Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: LTKn7FtDYBfetsl12cTwvTlseXMo+HqLfD8eQ+tCAoI=
Subject key identifier: FB:B3:30:1F:DC:56:4A:86:CE:F9:29:0F:53:70:0F:A7:E1:B4:91:56
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019F8531EA181E61A80D5A48DCA9D4997CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 19CB
Signing time: Tue 21 Jul 2026 15:01:08 +0000
Manifest this update: Tue 21 Jul 2026 15:01:08 +0000
Manifest next update: Wed 22 Jul 2026 15:01:08 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: LWEuzb2evtSzoTcAHr68eCk69CYGs8+HTNq1FW6Ev8g=)
2: 6sTBdAYOdsPVCJ7oIkKrll3rRVI.roa (hash: yTR0IA9nFjjo1Ldxk+L5OOie2llv02FCoCgvYWgevjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:ea:18:1e:61:a8:0d:5a:48:dc:a9:d4:99:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jul 21 15:01:08 2026 GMT
Not After : Jul 22 15:01:08 2026 GMT
Subject: CN=fbb3301fdc564a86cef9290f53700fa7e1b49156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8f:df:78:cc:ae:af:95:95:4c:70:67:95:85:
cf:b4:be:e2:a4:61:ed:0d:ee:87:a9:aa:17:02:f2:
28:6c:59:5b:bc:98:6a:7c:e5:65:a7:30:0b:d8:e4:
2a:59:1c:29:79:fb:a0:26:ce:77:1d:65:d4:86:a7:
40:79:5e:03:bc:b7:7b:c3:18:1c:d5:b4:a4:d6:ec:
12:6b:57:c6:ee:4a:19:30:e6:72:6e:74:69:df:23:
29:65:c8:e6:31:28:78:7f:f1:c2:79:c3:8f:e2:d9:
67:09:40:71:64:4b:52:f6:ce:09:c3:c0:15:d4:21:
90:a1:f1:c8:cf:34:ce:90:72:21:e0:2f:de:5c:d8:
18:87:3e:91:66:e8:72:76:b2:b9:80:97:b3:76:1b:
ce:5d:bb:e8:c3:b6:05:cc:92:03:ce:a8:f8:fc:21:
ff:db:1c:70:db:f3:01:1a:80:e3:81:f7:61:70:17:
22:75:dc:55:2b:52:d1:25:8f:60:56:40:99:a4:83:
a6:a2:6b:94:0c:f1:b1:c9:58:ac:a6:1f:d7:b7:94:
fa:e6:c4:2c:7b:db:d6:16:0c:a8:78:01:14:13:3d:
09:5f:25:d6:ba:29:21:66:e6:7f:6f:ca:85:99:5d:
09:da:ad:8a:f9:27:ff:9f:9d:2f:79:5f:94:92:03:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:30:1F:DC:56:4A:86:CE:F9:29:0F:53:70:0F:A7:E1:B4:91:56
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:9a:bd:90:40:d6:fa:3d:97:5e:35:23:ae:67:1c:09:75:
48:39:50:32:86:af:5b:d0:e9:51:02:aa:dd:04:5b:49:58:1c:
be:47:9e:92:3c:00:50:db:af:05:ca:29:ec:74:87:11:1a:ea:
92:6c:e7:22:af:c1:61:0d:2f:20:bd:33:7e:9a:53:63:30:77:
0b:7d:e1:78:55:46:8a:3d:d7:96:c4:08:64:ef:a6:14:ff:9e:
fb:db:15:63:2e:68:c1:0f:f9:9a:ba:72:31:eb:d3:20:32:05:
dc:b6:4d:23:72:3c:09:e9:2d:a9:3c:2f:f7:d1:94:d8:d8:77:
7b:d7:47:66:4a:ad:a3:1a:25:71:0c:ea:9d:30:af:d4:db:74:
49:e9:c5:13:57:b0:6e:56:30:f6:aa:57:d7:8b:02:e0:b5:1f:
17:0e:5f:a7:50:db:32:fd:a2:cf:3e:6b:4a:d3:9a:97:5f:01:
02:dc:f0:e8:41:36:14:06:80:97:66:61:a6:e9:63:89:32:a6:
c5:fa:3f:c1:58:a1:93:f2:f6:2a:cc:b9:1d:a8:9d:3c:fa:73:
cc:ec:94:86:90:20:0a:f4:c2:14:35:a3:b7:d9:fc:04:20:94:
1f:5b:c9:5d:da:7d:42:f7:e2:90:5b:e6:b2:f5:9f:21:7c:3c:
d0:af:23:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMeoYHmGoDVpI3KnUmXz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm
ZWRlMDAwHhcNMjYwNzIxMTUwMTA4WhcNMjYwNzIyMTUwMTA4WjAzMTEwLwYDVQQD
EyhmYmIzMzAxZmRjNTY0YTg2Y2VmOTI5MGY1MzcwMGZhN2UxYjQ5MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o/feMyur5WVTHBnlYXPtL7ipGHt
De6HqaoXAvIobFlbvJhqfOVlpzAL2OQqWRwpefugJs53HWXUhqdAeV4DvLd7wxgc
1bSk1uwSa1fG7koZMOZybnRp3yMpZcjmMSh4f/HCecOP4tlnCUBxZEtS9s4Jw8AV
1CGQofHIzzTOkHIh4C/eXNgYhz6RZuhydrK5gJezdhvOXbvow7YFzJIDzqj4/CH/
2xxw2/MBGoDjgfdhcBciddxVK1LRJY9gVkCZpIOmomuUDPGxyVisph/Xt5T65sQs
e9vWFgyoeAEUEz0JXyXWuikhZuZ/b8qFmV0J2q2K+Sf/n50veV+UkgN+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuzMB/cVkqGzvkpD1NwD6fhtJFWMB8GA1UdIwQY
MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt
NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli
LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMOavZBA
1vo9l141I65nHAl1SDlQMoavW9DpUQKq3QRbSVgcvkeekjwAUNuvBcop7HSHERrq
kmznIq/BYQ0vIL0zfppTYzB3C33heFVGij3XlsQIZO+mFP+e+9sVYy5owQ/5mrpy
MevTIDIF3LZNI3I8CektqTwv99GU2Nh3e9dHZkqtoxolcQzqnTCv1Nt0SenFE1ew
blYw9qpX14sC4LUfFw5fp1DbMv2izz5rStOal18BAtzw6EE2FAaAl2ZhpuljiTKm
xfo/wVihk/L2Ksy5HaidPPpzzOyUhpAgCvTCFDWjt9n8BCCUH1vJXdp9QvfikFvm
svWfIXw80K8j7w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:39 2026 by rpki-client