Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: bZvp6CSm4o/9IHs6Vp24bXHFASeV4DcgjffqZ5hl9Ww=
Subject key identifier: 73:5B:20:53:B2:62:DE:52:41:3F:04:89:70:74:D5:A6:17:50:E3:C7
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 019FA907061A1DAB994240A0E47FAE5EFF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 14:00:37 +0000
Manifest this update: Tue 28 Jul 2026 14:00:37 +0000
Manifest next update: Wed 29 Jul 2026 14:00:37 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: 9TXACYukVb20UjLL+mYiCBH25Yaa2GrPRtWaIvq3rIs=)
2: A0zEfLP6aje6siYVgtOIFTUv-gA.roa (hash: U3yH+f7j1agPNZjyy4FkXU1kfVyaRAeAIT0ypJqPwSA=)
3: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:06:1a:1d:ab:99:42:40:a0:e4:7f:ae:5e:ff:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Jul 28 14:00:37 2026 GMT
Not After : Jul 29 14:00:37 2026 GMT
Subject: CN=735b2053b262de52413f04897074d5a61750e3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:3a:76:d9:b9:6f:78:3f:a0:01:36:34:1e:
d8:11:68:01:2d:fb:5e:cd:8d:54:ce:25:10:f8:b2:
11:56:ec:2c:c4:ac:6e:3e:cb:07:7b:82:6d:1a:1e:
26:70:7b:63:e7:c8:41:2b:d0:69:97:60:33:63:0e:
65:e4:8a:ef:c3:23:de:71:20:b2:3f:ae:35:34:3f:
6d:98:6e:67:f6:3c:5a:d3:7a:ae:0f:09:f9:33:51:
8a:e7:17:53:51:58:4a:e5:e0:75:9e:0b:4b:ed:67:
d0:60:83:99:4f:73:92:03:d0:cc:dc:cf:4e:b5:b2:
1f:69:17:cc:02:a7:a9:a4:1f:4e:32:fe:42:f7:e7:
c0:db:ea:fc:7b:17:ce:91:67:c2:74:2f:11:32:49:
64:12:51:4f:65:f8:fb:8b:7b:7f:49:b0:e7:17:f6:
5e:3c:30:7b:4b:c9:8e:c9:f4:fa:79:df:47:57:48:
22:7a:e7:14:04:01:66:2a:b7:1b:c6:91:5f:0c:32:
5a:ec:22:44:02:2e:5b:73:16:ea:01:f0:56:0f:bc:
fc:9f:11:5d:44:f8:36:44:d4:3c:36:5d:48:fe:e9:
b5:aa:84:cc:bf:8e:99:58:f0:c0:be:c3:d9:94:d9:
3e:6d:a7:db:00:b4:a0:72:f4:78:a1:48:98:b7:6f:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:20:53:B2:62:DE:52:41:3F:04:89:70:74:D5:A6:17:50:E3:C7
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:1c:f9:42:3f:62:29:95:07:03:21:2c:4f:a7:b3:78:83:
bc:bb:74:30:0a:b9:19:5d:65:b4:a5:21:84:0d:f3:94:92:8a:
88:e6:20:bf:2c:5b:ca:a1:8e:72:8f:db:1e:bd:ce:8e:b2:4b:
16:83:93:7a:64:71:77:97:7f:03:99:a1:14:f7:4f:46:c1:c7:
52:9e:93:a7:65:ad:db:f0:83:00:64:a8:45:94:1a:91:81:c5:
14:ec:ef:cf:47:a3:9f:61:a4:42:59:00:47:9c:38:85:1f:65:
52:97:48:f9:e0:91:c1:e6:8e:73:ae:ec:92:aa:6f:5e:e2:fb:
e7:2f:36:fe:75:61:75:5a:80:46:9e:81:76:42:74:75:9b:8f:
a1:76:82:6d:8a:fb:5b:53:c3:18:6d:8f:1b:5c:d2:d9:62:14:
61:1a:36:eb:a6:f5:b2:03:95:c9:7d:16:0b:e9:ce:2e:41:37:
2f:ea:9b:fb:b2:3c:7d:de:9b:53:d1:f7:f3:9e:68:52:f5:87:
f6:b6:12:d5:44:04:2f:4b:bb:97:1f:66:62:b3:67:89:cc:a4:
73:ad:8c:8d:2f:08:8a:44:50:26:48:09:c8:b0:23:77:5e:8d:
d9:1b:62:c6:bc:02:65:1d:06:12:26:40:b0:bc:1e:13:43:7e:
f0:22:f9:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBwYaHauZQkCg5H+uXv+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz
Y2I0OTUwHhcNMjYwNzI4MTQwMDM3WhcNMjYwNzI5MTQwMDM3WjAzMTEwLwYDVQQD
Eyg3MzViMjA1M2IyNjJkZTUyNDEzZjA0ODk3MDc0ZDVhNjE3NTBlM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCU6dtm5b3g/oAE2NB7YEWgBLfte
zY1UziUQ+LIRVuwsxKxuPssHe4JtGh4mcHtj58hBK9Bpl2AzYw5l5IrvwyPecSCy
P641ND9tmG5n9jxa03quDwn5M1GK5xdTUVhK5eB1ngtL7WfQYIOZT3OSA9DM3M9O
tbIfaRfMAqeppB9OMv5C9+fA2+r8exfOkWfCdC8RMklkElFPZfj7i3t/SbDnF/Ze
PDB7S8mOyfT6ed9HV0gieucUBAFmKrcbxpFfDDJa7CJEAi5bcxbqAfBWD7z8nxFd
RPg2RNQ8Nl1I/um1qoTMv46ZWPDAvsPZlNk+bafbALSgcvR4oUiYt293HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNbIFOyYt5SQT8EiXB01aYXUOPHMB8GA1UdIwQY
MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt
MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi
LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSYc+UI/
YimVBwMhLE+ns3iDvLt0MAq5GV1ltKUhhA3zlJKKiOYgvyxbyqGOco/bHr3OjrJL
FoOTemRxd5d/A5mhFPdPRsHHUp6Tp2Wt2/CDAGSoRZQakYHFFOzvz0ejn2GkQlkA
R5w4hR9lUpdI+eCRweaOc67skqpvXuL75y82/nVhdVqARp6BdkJ0dZuPoXaCbYr7
W1PDGG2PG1zS2WIUYRo266b1sgOVyX0WC+nOLkE3L+qb+7I8fd6bU9H3855oUvWH
9rYS1UQEL0u7lx9mYrNnicykc62MjS8IikRQJkgJyLAjd16N2RtixrwCZR0GEiZA
sLweE0N+8CL5qQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:04 2026 by rpki-client