Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: g7D3sUO0XSSew2CMQRbYxTIzClyO1422v4/JXuFdAUw=
Subject key identifier: 68:46:DA:21:D2:2F:54:9D:8F:1D:6A:D5:DC:63:1B:8F:FE:1F:C8:57
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019FAC07CCCC7C0970A39367880E3A422A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 04:00:19 +0000
Manifest this update: Wed 29 Jul 2026 04:00:19 +0000
Manifest next update: Thu 30 Jul 2026 04:00:19 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: 0vm8aCn+/QZbwjUxQYit3GftkhyArMW/HArZyv5O1vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:cc:cc:7c:09:70:a3:93:67:88:0e:3a:42:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Jul 29 04:00:19 2026 GMT
Not After : Jul 30 04:00:19 2026 GMT
Subject: CN=6846da21d22f549d8f1d6ad5dc631b8ffe1fc857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:78:88:b4:85:f2:13:5c:09:e9:12:0c:a7:
39:a6:37:31:e0:ea:56:f9:a3:46:5e:2b:07:e8:1c:
60:92:4a:9b:cf:77:d9:7e:58:f1:58:e7:d2:56:33:
6e:86:80:8d:87:0e:35:35:e0:5e:62:5d:78:d1:18:
02:67:d9:13:e5:c1:8a:2c:b5:c2:0e:84:d3:2d:1f:
99:e5:e7:62:8b:34:4d:c1:a1:94:fe:dc:91:02:3a:
b3:11:65:94:5a:3a:41:e9:9e:84:7c:38:08:59:db:
bd:c4:45:c9:de:75:0e:47:0e:40:80:b0:e0:8f:bc:
cb:d7:de:af:cf:6f:e4:a1:a3:28:2f:bb:36:a3:e0:
dc:a4:f8:45:74:de:19:bd:84:b5:38:c1:0e:80:3b:
64:d6:ee:5e:2d:24:80:33:8c:c5:f7:74:ab:a7:ca:
bd:01:fc:05:43:e9:b7:b2:19:b6:b2:24:15:e6:79:
e0:b5:34:de:ce:d4:d2:41:06:96:5b:0e:ad:b1:60:
c2:e8:41:01:fd:31:72:e9:38:b7:04:1d:d8:2f:2b:
54:41:bb:d5:93:71:67:37:e5:af:1a:db:ea:19:85:
95:ca:d4:29:e6:e7:12:c0:07:31:6a:98:52:d5:b6:
a9:74:d4:35:27:d5:26:88:c9:80:5d:e5:e8:3d:8e:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:DA:21:D2:2F:54:9D:8F:1D:6A:D5:DC:63:1B:8F:FE:1F:C8:57
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f1:92:3f:25:06:91:f5:6e:26:2d:c2:2b:81:25:cc:cb:92:
27:d2:5b:e2:d6:b0:1c:f2:a0:2f:54:1c:2d:cc:d2:1f:08:42:
ae:d0:a7:da:91:05:ec:f8:8d:92:fb:bb:b8:4b:e1:47:d9:38:
99:bf:1b:14:94:14:30:4a:6a:74:76:99:73:e9:16:fe:d0:41:
7d:1d:81:66:fb:64:23:88:94:b0:04:05:0d:2b:5f:bd:b7:56:
6c:21:b6:79:b6:76:ca:48:24:a3:d1:45:3c:7d:24:0b:fa:56:
40:0d:20:03:6a:31:6b:4f:5e:c2:0c:dc:dc:40:5d:03:c0:82:
88:65:ea:3d:71:f1:75:c3:d2:5d:ca:c9:54:51:e9:bb:5f:13:
6a:74:f7:33:6d:b8:f6:07:0a:c6:20:24:62:26:f2:60:47:bb:
09:8e:d1:b9:30:0d:db:73:55:23:86:64:7b:fe:1f:56:54:09:
05:fa:3e:0f:e0:1e:69:fe:d0:70:33:dd:a3:a4:de:8e:a4:9a:
88:be:bc:f3:a7:4c:2e:f2:6c:19:8d:1e:f2:c5:88:6d:12:e7:
c2:3e:52:87:fb:88:7e:9c:36:51:a8:85:f8:e8:43:d1:64:48:
53:58:e0:7d:8c:dc:0b:ec:e3:4f:17:2c:fb:7a:6b:4a:db:15:
13:36:d8:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+sB8zMfAlwo5NniA46QioEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjViMWQ2MWUwOWE0ZTRiMGRkMWIwNWNlZDhlNjUxM2Jj
NjYxODcwHhcNMjYwNzI5MDQwMDE5WhcNMjYwNzMwMDQwMDE5WjAzMTEwLwYDVQQD
Eyg2ODQ2ZGEyMWQyMmY1NDlkOGYxZDZhZDVkYzYzMWI4ZmZlMWZjODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnl4iLSF8hNcCekSDKc5pjcx4OpW
+aNGXisH6Bxgkkqbz3fZfljxWOfSVjNuhoCNhw41NeBeYl140RgCZ9kT5cGKLLXC
DoTTLR+Z5ediizRNwaGU/tyRAjqzEWWUWjpB6Z6EfDgIWdu9xEXJ3nUORw5AgLDg
j7zL196vz2/koaMoL7s2o+DcpPhFdN4ZvYS1OMEOgDtk1u5eLSSAM4zF93Srp8q9
AfwFQ+m3shm2siQV5nngtTTeztTSQQaWWw6tsWDC6EEB/TFy6Ti3BB3YLytUQbvV
k3FnN+WvGtvqGYWVytQp5ucSwAcxaphS1bapdNQ1J9UmiMmAXeXoPY6xLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGhG2iHSL1Sdjx1q1dxjG4/+H8hXMB8GA1UdIwQY
MBaAFPu1sdYeCaTksN0bBc7Y5lE7xmGHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03V3gxaDRKcE9TdzNSc0Z6dGptVVR2R1lZYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZThhYTc5LTE1NzYtNGNmYS04OTRh
LWIxZTAxMzUwNjc1Yi8xLzEtN1d4MWg0SnBPU3czUnNGenRqbVVUdkdZWWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VlL2U4YWE3OS0xNTc2LTRjZmEtODk0YS1iMWUwMTM1MDY3
NWIvMS8xLTdXeDFoNEpwT1N3M1JzRnp0am1VVHZHWVljLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/GS
PyUGkfVuJi3CK4ElzMuSJ9Jb4tawHPKgL1QcLczSHwhCrtCn2pEF7PiNkvu7uEvh
R9k4mb8bFJQUMEpqdHaZc+kW/tBBfR2BZvtkI4iUsAQFDStfvbdWbCG2ebZ2ykgk
o9FFPH0kC/pWQA0gA2oxa09ewgzc3EBdA8CCiGXqPXHxdcPSXcrJVFHpu18TanT3
M2249gcKxiAkYibyYEe7CY7RuTAN23NVI4Zke/4fVlQJBfo+D+Aeaf7QcDPdo6Te
jqSaiL6886dMLvJsGY0e8sWIbRLnwj5Sh/uIfpw2UaiF+OhD0WRIU1jgfYzcC+zj
Txcs+3prStsVEzbYmw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:05 2026 by rpki-client