Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier: 45LTj6BItyPBCPXnCOjzPGm3nmdoMqWmujmLPz2exxY=
Subject key identifier: A1:8B:58:BC:9D:94:40:5A:75:99:41:E1:5C:46:35:42:44:D8:EF:2D
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial: 019FA974BDD3285269C01EF9F81D2BD33818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 16:00:27 +0000
Manifest this update: Tue 28 Jul 2026 16:00:27 +0000
Manifest next update: Wed 29 Jul 2026 16:00:27 +0000
Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: 5sBEXHNpfYgQxz5O2a2YcjdDW43+IMDknj2yh1YDrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:bd:d3:28:52:69:c0:1e:f9:f8:1d:2b:d3:38:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
Validity
Not Before: Jul 28 16:00:27 2026 GMT
Not After : Jul 29 16:00:27 2026 GMT
Subject: CN=a18b58bc9d94405a759941e15c46354244d8ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:a4:70:96:11:38:e5:f0:fb:3a:70:5e:8f:
08:7f:dc:0d:31:de:cc:bf:0b:6e:2a:c5:59:50:64:
87:3c:97:aa:4a:67:57:d0:ba:04:2a:25:96:9b:09:
39:61:a7:5e:41:f2:44:1b:11:46:39:59:28:c4:1b:
dd:a4:45:87:ac:0c:76:be:d5:b5:ac:45:97:4e:61:
e3:47:9e:f3:a2:69:34:75:3b:f7:af:3b:86:c5:5f:
ee:f9:0d:56:f0:35:1b:ac:35:64:27:7a:2a:d1:0c:
ab:ef:1f:18:fe:e1:ac:85:98:01:cb:b0:dc:9e:41:
20:0a:4d:6f:8d:e5:fa:d1:88:51:72:3e:f6:10:95:
31:c4:87:ea:e2:96:54:a0:e0:16:35:13:4e:db:9c:
a1:e3:d9:0e:a7:9f:35:50:28:d7:64:f7:a5:6a:2a:
b9:14:46:9d:67:35:77:b4:4b:da:f0:21:b1:84:b2:
d0:97:10:35:da:d3:18:3b:77:5a:db:b1:04:45:29:
30:2d:89:0d:82:f2:57:47:61:7c:bf:a8:75:fe:55:
28:fa:49:d5:87:08:20:37:8e:1e:ab:51:7c:0d:91:
de:1c:16:9d:23:f2:b1:4d:5b:f4:d2:5a:f7:3d:c1:
96:ee:9e:2c:08:86:1a:6d:7b:0f:a3:6c:47:5d:58:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:58:BC:9D:94:40:5A:75:99:41:E1:5C:46:35:42:44:D8:EF:2D
X509v3 Authority Key Identifier:
keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1e:e4:b6:46:50:86:ac:26:02:c8:49:2d:2c:90:1d:fd:3b:
5b:9e:7d:4c:ae:2a:ea:ff:3c:61:7d:66:b2:d1:f5:a0:3d:35:
58:5f:28:29:9c:8f:74:9b:78:e6:76:b6:6d:9c:06:22:64:86:
0b:ae:9d:df:c5:97:fa:5a:fb:6f:31:ce:d9:56:fc:96:00:de:
de:de:b6:6b:ff:a0:b2:b2:57:d7:61:bc:ad:4d:d3:f3:30:0a:
d5:90:76:19:27:e3:95:e2:cc:15:28:e7:00:ea:78:a0:5a:63:
a0:71:ec:73:64:c4:8a:aa:88:94:c3:56:d1:18:de:32:18:40:
b5:5e:f5:37:87:c4:8a:1b:a9:48:8b:40:a9:60:aa:b3:c1:c9:
53:cb:87:50:b9:6e:10:5e:ed:f2:ff:7d:f6:22:d3:fe:f8:70:
88:d1:64:24:be:32:08:30:df:93:03:34:36:fe:54:db:04:b3:
df:42:c7:fd:18:48:31:d8:07:1d:92:08:3a:de:9f:b8:0d:a8:
9e:10:e8:ec:49:3f:bf:ad:77:43:7a:7a:76:b2:9f:38:e2:be:
e7:91:c0:7e:02:cf:27:1c:dc:d2:9f:57:f8:f6:76:3b:b3:10:
cf:64:24:68:73:93:da:67:e4:43:c2:9c:ef:4b:2f:5c:45:21:
67:01:69:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdL3TKFJpwB75+B0r0zgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDg4MTYzZGFmNTBkYjY0NmRlNGRmMjRkMzRjYmFjOTkz
ZjQ1N2YwHhcNMjYwNzI4MTYwMDI3WhcNMjYwNzI5MTYwMDI3WjAzMTEwLwYDVQQD
EyhhMThiNThiYzlkOTQ0MDVhNzU5OTQxZTE1YzQ2MzU0MjQ0ZDhlZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxWkcJYROOXw+zpwXo8If9wNMd7M
vwtuKsVZUGSHPJeqSmdX0LoEKiWWmwk5YadeQfJEGxFGOVkoxBvdpEWHrAx2vtW1
rEWXTmHjR57zomk0dTv3rzuGxV/u+Q1W8DUbrDVkJ3oq0Qyr7x8Y/uGshZgBy7Dc
nkEgCk1vjeX60YhRcj72EJUxxIfq4pZUoOAWNRNO25yh49kOp581UCjXZPelaiq5
FEadZzV3tEva8CGxhLLQlxA12tMYO3da27EERSkwLYkNgvJXR2F8v6h1/lUo+knV
hwggN44eq1F8DZHeHBadI/KxTVv00lr3PcGW7p4sCIYabXsPo2xHXViOLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGLWLydlEBadZlB4VxGNUJE2O8tMB8GA1UdIwQY
MBaAFNtIgWPa9Q22Rt5N8k00y6yZP0V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAt
MTlkNTdmZjFmYmQ5LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAtMTlkNTdmZjFmYmQ5
LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0R7ktkZQ
hqwmAshJLSyQHf07W559TK4q6v88YX1mstH1oD01WF8oKZyPdJt45na2bZwGImSG
C66d38WX+lr7bzHO2Vb8lgDe3t62a/+gsrJX12G8rU3T8zAK1ZB2GSfjleLMFSjn
AOp4oFpjoHHsc2TEiqqIlMNW0RjeMhhAtV71N4fEihupSItAqWCqs8HJU8uHULlu
EF7t8v999iLT/vhwiNFkJL4yCDDfkwM0Nv5U2wSz30LH/RhIMdgHHZIIOt6fuA2o
nhDo7Ek/v613Q3p6drKfOOK+55HAfgLPJxzc0p9X+PZ2O7MQz2QkaHOT2mfkQ8Kc
70svXEUhZwFp7A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:36 2026 by rpki-client