Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: l6IRe4cRooRfsh0RDXRccp79MT4PXv9STcFUf7jMgBc=
Subject key identifier: AD:19:20:75:CB:13:A8:AD:29:C2:3F:FF:5E:80:27:0A:50:E4:EF:73
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019FAB2CAB2D6B677D645A9B9ED24DC40556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 00:00:59 +0000
Manifest this update: Wed 29 Jul 2026 00:00:59 +0000
Manifest next update: Thu 30 Jul 2026 00:00:59 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: qsax4YQZxVV4hmOInw9W0NlZQ7e3UZoaqRobcRa2JUY=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:ab:2d:6b:67:7d:64:5a:9b:9e:d2:4d:c4:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jul 29 00:00:59 2026 GMT
Not After : Jul 30 00:00:59 2026 GMT
Subject: CN=ad192075cb13a8ad29c23fff5e80270a50e4ef73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:26:a4:48:7c:5c:7b:9c:96:39:91:59:76:
b9:b7:f0:71:d3:e6:3b:d8:ac:3c:d6:0a:41:14:37:
72:72:75:5d:48:c5:aa:46:24:21:45:45:1c:2e:be:
03:a6:a9:60:3e:5a:f1:2d:a9:3d:48:1b:bb:89:af:
d3:25:cb:6c:db:fa:c4:0e:5c:58:a3:49:1a:05:c3:
66:0c:3d:a5:29:3b:45:fa:f3:43:38:cb:35:00:42:
a5:4e:b5:7e:fb:20:d6:37:60:00:38:63:25:3f:27:
83:15:e4:bf:9e:dc:22:c6:ca:8e:5d:ea:53:0d:bd:
41:6a:49:44:3e:a0:43:d9:12:f2:71:2d:bc:31:e5:
a6:85:00:b2:b1:cc:52:cc:0f:d2:32:79:14:f4:f8:
72:9a:34:42:3e:8a:1e:b1:58:85:77:0e:27:c7:7d:
a6:19:ca:26:d8:be:47:e6:a8:cc:08:4f:0e:cb:12:
2e:2f:e8:e6:ae:d0:00:bf:3b:8f:ee:b0:7f:1f:a6:
2d:ee:a3:12:81:47:18:22:7e:cd:58:d2:9a:5f:ea:
1b:40:43:13:98:0b:09:9a:8c:7f:81:5c:ba:7d:81:
cf:f5:cf:fb:cb:ee:69:64:c4:30:ad:f7:ba:ef:34:
81:47:57:60:0b:03:58:d6:82:c1:f8:60:cd:cc:d9:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:20:75:CB:13:A8:AD:29:C2:3F:FF:5E:80:27:0A:50:E4:EF:73
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:78:9c:5e:07:f3:a0:8e:77:82:36:d1:58:01:3e:22:92:
ec:b8:95:00:77:59:be:6a:31:08:89:5f:aa:b4:50:61:69:e1:
99:86:9d:31:81:6c:08:f3:5b:42:93:ca:b2:24:76:14:1c:73:
24:ff:30:1e:60:8e:e2:20:fe:10:63:15:d8:30:02:7b:1b:f9:
b9:76:be:fe:db:6e:b0:f9:f7:5d:a9:21:69:ca:72:4b:28:8a:
73:7f:b9:14:3b:93:90:ad:3c:fd:5f:ac:21:3a:af:72:be:67:
67:0c:d1:1c:83:42:1f:bc:94:95:bc:f7:f9:53:7a:12:71:2f:
9c:0a:da:55:ca:19:6f:4f:49:10:3b:74:75:04:bd:f7:d2:9c:
79:1f:0c:1f:15:71:b3:a5:e1:bd:22:0d:fe:e2:55:a1:98:e1:
ce:99:28:88:25:2e:ec:89:36:b9:f1:16:da:b5:c7:ae:15:dc:
cc:57:18:e8:1c:88:ed:98:c4:0b:70:55:1f:bf:07:6a:d1:2a:
94:c1:ff:48:c4:d4:92:2b:e4:81:56:74:53:19:6b:7d:a5:b5:
b3:a6:69:19:6f:59:99:7a:6e:82:37:a2:cd:91:c2:4f:b9:1b:
e4:ef:66:8b:45:f7:bb:6e:f3:73:3a:bd:17:04:02:7a:76:97:
45:20:ec:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLKsta2d9ZFqbntJNxAVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjYwNzI5MDAwMDU5WhcNMjYwNzMwMDAwMDU5WjAzMTEwLwYDVQQD
EyhhZDE5MjA3NWNiMTNhOGFkMjljMjNmZmY1ZTgwMjcwYTUwZTRlZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnQmpEh8XHucljmRWXa5t/Bx0+Y7
2Kw81gpBFDdycnVdSMWqRiQhRUUcLr4DpqlgPlrxLak9SBu7ia/TJcts2/rEDlxY
o0kaBcNmDD2lKTtF+vNDOMs1AEKlTrV++yDWN2AAOGMlPyeDFeS/ntwixsqOXepT
Db1BaklEPqBD2RLycS28MeWmhQCyscxSzA/SMnkU9PhymjRCPooesViFdw4nx32m
Gcom2L5H5qjMCE8OyxIuL+jmrtAAvzuP7rB/H6Yt7qMSgUcYIn7NWNKaX+obQEMT
mAsJmox/gVy6fYHP9c/7y+5pZMQwrfe67zSBR1dgCwNY1oLB+GDNzNkhxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0ZIHXLE6itKcI//16AJwpQ5O9zMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMh4nF4H
86COd4I20VgBPiKS7LiVAHdZvmoxCIlfqrRQYWnhmYadMYFsCPNbQpPKsiR2FBxz
JP8wHmCO4iD+EGMV2DACexv5uXa+/ttusPn3XakhacpySyiKc3+5FDuTkK08/V+s
ITqvcr5nZwzRHINCH7yUlbz3+VN6EnEvnAraVcoZb09JEDt0dQS999KceR8MHxVx
s6XhvSIN/uJVoZjhzpkoiCUu7Ik2ufEW2rXHrhXczFcY6ByI7ZjEC3BVH78HatEq
lMH/SMTUkivkgVZ0UxlrfaW1s6ZpGW9ZmXpugjeizZHCT7kb5O9mi0X3u27zczq9
FwQCenaXRSDswQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:02 2026 by rpki-client