Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: 82skKhVY4KknmGwSYQyHtqqGxC3syAomTniPQ2maKR0=
Subject key identifier: 67:A4:65:13:B7:38:95:BF:74:50:29:39:CB:05:1C:95:E2:7E:C4:1E
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019F1943E253CE50AB15E092D5BAA8C2F188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 0649
Signing time: Tue 30 Jun 2026 16:01:46 +0000
Manifest this update: Tue 30 Jun 2026 16:01:46 +0000
Manifest next update: Wed 01 Jul 2026 16:01:46 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: DGrHSbI4at6ikpOsjnKsKz9dkSFWChTNA9nrEZW20e8=)
2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e2:53:ce:50:ab:15:e0:92:d5:ba:a8:c2:f1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Jun 30 16:01:46 2026 GMT
Not After : Jul 1 16:01:46 2026 GMT
Subject: CN=67a46513b73895bf74502939cb051c95e27ec41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:e0:09:24:80:f8:3e:91:60:cf:18:f2:c3:
4d:bd:f2:01:f6:f3:33:d4:62:5e:1a:1b:13:e0:2e:
0e:6f:62:49:5a:ed:b4:a9:d3:63:ca:f4:ef:6d:c7:
24:8b:2d:0f:2e:da:67:86:42:00:12:da:e3:e7:6e:
ce:93:4c:8a:d6:35:bb:ad:9a:52:33:98:08:58:a3:
73:c9:b3:0f:3f:7c:08:24:a5:9a:7e:dc:62:d7:53:
65:56:a0:c2:b0:01:b9:e3:a9:d8:a7:de:2b:44:11:
28:37:af:23:53:f6:f6:31:d9:22:22:43:98:91:30:
3e:ab:79:98:f5:1b:92:4c:9b:1f:96:35:24:b1:ac:
fb:c6:71:25:bf:28:72:4a:34:7a:db:9d:d4:73:88:
7b:bb:5f:b9:29:5e:7a:77:f6:7d:fc:c9:5d:17:c8:
d4:29:26:f2:8e:6d:db:73:ee:c9:9d:f4:30:82:3a:
5d:bf:98:53:ab:34:b0:a0:0f:7e:14:f6:a7:cf:2e:
6d:6e:1c:79:8e:80:fb:0d:7d:82:bb:65:c6:60:21:
7c:df:e6:4a:3a:31:60:23:5c:0e:03:7c:00:6f:60:
8a:ea:a8:b4:57:76:c7:7b:b7:35:f4:f8:85:2c:3b:
0a:07:fe:62:88:a7:40:3e:88:f2:24:ba:4b:ba:27:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:65:13:B7:38:95:BF:74:50:29:39:CB:05:1C:95:E2:7E:C4:1E
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:13:be:85:a0:60:43:f7:74:d3:1a:f6:d6:fd:48:11:fc:7c:
86:8e:6d:e0:48:71:57:d3:73:b4:15:d2:9f:1c:ad:a3:14:29:
59:62:c7:5b:45:7e:22:c7:54:e4:1f:c0:0d:e2:d0:e5:53:7e:
dc:25:95:42:d2:8a:2e:dd:23:32:85:d9:bc:67:17:72:5a:cc:
9d:ac:99:ba:bf:03:a1:d5:29:da:cc:92:a3:91:4a:ae:72:ee:
43:94:88:52:8f:49:c7:79:ea:d3:24:cc:17:2d:c8:e5:75:30:
ba:ec:b0:98:68:07:6d:fc:5c:70:96:7c:bd:92:77:47:03:25:
88:4e:ba:da:0e:47:6c:86:fb:a3:40:cc:bb:9e:8f:78:74:7a:
86:a3:7b:a1:c2:9a:a6:b6:ec:cf:d1:f1:a8:c5:0a:5d:09:28:
e4:ef:cc:59:76:45:ba:cf:3b:f0:7a:6d:de:79:18:95:b5:16:
e3:dd:38:b1:05:ae:b4:ff:24:25:80:37:e0:ac:bd:63:5e:c5:
42:61:27:c6:c0:f4:4f:f6:0d:0b:8e:0a:e8:09:44:79:be:99:
2a:93:82:38:7c:ca:e6:cb:60:a9:95:92:5e:d4:d5:0d:74:ef:
21:22:80:67:a8:d9:bf:6c:56:70:dc:a5:fe:2c:1d:f0:9d:ed:
35:b2:30:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ+JTzlCrFeCS1bqowvGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3
OTc5ZjcwHhcNMjYwNjMwMTYwMTQ2WhcNMjYwNzAxMTYwMTQ2WjAzMTEwLwYDVQQD
Eyg2N2E0NjUxM2I3Mzg5NWJmNzQ1MDI5MzljYjA1MWM5NWUyN2VjNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyjgCSSA+D6RYM8Y8sNNvfIB9vMz
1GJeGhsT4C4Ob2JJWu20qdNjyvTvbcckiy0PLtpnhkIAEtrj527Ok0yK1jW7rZpS
M5gIWKNzybMPP3wIJKWaftxi11NlVqDCsAG546nYp94rRBEoN68jU/b2MdkiIkOY
kTA+q3mY9RuSTJsfljUksaz7xnElvyhySjR6253Uc4h7u1+5KV56d/Z9/MldF8jU
KSbyjm3bc+7JnfQwgjpdv5hTqzSwoA9+FPanzy5tbhx5joD7DX2Cu2XGYCF83+ZK
OjFgI1wOA3wAb2CK6qi0V3bHe7c19PiFLDsKB/5iiKdAPojyJLpLuid58wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGekZRO3OJW/dFApOcsFHJXifsQeMB8GA1UdIwQY
MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt
ZjA0OTgzOWZhNzMwLzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw
LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRO+haBg
Q/d00xr21v1IEfx8ho5t4EhxV9NztBXSnxytoxQpWWLHW0V+IsdU5B/ADeLQ5VN+
3CWVQtKKLt0jMoXZvGcXclrMnayZur8DodUp2sySo5FKrnLuQ5SIUo9Jx3nq0yTM
Fy3I5XUwuuywmGgHbfxccJZ8vZJ3RwMliE662g5HbIb7o0DMu56PeHR6hqN7ocKa
prbsz9HxqMUKXQko5O/MWXZFus878Hpt3nkYlbUW4904sQWutP8kJYA34Ky9Y17F
QmEnxsD0T/YNC44K6AlEeb6ZKpOCOHzK5stgqZWSXtTVDXTvISKAZ6jZv2xWcNyl
/iwd8J3tNbIwow==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:12:54 2026 by rpki-client