Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: Yy/39+nYIQMuhpiktD2lsUQ+o62gSyuAsDrmubQo2do=
Subject key identifier: 1C:2D:CB:4D:FB:10:D2:39:AE:AF:95:C1:B3:52:1E:78:D5:5F:83:34
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019FA9E29299199FAD536BDB89FA2CC17E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 18:00:25 +0000
Manifest this update: Tue 28 Jul 2026 18:00:25 +0000
Manifest next update: Wed 29 Jul 2026 18:00:25 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: /ph/gHLQ/OdvLt3hZh9OdrYocTCxwe+Q75YYvlYm8lA=)
2: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (hash: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o=)
3: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (hash: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:92:99:19:9f:ad:53:6b:db:89:fa:2c:c1:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Jul 28 18:00:25 2026 GMT
Not After : Jul 29 18:00:25 2026 GMT
Subject: CN=1c2dcb4dfb10d239aeaf95c1b3521e78d55f8334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:27:48:16:5b:b1:6c:95:c5:c9:3c:d8:d9:
8f:68:eb:dd:3d:35:f0:6b:72:4c:c4:81:5a:b3:db:
ff:05:b4:90:c5:fb:52:8d:bf:20:1c:52:62:f8:b8:
e8:4e:30:80:bc:49:2f:41:8c:59:f3:f4:9d:d4:ea:
48:db:46:e3:51:13:07:a5:b2:76:e1:b8:3a:66:83:
db:5f:01:e8:1b:8b:1b:ee:4e:b3:80:24:43:dd:2e:
35:01:6c:9f:e2:05:44:95:11:1a:68:d5:98:96:53:
fe:60:b9:56:37:83:bd:bb:45:22:f2:f7:6b:ce:37:
63:7c:cb:1e:a5:a0:ca:3b:10:00:22:28:7e:02:f9:
3f:1b:2e:52:48:00:68:53:55:8f:0a:77:05:3c:73:
e3:79:fa:51:0c:f1:ca:11:0c:60:f0:83:57:bc:19:
21:6c:47:42:f0:0d:4b:4b:73:8f:db:15:51:43:4a:
43:94:f5:83:7b:3b:08:34:9d:21:94:08:61:79:94:
54:36:e5:01:e2:e1:1d:04:21:da:2a:cf:74:e9:3f:
8e:52:b6:f7:55:5b:50:7c:b8:96:10:21:70:db:41:
02:04:ff:5d:3c:74:36:5c:2a:1d:46:33:f0:9b:44:
f8:04:40:61:2d:b1:75:fb:bc:22:1d:c3:37:40:f1:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:CB:4D:FB:10:D2:39:AE:AF:95:C1:B3:52:1E:78:D5:5F:83:34
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:01:d4:95:ca:a7:1c:d1:d9:ed:be:2c:b9:09:c8:07:93:cb:
44:ca:2e:b2:56:e4:2a:74:62:53:9e:73:a4:98:01:72:89:96:
60:a7:83:17:77:65:22:8a:27:f5:ff:21:26:6a:85:d6:d7:66:
82:96:45:d3:f2:ae:4a:c5:dd:4d:e1:be:be:6e:eb:e8:99:74:
81:ae:3a:80:ea:2f:0d:dd:f3:0d:e5:f7:bb:d6:7d:83:0c:fa:
0d:5e:af:6b:6c:03:68:54:f9:5c:9f:d7:15:4e:55:52:e6:75:
4f:2b:9a:ae:12:be:72:2d:28:99:e1:c7:0d:fa:dc:af:e0:c5:
38:4b:e9:b1:b7:57:59:8a:f9:73:8c:5a:9e:0b:a2:b9:15:81:
1a:70:fa:94:19:3b:d2:12:c6:96:41:5f:73:ff:93:fe:f5:58:
f6:b9:36:59:ed:af:05:21:90:78:c2:e6:12:be:a6:49:72:f3:
da:00:91:fc:33:72:42:e2:60:74:50:ce:80:0b:09:07:b3:99:
a8:38:e8:1c:63:d4:a0:0e:04:c5:56:f5:dc:81:f4:36:ec:71:
7d:f0:cb:38:4c:21:b6:af:5d:18:b1:82:c7:0d:20:b7:df:c5:
4d:ce:fc:1a:f3:59:4f:26:66:55:d6:4d:71:6c:4a:72:4e:60:
36:24:1d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4pKZGZ+tU2vbifoswX5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDMyZTc1Mjk0MTg3ZDQ2ZThlYWUwZjhmZTcyYjVmZDdh
YmY4ODYwHhcNMjYwNzI4MTgwMDI1WhcNMjYwNzI5MTgwMDI1WjAzMTEwLwYDVQQD
EygxYzJkY2I0ZGZiMTBkMjM5YWVhZjk1YzFiMzUyMWU3OGQ1NWY4MzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpgnSBZbsWyVxck82NmPaOvdPTXw
a3JMxIFas9v/BbSQxftSjb8gHFJi+LjoTjCAvEkvQYxZ8/Sd1OpI20bjURMHpbJ2
4bg6ZoPbXwHoG4sb7k6zgCRD3S41AWyf4gVElREaaNWYllP+YLlWN4O9u0Ui8vdr
zjdjfMsepaDKOxAAIih+Avk/Gy5SSABoU1WPCncFPHPjefpRDPHKEQxg8INXvBkh
bEdC8A1LS3OP2xVRQ0pDlPWDezsINJ0hlAhheZRUNuUB4uEdBCHaKs906T+OUrb3
VVtQfLiWECFw20ECBP9dPHQ2XCodRjPwm0T4BEBhLbF1+7wiHcM3QPF5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwty037ENI5rq+VwbNSHnjVX4M0MB8GA1UdIwQY
MBaAFPfTLnUpQYfUbo6uD4/nK1/Xq/iGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAt
ZDFhNDU5OWNiMGU1LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAtZDFhNDU5OWNiMGU1
LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQHUlcqn
HNHZ7b4suQnIB5PLRMouslbkKnRiU55zpJgBcomWYKeDF3dlIoon9f8hJmqF1tdm
gpZF0/KuSsXdTeG+vm7r6Jl0ga46gOovDd3zDeX3u9Z9gwz6DV6va2wDaFT5XJ/X
FU5VUuZ1TyuarhK+ci0omeHHDfrcr+DFOEvpsbdXWYr5c4xanguiuRWBGnD6lBk7
0hLGlkFfc/+T/vVY9rk2We2vBSGQeMLmEr6mSXLz2gCR/DNyQuJgdFDOgAsJB7OZ
qDjoHGPUoA4ExVb13IH0NuxxffDLOEwhtq9dGLGCxw0gt9/FTc78GvNZTyZmVdZN
cWxKck5gNiQd0A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:07 2026 by rpki-client