Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: rpezTZdtdbRgVpU4Doj3cOvFkbZsTpIaBz2jzC9JCZk=
Subject key identifier: 6C:32:9B:73:43:04:13:BF:3F:70:95:64:BA:A8:D3:11:F2:97:81:1E
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019FA9ABEC0000675BD90D483046DAF42C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0C0C
Signing time: Tue 28 Jul 2026 17:00:44 +0000
Manifest this update: Tue 28 Jul 2026 17:00:44 +0000
Manifest next update: Wed 29 Jul 2026 17:00:44 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: XCBG45KjXPm2F05Ql5414MnqrmGVCr5U0Ax5wQnFD8s=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ec:00:00:67:5b:d9:0d:48:30:46:da:f4:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jul 28 17:00:44 2026 GMT
Not After : Jul 29 17:00:44 2026 GMT
Subject: CN=6c329b73430413bf3f709564baa8d311f297811e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:ff:59:ef:e0:16:62:40:09:11:59:ab:6a:
45:45:9c:ad:b8:c6:14:41:47:4c:2e:f7:15:5d:d0:
c6:9d:36:24:dc:4f:5d:7b:1a:c5:db:ec:59:33:51:
cd:3a:2b:8b:e7:89:91:2b:80:86:6c:d4:df:8f:ed:
d0:ee:6f:ac:ae:82:48:e7:dd:ab:e0:ca:a3:51:1d:
02:36:40:9f:c8:1b:de:c8:b7:e9:a3:1f:ee:b8:f2:
8d:7f:2c:da:57:97:c7:cb:fd:26:3c:fe:81:9f:4a:
4d:01:ef:29:24:ee:8b:b3:49:f0:4d:10:15:6c:59:
bd:bd:9d:0c:9a:97:fe:f6:df:26:92:18:c4:57:e5:
da:e1:c0:2e:fa:6c:08:d9:61:23:a7:c9:79:25:36:
42:90:81:ea:58:6a:71:66:48:6f:08:5b:00:f7:fe:
2d:88:d7:8e:3a:80:d9:f6:1e:f8:ce:56:70:cd:61:
b6:65:46:ca:08:f2:2e:c1:1d:24:e7:7f:33:f6:15:
9f:d3:a2:fc:d4:01:54:0a:36:86:64:2c:ff:82:57:
1a:3b:ab:c2:dc:7b:05:9a:72:19:ad:67:95:91:ec:
8c:3c:e2:40:53:66:fb:e1:a4:18:81:0d:c0:03:e6:
3b:2b:d0:6c:81:0e:a2:47:0d:f7:08:95:1a:13:45:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:32:9B:73:43:04:13:BF:3F:70:95:64:BA:A8:D3:11:F2:97:81:1E
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7f:62:2d:26:31:ec:a2:6c:5d:e4:7a:ff:21:ac:bb:c8:1c:
c8:9f:ce:ca:a5:9b:7c:f7:8b:3f:24:41:47:30:e7:b7:a0:92:
19:18:5a:c8:94:6d:ff:8d:75:ca:65:de:f1:ee:c3:53:40:db:
fa:81:23:5f:1e:e6:3d:0d:7c:c5:85:de:0d:e2:17:60:f2:44:
40:00:17:9e:7b:8b:18:f8:94:71:fd:ff:b0:5a:e4:9e:7c:8c:
05:ff:76:c7:c1:ed:be:41:65:49:48:d5:33:8f:03:ab:97:1d:
9d:8f:7c:4e:0a:64:21:c3:34:0d:7c:05:84:76:7f:43:0d:18:
31:11:63:c6:8a:44:9d:a1:f5:d7:9c:61:c5:9a:d8:5f:ad:51:
08:67:87:6b:b1:a2:2c:4f:20:2e:87:93:cd:51:f9:75:92:17:
44:c3:f5:f2:d1:44:c4:2d:79:db:59:28:fc:49:ba:97:f7:f8:
bd:24:d9:55:af:d7:74:7a:dc:a5:59:eb:8a:04:c7:90:e8:56:
f6:e8:be:87:57:0c:36:39:1b:4f:c6:34:e9:0e:5a:49:0c:a6:
fe:ad:7c:a1:43:21:97:9c:53:b1:06:4b:1b:3f:90:f6:97:a4:
ad:06:fc:c2:42:f0:c4:e8:74:a5:25:a3:f6:34:5e:26:5b:7c:
eb:67:b2:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq+wAAGdb2Q1IMEba9CwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3
ZjcyMGEwHhcNMjYwNzI4MTcwMDQ0WhcNMjYwNzI5MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg2YzMyOWI3MzQzMDQxM2JmM2Y3MDk1NjRiYWE4ZDMxMWYyOTc4MTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqX/We/gFmJACRFZq2pFRZytuMYU
QUdMLvcVXdDGnTYk3E9dexrF2+xZM1HNOiuL54mRK4CGbNTfj+3Q7m+sroJI592r
4MqjUR0CNkCfyBveyLfpox/uuPKNfyzaV5fHy/0mPP6Bn0pNAe8pJO6Ls0nwTRAV
bFm9vZ0Mmpf+9t8mkhjEV+Xa4cAu+mwI2WEjp8l5JTZCkIHqWGpxZkhvCFsA9/4t
iNeOOoDZ9h74zlZwzWG2ZUbKCPIuwR0k538z9hWf06L81AFUCjaGZCz/glcaO6vC
3HsFmnIZrWeVkeyMPOJAU2b74aQYgQ3AA+Y7K9BsgQ6iRw33CJUaE0VAlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwym3NDBBO/P3CVZLqo0xHyl4EeMB8GA1UdIwQY
MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt
YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk
LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASX9iLSYx
7KJsXeR6/yGsu8gcyJ/OyqWbfPeLPyRBRzDnt6CSGRhayJRt/411ymXe8e7DU0Db
+oEjXx7mPQ18xYXeDeIXYPJEQAAXnnuLGPiUcf3/sFrknnyMBf92x8HtvkFlSUjV
M48Dq5cdnY98TgpkIcM0DXwFhHZ/Qw0YMRFjxopEnaH115xhxZrYX61RCGeHa7Gi
LE8gLoeTzVH5dZIXRMP18tFExC1521ko/Em6l/f4vSTZVa/XdHrcpVnrigTHkOhW
9ui+h1cMNjkbT8Y06Q5aSQym/q18oUMhl5xTsQZLGz+Q9pekrQb8wkLwxOh0pSWj
9jReJlt862ey+A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:40 2026 by rpki-client