Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
File: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft (raw, json)
Hash identifier: ZaYaOGWddCG3QWbUMDB+viXYMnq/fuAZpFI3S8HKJ9s=
Subject key identifier: 00:99:6E:CF:24:C3:E5:4F:A6:9B:7C:08:71:31:71:18:D3:C1:3A:43
Authority key identifier: FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
Certificate issuer: /CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Certificate serial: 019FA8993871A579D4EF3DCD01D3DF753966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:41 +0000
Manifest this update: Tue 28 Jul 2026 12:00:41 +0000
Manifest next update: Wed 29 Jul 2026 12:00:41 +0000
Files and hashes: 1: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl (hash: 5ffJxLvopQUNgtewWYSO+0rx3HuNi3ls08bMJnyT3W0=)
2: e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa (hash: BA/0hbuhvoStHQX1fKvbqzVATh/m+qBTaz7v7V7bT6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:38:71:a5:79:d4:ef:3d:cd:01:d3:df:75:39:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Validity
Not Before: Jul 28 12:00:41 2026 GMT
Not After : Jul 29 12:00:41 2026 GMT
Subject: CN=00996ecf24c3e54fa69b7c0871317118d3c13a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:2f:54:b3:0e:8e:8d:6d:78:c6:83:82:d7:
22:62:84:c5:df:13:79:47:0c:56:3d:02:20:11:2c:
63:8d:fe:3a:2b:5c:b6:41:0a:81:f7:1c:43:20:88:
a2:95:cb:65:c2:fd:eb:92:5f:65:2e:7c:5d:86:2d:
ba:16:6d:b4:61:da:be:92:c9:63:93:01:9c:64:ad:
c8:ca:d1:19:1e:80:5f:a9:e3:27:5c:b4:81:ec:4b:
68:6a:52:7f:79:36:10:33:64:8e:d2:b8:9f:22:8c:
86:e4:ed:ed:28:42:52:63:8f:49:f9:8e:95:b0:6d:
44:a5:45:1b:8a:1c:97:80:4c:4e:be:cc:b9:cb:b4:
2c:1d:7f:a8:54:cc:1f:c0:d5:d7:2d:48:ce:c2:9f:
86:f2:c7:10:67:8e:a0:3c:d7:2c:19:ad:b7:9c:1f:
12:d4:60:62:9f:40:48:40:f6:5a:de:21:b9:de:78:
ce:c7:e7:08:bf:56:29:1d:03:3e:20:0e:9c:21:f4:
4c:7e:46:17:d2:a8:d3:a5:db:9b:6a:de:f0:22:2c:
a7:bc:f3:ae:4a:13:1d:d3:39:9a:3d:8c:d4:bb:74:
f4:40:cb:dc:74:1f:26:1f:d2:c6:f9:60:84:54:f5:
0b:02:59:c2:e1:27:75:ed:99:d9:c2:04:7a:51:4f:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:6E:CF:24:C3:E5:4F:A6:9B:7C:08:71:31:71:18:D3:C1:3A:43
X509v3 Authority Key Identifier:
keyid:FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:b0:3c:c5:66:7d:cc:ee:d0:df:95:c2:57:1c:5f:4b:4f:
26:05:b4:e2:60:86:3f:20:a4:c1:f0:1d:67:68:a1:13:a1:3a:
75:b4:c4:50:3a:c7:f5:f4:30:79:07:e3:59:12:b7:57:bb:4c:
94:0b:73:8e:ee:00:c2:bc:f3:20:3b:42:d1:b8:3f:9a:80:1c:
d2:39:ae:c1:5f:30:68:df:d3:7b:12:3f:02:81:21:01:83:c2:
8b:05:ad:61:1f:96:ba:a5:4b:78:5c:88:98:a6:8c:90:a3:c0:
f8:d4:76:db:b1:7c:6e:01:5b:23:a5:55:1b:a2:05:0f:44:0e:
cd:c9:e7:f8:cd:92:fc:d9:c0:44:86:48:86:c3:a2:eb:e1:f5:
82:65:a9:0a:75:86:30:af:06:97:c7:0a:5d:d0:0d:57:9c:c3:
87:eb:e1:74:b1:ce:4f:22:bc:e3:33:b6:b8:6f:f7:27:48:8b:
d8:e5:be:7b:dc:d5:69:52:24:ef:22:f5:8e:77:4f:5a:83:3f:
29:89:80:d9:c5:a8:98:31:e8:b9:45:c4:f3:c1:42:b4:09:24:
07:66:38:0b:38:d3:df:62:79:c4:64:4b:af:78:49:0d:de:03:
ee:96:96:16:c5:8e:9b:a4:e6:44:a5:75:7c:3f:f1:94:c1:84:
7b:30:9d:77
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+omThxpXnU7z3NAdPfdTlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYmY4OGQyYTFlOTRhYzFkZDMwNjNjNDczMzBiYmFkNzVm
NjUxMzUwHhcNMjYwNzI4MTIwMDQxWhcNMjYwNzI5MTIwMDQxWjAzMTEwLwYDVQQD
EygwMDk5NmVjZjI0YzNlNTRmYTY5YjdjMDg3MTMxNzExOGQzYzEzYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFIvVLMOjo1teMaDgtciYoTF3xN5
RwxWPQIgESxjjf46K1y2QQqB9xxDIIiilctlwv3rkl9lLnxdhi26Fm20Ydq+kslj
kwGcZK3IytEZHoBfqeMnXLSB7EtoalJ/eTYQM2SO0rifIoyG5O3tKEJSY49J+Y6V
sG1EpUUbihyXgExOvsy5y7QsHX+oVMwfwNXXLUjOwp+G8scQZ46gPNcsGa23nB8S
1GBin0BIQPZa3iG53njOx+cIv1YpHQM+IA6cIfRMfkYX0qjTpdubat7wIiynvPOu
ShMd0zmaPYzUu3T0QMvcdB8mH9LG+WCEVPULAlnC4Sd17ZnZwgR6UU9TQQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFACZbs8kw+VPppt8CHExcRjTwTpDMB8GA1UdIwQY
MBaAFPq/iNKh6UrB3TBjxHMwu6119lE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yLUkwcUhwU3NIZE1HUEVjekM3clhYMlVUVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZjk3NzIyLTgzOTItNDgwZC1hYzk2
LTE1MTMyODRiMzNiMi8xLzEtci1JMHFIcFNzSGRNR1BFY3pDN3JYWDJVVFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U2L2Y5NzcyMi04MzkyLTQ4MGQtYWM5Ni0xNTEzMjg0YjMz
YjIvMS8xLXItSTBxSHBTc0hkTUdQRWN6QzdyWFgyVVRVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg2w
PMVmfczu0N+VwlccX0tPJgW04mCGPyCkwfAdZ2ihE6E6dbTEUDrH9fQweQfjWRK3
V7tMlAtzju4AwrzzIDtC0bg/moAc0jmuwV8waN/TexI/AoEhAYPCiwWtYR+WuqVL
eFyImKaMkKPA+NR227F8bgFbI6VVG6IFD0QOzcnn+M2S/NnARIZIhsOi6+H1gmWp
CnWGMK8Gl8cKXdANV5zDh+vhdLHOTyK84zO2uG/3J0iL2OW+e9zVaVIk7yL1jndP
WoM/KYmA2cWomDHouUXE88FCtAkkB2Y4CzjT32J5xGRLr3hJDd4D7paWFsWOm6Tm
RKV1fD/xlMGEezCddw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:15:38 2026 by rpki-client