Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: QBUsdRg86/gdFrpxPGRD9+YkW0G3cB1aLxlfUdtVZZU=
Subject key identifier: F8:89:F5:F9:B7:3C:59:42:37:E3:37:F3:35:B2:23:FC:DC:9B:1D:9E
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019F84C44A772AF9F60F6F5793108A42D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1653
Signing time: Tue 21 Jul 2026 13:01:24 +0000
Manifest this update: Tue 21 Jul 2026 13:01:24 +0000
Manifest next update: Wed 22 Jul 2026 13:01:24 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: ShqwJiaLZGUWpfyZdCMw2gCSwA1Ck64YoCAhV5uIYXs=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:4a:77:2a:f9:f6:0f:6f:57:93:10:8a:42:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Jul 21 13:01:24 2026 GMT
Not After : Jul 22 13:01:24 2026 GMT
Subject: CN=f889f5f9b73c594237e337f335b223fcdc9b1d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:fa:64:10:1d:ac:8f:8d:e7:e6:5a:73:f7:
b9:5f:e3:fd:32:a6:07:d1:45:ab:d9:39:d1:86:1a:
f3:45:9a:5b:cf:41:4a:18:a2:57:bd:7b:e2:ef:06:
ad:b3:9b:75:76:d4:5b:d1:70:87:86:ea:83:66:6d:
17:af:a2:3b:07:c8:13:72:36:69:ce:85:6c:cb:2d:
c6:0e:a6:4f:8f:71:70:90:53:1e:e8:31:85:88:1b:
70:28:f0:88:02:e9:57:2b:f2:03:5e:94:cc:e9:bf:
10:4e:e3:af:69:81:b4:aa:e7:1b:37:84:cf:fe:6b:
25:8e:af:c1:41:ac:72:5b:7f:f8:21:f8:4c:73:4c:
d7:44:bc:d0:0f:0d:c6:db:ab:ac:73:bb:dc:f0:38:
7d:0f:9c:c7:0f:8d:ab:3c:73:79:01:d0:a1:92:02:
b9:24:96:90:af:60:ab:e3:a5:12:9d:fa:36:4e:fe:
1b:42:d0:f8:13:9c:f0:b9:0f:b4:80:43:fb:e0:ff:
f5:cb:51:1b:3d:8d:dc:30:35:d9:fc:c0:09:ed:3a:
c7:ab:41:3c:ba:8b:ca:c4:b0:5a:cd:8b:9b:06:24:
4f:3a:48:3c:cc:b8:62:14:27:cd:02:95:3f:ba:82:
79:d8:3d:50:6a:bd:8f:aa:c4:92:70:4e:e7:dd:b3:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:F5:F9:B7:3C:59:42:37:E3:37:F3:35:B2:23:FC:DC:9B:1D:9E
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2d:43:cb:9c:f4:de:39:f0:e7:d9:3d:5a:76:1b:7f:09:76:
a1:92:85:94:cc:19:b3:33:c0:5f:ba:a8:7d:2b:0f:5b:4b:79:
70:86:f5:0a:ac:68:92:1e:eb:e1:84:05:f7:98:5a:0c:29:5a:
56:99:ca:e8:d3:dd:a0:ee:13:3c:aa:a6:f4:9d:57:d7:17:80:
0e:8a:6f:34:c2:d4:01:46:39:9f:77:4f:d4:f4:75:3d:de:74:
72:cb:f1:26:1c:89:be:2c:c2:b0:12:c7:65:b2:58:21:4d:71:
01:b4:36:ca:6d:a7:a6:57:a5:0d:6f:83:67:0b:f4:53:2f:1b:
47:83:a7:fb:dd:b5:56:43:9b:22:b2:1f:47:ed:89:3c:07:d3:
fb:d4:50:9f:aa:60:a0:55:cf:aa:60:02:cc:70:93:3e:2b:28:
da:87:de:ed:8a:8b:6b:27:34:d1:0e:ff:3b:04:4b:17:fe:93:
1d:ae:36:3f:72:a6:79:2d:37:5f:5d:c2:bd:f1:10:0c:30:01:
e0:4c:8a:e4:dd:30:01:27:7e:6f:13:0b:72:53:92:d6:29:a9:
7c:9f:89:4b:59:8e:80:6d:fa:bf:81:c4:85:5f:de:79:00:0b:
8c:a1:dd:52:92:09:9b:aa:52:15:08:87:68:29:90:19:35:dd:
27:00:aa:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExEp3Kvn2D29XkxCKQtAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3
ZmFlOTIwHhcNMjYwNzIxMTMwMTI0WhcNMjYwNzIyMTMwMTI0WjAzMTEwLwYDVQQD
EyhmODg5ZjVmOWI3M2M1OTQyMzdlMzM3ZjMzNWIyMjNmY2RjOWIxZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vb6ZBAdrI+N5+Zac/e5X+P9MqYH
0UWr2TnRhhrzRZpbz0FKGKJXvXvi7wats5t1dtRb0XCHhuqDZm0Xr6I7B8gTcjZp
zoVsyy3GDqZPj3FwkFMe6DGFiBtwKPCIAulXK/IDXpTM6b8QTuOvaYG0qucbN4TP
/msljq/BQaxyW3/4IfhMc0zXRLzQDw3G26usc7vc8Dh9D5zHD42rPHN5AdChkgK5
JJaQr2Cr46USnfo2Tv4bQtD4E5zwuQ+0gEP74P/1y1EbPY3cMDXZ/MAJ7TrHq0E8
uovKxLBazYubBiRPOkg8zLhiFCfNApU/uoJ52D1Qar2PqsSScE7n3bMKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiJ9fm3PFlCN+M38zWyI/zcmx2eMB8GA1UdIwQY
MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt
YTIzNTFmNGU4OTE1LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1
LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzS1Dy5z0
3jnw59k9WnYbfwl2oZKFlMwZszPAX7qofSsPW0t5cIb1Cqxokh7r4YQF95haDCla
VpnK6NPdoO4TPKqm9J1X1xeADopvNMLUAUY5n3dP1PR1Pd50csvxJhyJvizCsBLH
ZbJYIU1xAbQ2ym2nplelDW+DZwv0Uy8bR4On+921VkObIrIfR+2JPAfT+9RQn6pg
oFXPqmACzHCTPiso2ofe7YqLayc00Q7/OwRLF/6THa42P3KmeS03X13CvfEQDDAB
4EyK5N0wASd+bxMLclOS1impfJ+JS1mOgG36v4HEhV/eeQALjKHdUpIJm6pSFQiH
aCmQGTXdJwCqUg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:17 2026 by rpki-client