Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: j21R1DPAaMnjxIdT3vXi4RIdjPkrg9trg22JnCKe5Fw=
Subject key identifier: C8:32:5A:65:19:83:EE:1B:BA:79:1B:C0:C7:AC:42:40:0B:42:A0:06
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019FA86237BF615342E19E6461AD9F52F2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 11:00:36 +0000
Manifest this update: Tue 28 Jul 2026 11:00:36 +0000
Manifest next update: Wed 29 Jul 2026 11:00:36 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: aZwhbobMgLKBIhdQp44Hdwe5W4d1kjH9qzGOOt8Ou5Y=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:37:bf:61:53:42:e1:9e:64:61:ad:9f:52:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Jul 28 11:00:36 2026 GMT
Not After : Jul 29 11:00:36 2026 GMT
Subject: CN=c8325a651983ee1bba791bc0c7ac42400b42a006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:b7:cf:14:58:22:2e:07:55:80:ac:9b:7c:
e6:cc:f5:f1:55:e3:af:5d:73:ea:8a:d2:32:3a:14:
b2:86:b4:6f:b0:0f:c5:1d:10:46:c7:dd:c2:bb:0c:
ed:3b:aa:b6:da:b0:c2:55:83:be:7b:97:66:7a:10:
5e:f8:72:97:1d:1d:3a:8e:98:24:24:1e:d3:c8:09:
1e:a9:88:17:0c:3f:3d:91:bd:5d:29:b5:41:44:91:
c9:8f:b5:df:fc:cf:04:86:a5:c0:8c:9a:27:23:d7:
5d:71:5e:6f:36:84:ac:57:9d:12:9f:ea:f4:fe:a1:
8a:26:09:0b:45:12:ab:14:7a:da:79:17:80:bf:49:
4c:25:7f:da:9d:c0:c3:9b:44:b5:79:9c:b4:81:3a:
03:53:ea:67:70:d0:ab:b9:61:08:05:e8:87:79:72:
79:76:72:27:cf:c1:6f:2b:45:dd:10:66:88:2e:4f:
33:8b:df:b5:30:16:89:94:03:c8:8b:a6:4b:3a:de:
4b:3e:1f:18:49:b9:78:7a:02:d3:72:0b:b5:b9:7d:
0e:7c:26:f2:88:1c:e1:e6:30:73:ef:d4:6a:9d:97:
cf:c0:7d:3d:59:d3:e5:7a:e1:fa:9e:48:22:d1:4a:
32:71:a2:ba:e2:d0:59:e2:30:f9:4e:3c:b8:85:68:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:32:5A:65:19:83:EE:1B:BA:79:1B:C0:C7:AC:42:40:0B:42:A0:06
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:41:08:98:f0:6e:9e:3c:fa:75:7f:98:29:4e:6e:92:41:
4b:07:df:fe:b8:21:e0:97:57:aa:08:cb:31:06:c9:cd:9f:b1:
24:9d:4e:d5:cf:8f:f3:a0:4a:3f:6b:cc:c4:75:7c:d0:af:d6:
19:1c:66:20:c6:0c:34:db:3b:1c:b9:d2:aa:56:cf:46:05:46:
53:e2:8f:e8:04:4c:3e:be:6e:1c:f8:c2:89:43:58:58:59:61:
2e:13:0f:55:e8:fe:98:ec:d1:66:69:c8:ba:db:af:ff:a6:99:
c2:85:d2:5c:a8:f1:13:c9:fd:cc:34:31:91:c6:53:ba:46:df:
4a:b8:6f:28:6c:65:f7:47:8e:7c:b7:1d:51:d8:e6:53:0d:60:
72:4c:6b:69:ec:d7:37:72:14:9e:3b:51:29:75:ef:65:ec:56:
ee:45:6c:04:da:91:d2:a1:52:71:08:4c:26:b3:24:7a:8b:71:
38:1f:af:c6:59:98:33:6c:88:18:21:21:d6:ca:39:86:c5:1e:
66:bb:1e:9f:be:e2:b4:d3:be:ee:7c:c0:27:1d:19:f3:e3:b1:
7f:a8:b8:a9:89:4e:0d:86:aa:ad:ee:ac:10:16:e4:cf:18:8f:
06:98:41:91:c2:d3:71:43:04:4a:31:86:47:70:63:39:35:aa:
dc:50:8f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYje/YVNC4Z5kYa2fUvLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTIzZGY0ZGFlOTE5NTBjZjAwZDIzNWZlMzllMDBlZWEz
ODE2ZDIwHhcNMjYwNzI4MTEwMDM2WhcNMjYwNzI5MTEwMDM2WjAzMTEwLwYDVQQD
EyhjODMyNWE2NTE5ODNlZTFiYmE3OTFiYzBjN2FjNDI0MDBiNDJhMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZy3zxRYIi4HVYCsm3zmzPXxVeOv
XXPqitIyOhSyhrRvsA/FHRBGx93CuwztO6q22rDCVYO+e5dmehBe+HKXHR06jpgk
JB7TyAkeqYgXDD89kb1dKbVBRJHJj7Xf/M8EhqXAjJonI9ddcV5vNoSsV50Sn+r0
/qGKJgkLRRKrFHraeReAv0lMJX/ancDDm0S1eZy0gToDU+pncNCruWEIBeiHeXJ5
dnInz8FvK0XdEGaILk8zi9+1MBaJlAPIi6ZLOt5LPh8YSbl4egLTcgu1uX0OfCby
iBzh5jBz79RqnZfPwH09WdPleuH6nkgi0UoycaK64tBZ4jD5Tjy4hWihGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgyWmUZg+4bunkbwMesQkALQqAGMB8GA1UdIwQY
MBaAFNaSPfTa6RlQzwDSNf454A7qOBbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYt
OGQ2ZmMwMTA1MjNkLzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYtOGQ2ZmMwMTA1MjNk
LzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjhBCJjw
bp48+nV/mClObpJBSwff/rgh4JdXqgjLMQbJzZ+xJJ1O1c+P86BKP2vMxHV80K/W
GRxmIMYMNNs7HLnSqlbPRgVGU+KP6ARMPr5uHPjCiUNYWFlhLhMPVej+mOzRZmnI
utuv/6aZwoXSXKjxE8n9zDQxkcZTukbfSrhvKGxl90eOfLcdUdjmUw1gckxraezX
N3IUnjtRKXXvZexW7kVsBNqR0qFScQhMJrMkeotxOB+vxlmYM2yIGCEh1so5hsUe
Zrsen77itNO+7nzAJx0Z8+Oxf6i4qYlODYaqre6sEBbkzxiPBphBkcLTcUMESjGG
R3BjOTWq3FCP5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:57 2026 by rpki-client