
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: lxx9pBV2JHjo1boHdoGX7bc0CXNDQvvG5DJ9lJgSxu4=
Subject key identifier: DA:32:CC:A2:57:72:51:F3:45:8C:FD:2B:3D:3F:ED:E1:64:17:14:07
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019FAABEFFE811B0A8F0E5E51C0D8114F1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 22:01:11 +0000
Manifest this update: Tue 28 Jul 2026 22:01:11 +0000
Manifest next update: Wed 29 Jul 2026 22:01:11 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: x7BBTRCfiL3O/suy2w0qqwFyw7X0ZXK/WV6cDuBsBj4=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:ff:e8:11:b0:a8:f0:e5:e5:1c:0d:81:14:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Jul 28 22:01:11 2026 GMT
Not After : Jul 29 22:01:11 2026 GMT
Subject: CN=da32cca2577251f3458cfd2b3d3fede164171407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:dc:2a:78:4d:1f:3c:5f:15:ac:0c:55:bc:
fa:6e:fc:1d:34:06:2e:64:c8:9a:a8:2b:ea:98:5c:
f9:d1:d1:e5:89:25:b4:c5:df:9e:55:f3:5a:8f:79:
43:eb:dd:16:8f:9e:f8:d6:29:e6:c2:a8:62:54:1a:
77:1b:d2:d5:a5:42:4b:bc:ea:5f:d2:bb:9a:4c:6e:
60:52:c3:d2:9c:7e:c7:a1:82:01:ec:07:5a:68:43:
c1:7a:3b:2a:ca:3e:35:f8:b0:04:cf:57:96:4f:38:
11:1c:25:da:38:67:af:fe:b0:5c:33:bd:13:13:33:
ae:65:1f:6e:53:6b:55:1a:af:54:22:fa:03:80:11:
80:c8:88:de:bc:d0:4e:6b:7b:62:e7:ae:0b:1b:15:
a1:b2:bf:b1:97:63:a1:ca:c3:71:b9:91:d7:9b:28:
aa:2d:83:4b:f0:56:09:ba:e3:5a:33:3a:8c:75:1d:
1a:26:cf:9b:8d:17:e5:c6:56:7e:46:24:d3:19:de:
c4:f7:59:d5:23:9e:16:a6:c9:ef:11:25:8c:3b:32:
95:6b:49:3b:3b:c5:d6:fa:46:41:7f:47:83:26:ad:
12:43:db:dd:cf:be:6f:8a:db:6c:75:1e:96:4b:81:
aa:99:28:48:48:a0:9a:bb:71:b5:8d:c6:20:f7:3f:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:CC:A2:57:72:51:F3:45:8C:FD:2B:3D:3F:ED:E1:64:17:14:07
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0e:bb:3b:52:0e:26:0a:10:de:ff:e8:6d:b1:4c:e1:cb:aa:
ce:0f:a6:9a:3d:ec:e9:57:7c:f3:35:b0:66:fc:a2:a3:2d:70:
c3:7e:c9:e8:6c:0b:ee:43:79:9f:b2:00:51:5b:42:f1:c7:e7:
4c:cb:ab:2d:6a:43:ba:e9:ba:a8:08:6b:cb:ee:7a:ba:c9:5b:
a9:19:7b:27:78:5e:89:fa:86:e1:3c:c7:b5:18:a4:62:75:ed:
2f:aa:22:0c:6c:c0:4f:05:a4:a3:db:09:a3:0d:ac:b5:fa:f3:
0a:9a:1c:ff:b0:a0:c6:f4:30:af:68:07:8f:96:ae:f4:57:7b:
9f:0f:b6:f6:eb:ed:76:fa:59:15:02:f3:0a:96:32:83:8c:40:
b1:1c:68:f4:c6:81:10:4f:77:e1:1a:f0:bf:97:34:01:5a:7c:
48:94:ad:2a:50:b2:77:80:c7:2d:ad:17:d1:6f:c1:56:fd:5e:
f4:af:28:55:9b:f7:fc:4c:b3:d8:eb:0e:ce:58:30:7a:39:55:
42:82:eb:ce:c8:7a:66:f4:02:2c:f5:f0:55:5c:46:33:eb:b8:
88:cb:66:05:6c:ac:ae:90:7e:eb:9e:a4:e3:b1:6a:d3:c5:2f:
96:31:93:24:10:e4:87:1d:49:f5:00:50:52:88:56:07:7e:2b:
90:8e:77:5b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+qvv/oEbCo8OXlHA2BFPGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1
YmJkNzcwHhcNMjYwNzI4MjIwMTExWhcNMjYwNzI5MjIwMTExWjAzMTEwLwYDVQQD
EyhkYTMyY2NhMjU3NzI1MWYzNDU4Y2ZkMmIzZDNmZWRlMTY0MTcxNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAvcKnhNHzxfFawMVbz6bvwdNAYu
ZMiaqCvqmFz50dHliSW0xd+eVfNaj3lD690Wj5741inmwqhiVBp3G9LVpUJLvOpf
0ruaTG5gUsPSnH7HoYIB7AdaaEPBejsqyj41+LAEz1eWTzgRHCXaOGev/rBcM70T
EzOuZR9uU2tVGq9UIvoDgBGAyIjevNBOa3ti564LGxWhsr+xl2OhysNxuZHXmyiq
LYNL8FYJuuNaMzqMdR0aJs+bjRflxlZ+RiTTGd7E91nVI54WpsnvESWMOzKVa0k7
O8XW+kZBf0eDJq0SQ9vdz75vittsdR6WS4GqmShISKCau3G1jcYg9z+VQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNoyzKJXclHzRYz9Kz0/7eFkFxQHMB8GA1UdIwQY
MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3
LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0
MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQ67
O1IOJgoQ3v/obbFM4cuqzg+mmj3s6Vd88zWwZvyioy1ww37J6GwL7kN5n7IAUVtC
8cfnTMurLWpDuum6qAhry+56uslbqRl7J3heifqG4TzHtRikYnXtL6oiDGzATwWk
o9sJow2stfrzCpoc/7CgxvQwr2gHj5au9Fd7nw+29uvtdvpZFQLzCpYyg4xAsRxo
9MaBEE934Rrwv5c0AVp8SJStKlCyd4DHLa0X0W/BVv1e9K8oVZv3/Eyz2OsOzlgw
ejlVQoLrzsh6ZvQCLPXwVVxGM+u4iMtmBWysrpB+656k47Fq08UvljGTJBDkhx1J
9QBQUohWB34rkI53Ww==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:06 2026 by rpki-client