Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: Yf2/qfMIkCotBj9vX0H/hzo5s/L+kpYVLrVFS1QZ3Ik=
Subject key identifier: 64:F3:C8:06:07:50:F3:73:B1:1B:CF:91:D1:AE:A6:04:68:95:9B:66
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019FA9AC4852CA2DDA5D56101CC637003C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 1589
Signing time: Tue 28 Jul 2026 17:01:07 +0000
Manifest this update: Tue 28 Jul 2026 17:01:07 +0000
Manifest next update: Wed 29 Jul 2026 17:01:07 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: YmGPQ9kwfoMVcRis4dD8iDalXDFWPpJwe0g/5kXXuxA=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:48:52:ca:2d:da:5d:56:10:1c:c6:37:00:3c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Jul 28 17:01:07 2026 GMT
Not After : Jul 29 17:01:07 2026 GMT
Subject: CN=64f3c8060750f373b11bcf91d1aea60468959b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:f4:95:44:e8:68:4a:7a:c7:ee:ef:1b:05:
c3:73:e5:6e:03:fe:11:f2:4c:98:ff:f4:aa:d2:bc:
02:11:28:a3:ac:63:7c:39:fc:87:b7:df:e5:36:30:
43:b4:24:f3:fc:8f:9d:a6:b8:17:24:6c:f6:0e:fd:
d6:ed:23:57:6e:f0:bc:aa:9a:cb:5c:77:ac:6e:f7:
7d:02:8c:92:38:07:bd:a3:44:93:47:96:c9:16:c8:
d6:52:50:1c:2c:77:f9:e8:5a:d3:d3:63:a3:78:fb:
b4:bf:52:6e:4f:a3:1e:b6:2c:20:c6:98:be:2f:b1:
1d:0a:05:11:c1:06:ca:73:7c:e4:76:fe:7d:ac:36:
91:4f:53:2a:9b:28:23:40:5f:6e:fd:0d:83:22:51:
83:01:48:b0:56:04:33:5f:02:aa:bf:cf:29:db:04:
0d:d3:14:30:1a:75:e2:c7:28:d0:9e:df:c6:a7:e7:
5e:b8:f8:d0:0b:b8:e2:a7:1b:f5:d7:3f:55:43:98:
b2:7c:5e:0c:ab:5f:f2:1a:e4:ba:5b:af:a4:d0:d1:
88:9b:cc:8d:48:56:36:04:1c:76:78:fa:ea:a4:d2:
fd:c9:59:a2:5e:5c:fb:3e:13:12:51:af:4c:11:24:
21:a7:85:94:0a:7d:4c:93:19:de:ee:1d:49:c5:e0:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:C8:06:07:50:F3:73:B1:1B:CF:91:D1:AE:A6:04:68:95:9B:66
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ed:c3:d5:6c:5c:86:5f:8f:4c:ab:99:f5:26:54:8e:03:77:
20:16:34:4b:02:de:7b:65:64:41:0e:53:22:68:b1:72:a3:2c:
03:43:f9:48:ee:61:13:44:59:26:df:7b:f2:0f:95:a1:5c:39:
cd:91:17:19:f4:c0:9e:6e:73:e6:10:72:83:62:13:be:5c:16:
d5:41:06:68:f1:7e:19:0b:a0:c3:bb:3d:c1:1f:c9:cf:6b:c3:
c1:cc:46:ac:33:49:0e:ee:e3:92:03:15:c7:90:27:ab:74:10:
92:0d:77:67:b5:34:84:34:3b:d1:be:44:1a:25:17:5c:55:f9:
fe:84:5b:09:0f:19:9c:29:f2:85:d0:fb:1f:fd:13:b6:4e:55:
ef:aa:e0:39:fd:38:47:ae:2c:8c:fc:30:2a:1a:e1:c7:bb:30:
78:fe:29:04:98:f4:13:03:c5:89:29:25:47:e8:85:fa:25:4f:
de:13:84:62:fb:6e:79:b0:cb:ff:6a:b2:94:7c:45:75:b5:1e:
3a:db:c4:65:55:f2:b0:13:0c:2f:fc:f9:6e:cf:61:39:d1:01:
b7:9d:ed:b3:4a:a5:ec:5f:c0:06:2c:b5:24:9a:c5:fd:85:c7:
b9:d2:77:a7:60:9c:6b:4f:73:f5:26:2e:13:c6:2b:38:83:cc:
4f:3b:ff:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prEhSyi3aXVYQHMY3ADyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3
ZTViMmYwHhcNMjYwNzI4MTcwMTA3WhcNMjYwNzI5MTcwMTA3WjAzMTEwLwYDVQQD
Eyg2NGYzYzgwNjA3NTBmMzczYjExYmNmOTFkMWFlYTYwNDY4OTU5YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Az0lUToaEp6x+7vGwXDc+VuA/4R
8kyY//Sq0rwCESijrGN8OfyHt9/lNjBDtCTz/I+dprgXJGz2Dv3W7SNXbvC8qprL
XHesbvd9AoySOAe9o0STR5bJFsjWUlAcLHf56FrT02OjePu0v1JuT6Metiwgxpi+
L7EdCgURwQbKc3zkdv59rDaRT1MqmygjQF9u/Q2DIlGDAUiwVgQzXwKqv88p2wQN
0xQwGnXixyjQnt/Gp+deuPjQC7jipxv11z9VQ5iyfF4Mq1/yGuS6W6+k0NGIm8yN
SFY2BBx2ePrqpNL9yVmiXlz7PhMSUa9MESQhp4WUCn1Mkxne7h1JxeAmYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTzyAYHUPNzsRvPkdGupgRolZtmMB8GA1UdIwQY
MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt
ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx
LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO3D1Wxc
hl+PTKuZ9SZUjgN3IBY0SwLee2VkQQ5TImixcqMsA0P5SO5hE0RZJt978g+VoVw5
zZEXGfTAnm5z5hByg2ITvlwW1UEGaPF+GQugw7s9wR/Jz2vDwcxGrDNJDu7jkgMV
x5Anq3QQkg13Z7U0hDQ70b5EGiUXXFX5/oRbCQ8ZnCnyhdD7H/0Ttk5V76rgOf04
R64sjPwwKhrhx7sweP4pBJj0EwPFiSklR+iF+iVP3hOEYvtuebDL/2qylHxFdbUe
OtvEZVXysBMML/z5bs9hOdEBt53ts0ql7F/ABiy1JJrF/YXHudJ3p2Cca09z9SYu
E8YrOIPMTzv/Fw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:04 2026 by rpki-client