYhUIBEKBAg/2NQ31s5JOM2
RutMc3hcPFhoKSqJlYfPf4YciMdvIlCWKH2wmyY/YrTAsln5pjL+2vSO7Ig+pzUl
P832+RlwYqyYf47l33ry6EdWkrCf51+T9xn4bl3NyPnq04jiJac/J9k4FxgNubM6
AJ5P4ZvLyrJSdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:58 2026 by rpki-client