Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: CHiIhhrdiUoQNzz+PqjBsclev026jvoRYUpixuYvgZQ=
Subject key identifier: 9E:93:EE:D0:A8:73:14:34:A8:F3:89:E3:41:B6:E0:38:F4:85:34:C3
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 019FA906FB0C7AB4838ECC3C1D66BB1A89BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 14:00:34 +0000
Manifest this update: Tue 28 Jul 2026 14:00:34 +0000
Manifest next update: Wed 29 Jul 2026 14:00:34 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: hbYhiqJh4wOjiyslqUPvvlySm0yBZnHzLw/CYhy2nl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:fb:0c:7a:b4:83:8e:cc:3c:1d:66:bb:1a:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Jul 28 14:00:34 2026 GMT
Not After : Jul 29 14:00:34 2026 GMT
Subject: CN=9e93eed0a8731434a8f389e341b6e038f48534c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:cb:98:0a:90:89:8f:bb:1a:2f:5e:9e:0f:
90:b6:f0:70:84:53:55:af:47:46:6d:48:18:1f:e2:
a0:ed:89:6e:01:a8:16:48:4c:5f:0d:d5:64:8f:8b:
36:4a:2c:14:2a:f5:7e:1b:20:1e:df:00:d6:2c:bd:
f7:51:f0:d5:e2:53:0d:94:40:91:dd:72:a6:10:8a:
48:de:7f:bd:f9:c5:93:27:78:a4:91:78:04:1b:04:
24:df:e1:85:a2:92:8c:d0:43:6a:b4:97:fc:c7:ff:
98:c6:40:14:00:f6:ff:01:1b:a9:4b:14:87:bd:88:
df:e0:93:b0:a7:0d:64:ea:55:cb:a9:44:db:b0:ea:
0b:93:db:b2:9f:11:90:3c:c2:e1:ed:fa:0b:8a:80:
73:3f:50:4d:2b:29:eb:47:78:61:99:38:5f:87:1f:
3a:da:97:de:03:fb:3f:f5:91:4b:61:03:92:cb:81:
cd:61:aa:09:f6:31:bb:95:df:d5:92:04:10:86:2f:
db:7b:38:f8:e9:6d:4a:c0:29:3c:6e:27:c6:96:0e:
2f:7f:ae:d2:9c:6f:a5:b4:99:87:d5:5a:17:7d:5b:
67:79:6c:fb:3b:dc:1e:1a:ab:62:e3:a3:59:a0:36:
16:82:6e:19:16:57:13:97:e9:42:4b:24:2b:52:5b:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:EE:D0:A8:73:14:34:A8:F3:89:E3:41:B6:E0:38:F4:85:34:C3
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fb:a8:c8:52:60:05:6a:f4:df:02:38:66:92:fd:fb:59:91:
5c:9e:37:1a:77:3b:24:3c:33:a6:8a:70:1a:79:3f:35:38:80:
73:e0:87:61:a8:46:3d:97:5a:6e:7e:c8:e1:4a:4e:33:3b:ce:
78:b3:fd:c7:cf:d2:66:28:79:a6:a7:bc:83:67:fc:87:0f:fd:
3d:3f:79:fd:ed:b0:b6:4c:f2:c0:e2:a1:ec:11:63:b8:75:d8:
eb:24:06:ff:ca:fd:a5:ba:34:6f:bf:b7:e0:52:1a:e5:f9:db:
d1:f8:e9:eb:69:8b:16:a3:b0:9d:34:0c:24:26:1d:69:d3:a7:
72:a2:07:57:cc:72:85:99:6e:29:44:a0:f9:c5:0d:ef:5a:6f:
56:8e:35:47:6a:2f:61:ab:08:27:0b:c5:53:19:d2:b6:8d:d5:
ad:a3:d2:53:68:2f:2f:67:42:70:f1:34:21:16:39:6a:c5:3b:
87:b8:cb:37:9f:3a:ce:55:69:a4:2a:c6:4d:45:1f:5c:ab:ab:
a9:95:56:8a:97:8e:0d:46:86:b0:dd:e9:79:2c:4e:72:a2:ca:
69:61:63:27:56:62:ce:ad:8b:70:3e:e1:7e:ef:34:66:e5:77:
f9:49:c7:f8:c8:30:90:dd:87:7c:a2:50:8c:42:ba:39:4e:00:
ad:2c:7b:8f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+pBvsMerSDjsw8HWa7Gom9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE1YWFhNmM5OTQ2MmZlYjE1OWY1NmIxYzBhZjJkZDNm
NDYyNWIwHhcNMjYwNzI4MTQwMDM0WhcNMjYwNzI5MTQwMDM0WjAzMTEwLwYDVQQD
Eyg5ZTkzZWVkMGE4NzMxNDM0YThmMzg5ZTM0MWI2ZTAzOGY0ODUzNGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTjLmAqQiY+7Gi9eng+QtvBwhFNV
r0dGbUgYH+Kg7YluAagWSExfDdVkj4s2SiwUKvV+GyAe3wDWLL33UfDV4lMNlECR
3XKmEIpI3n+9+cWTJ3ikkXgEGwQk3+GFopKM0ENqtJf8x/+YxkAUAPb/ARupSxSH
vYjf4JOwpw1k6lXLqUTbsOoLk9uynxGQPMLh7foLioBzP1BNKynrR3hhmThfhx86
2pfeA/s/9ZFLYQOSy4HNYaoJ9jG7ld/VkgQQhi/bezj46W1KwCk8bifGlg4vf67S
nG+ltJmH1VoXfVtneWz7O9weGqti46NZoDYWgm4ZFlcTl+lCSyQrUlsEAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ6T7tCocxQ0qPOJ40G24Dj0hTTDMB8GA1UdIwQY
MBaAFPraWqpsmUYv6xWfVrHAry3T9GJbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cGFxbXlaUmlfckZaOVdzY0N2TGRQMFlscy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2LWVkZjAtNDhkNy1iZTdk
LTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlXc2NDdkxkUDBZbHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzA2MTUwNi1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2
ZTIvMS8xLXRwYXFteVpSaV9yRlo5V3NjQ3ZMZFAwWWxzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvuo
yFJgBWr03wI4ZpL9+1mRXJ43Gnc7JDwzpopwGnk/NTiAc+CHYahGPZdabn7I4UpO
MzvOeLP9x8/SZih5pqe8g2f8hw/9PT95/e2wtkzywOKh7BFjuHXY6yQG/8r9pbo0
b7+34FIa5fnb0fjp62mLFqOwnTQMJCYdadOncqIHV8xyhZluKUSg+cUN71pvVo41
R2ovYasIJwvFUxnSto3VraPSU2gvL2dCcPE0IRY5asU7h7jLN586zlVppCrGTUUf
XKurqZVWipeODUaGsN3peSxOcqLKaWFjJ1Zizq2LcD7hfu80ZuV3+UnH+MgwkN2H
fKJQjEK6OU4ArSx7jw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:10 2026 by rpki-client