Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: KRDtEWwwiezAcnfWaYc4qotdQPGS0MEOXoPInEh+wMo=
Subject key identifier: 89:DC:28:AF:9A:54:73:EE:63:47:8E:A1:CB:FC:41:C2:61:54:91:CA
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 019EB76AB40EAC08E0C49B6368355EF664A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 16:01:23 +0000
Manifest this update: Thu 11 Jun 2026 16:01:23 +0000
Manifest next update: Fri 12 Jun 2026 16:01:23 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: B5ZPwv/jSBAjD08G+WRbHl6hXAFvhKRK9n8Ww0PgBHI=)
2: ASJCxMwgFICdhd2ryix0TW1woMo.roa (hash: eB2/RH4etmts4ZGHiKx5FyzcKrdqSgyRln6WwxKw+Ac=)
3: PKDBX_5rlrKVrUIFrHV2ZsSxOyY.roa (hash: BQOkCEhu+u6OghGz5UOaFPhVuOtvrXbTcbi4yCOPXRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:b4:0e:ac:08:e0:c4:9b:63:68:35:5e:f6:64:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Jun 11 16:01:23 2026 GMT
Not After : Jun 12 16:01:23 2026 GMT
Subject: CN=89dc28af9a5473ee63478ea1cbfc41c2615491ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:d8:16:30:7e:97:6b:ef:bf:33:6e:cf:33:
20:f4:28:5a:74:26:81:08:ad:60:ec:d9:97:3e:c9:
20:6d:91:fc:c5:4e:4b:c2:aa:a4:40:b3:6f:4e:4b:
f6:1b:8f:7f:ea:88:aa:01:02:96:f6:26:58:8f:15:
db:9d:02:ad:e8:38:f9:aa:fe:78:69:29:80:cf:7d:
f0:9c:20:ca:36:60:d4:2d:45:a7:74:61:39:be:64:
4d:7f:97:07:de:ec:4b:84:9c:96:4a:ba:bf:4a:5e:
97:c9:6a:bc:a7:0e:af:8c:3c:51:cc:db:30:38:c6:
c9:12:31:43:43:3a:a4:76:a7:f1:26:5e:8f:6b:e8:
e5:83:7c:f4:da:fd:0e:d9:6b:fd:06:58:70:19:f1:
cc:af:68:67:b9:22:3a:b9:03:9b:9d:b7:ba:ce:76:
df:ac:d3:14:fa:ce:a0:e7:83:2e:2c:48:0f:47:bd:
c8:e0:5f:fc:0a:e8:da:66:46:d9:aa:c2:c6:27:15:
98:b6:8b:79:05:3d:f0:1c:03:4e:a3:9c:15:ff:15:
97:0a:85:c0:fc:05:47:a7:bc:79:20:08:1b:23:a6:
0c:59:a4:41:34:8f:cd:0e:b7:9a:08:ea:64:52:ca:
21:3d:cd:a6:dd:fa:31:51:9e:e2:5b:d8:f0:8c:c7:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:28:AF:9A:54:73:EE:63:47:8E:A1:CB:FC:41:C2:61:54:91:CA
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7b:a7:1d:5a:a9:0d:24:98:e1:87:ed:19:36:f4:8c:cf:a5:
15:b7:da:9c:bd:9d:d6:3a:71:2f:02:21:5f:38:be:9d:2b:af:
97:5b:fb:63:32:4d:1e:2f:ae:cb:82:13:c0:fa:66:61:35:22:
db:28:ac:6a:80:f8:29:73:01:be:1b:67:0d:67:2d:fc:7e:c5:
7d:3c:4c:5c:2f:42:88:28:04:7e:1a:b7:e3:fd:ce:7e:8d:fd:
25:22:34:ce:43:45:c6:80:25:47:97:f6:fe:28:a1:78:aa:98:
e3:c3:c7:ad:b4:67:9f:63:40:f9:95:67:d7:32:ff:23:d5:f8:
c6:97:aa:c4:14:b6:6c:a0:c0:db:2f:e1:75:c8:fb:15:ed:c2:
bb:7b:be:ff:ff:45:b4:33:8e:90:15:19:f2:1d:28:15:c2:3b:
c4:91:ce:54:54:54:d2:25:c2:94:2e:6c:bb:33:f9:0c:08:c4:
dc:9c:3e:52:64:e6:80:47:ca:64:44:20:62:72:59:db:53:08:
77:df:24:0f:71:44:d2:63:e1:66:e0:5e:b3:c9:38:3e:9f:f8:
44:3f:29:f2:bd:59:ed:02:b6:a2:63:ef:ad:b7:87:7c:2d:08:
bb:b3:ec:fa:87:72:f5:20:b2:da:a6:b2:2e:6b:de:f4:21:04:
1b:66:34:74
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ63arQOrAjgxJtjaDVe9mSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmY0ZDU5Y2JkOTc4YWUxMTI3YzY3ZmQyMmYwNGM2MmZm
ODM3Y2YwHhcNMjYwNjExMTYwMTIzWhcNMjYwNjEyMTYwMTIzWjAzMTEwLwYDVQQD
Eyg4OWRjMjhhZjlhNTQ3M2VlNjM0NzhlYTFjYmZjNDFjMjYxNTQ5MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+TYFjB+l2vvvzNuzzMg9ChadCaB
CK1g7NmXPskgbZH8xU5LwqqkQLNvTkv2G49/6oiqAQKW9iZYjxXbnQKt6Dj5qv54
aSmAz33wnCDKNmDULUWndGE5vmRNf5cH3uxLhJyWSrq/Sl6XyWq8pw6vjDxRzNsw
OMbJEjFDQzqkdqfxJl6Pa+jlg3z02v0O2Wv9BlhwGfHMr2hnuSI6uQObnbe6znbf
rNMU+s6g54MuLEgPR73I4F/8CujaZkbZqsLGJxWYtot5BT3wHANOo5wV/xWXCoXA
/AVHp7x5IAgbI6YMWaRBNI/NDreaCOpkUsohPc2m3foxUZ7iW9jwjMe+KwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIncKK+aVHPuY0eOocv8QcJhVJHKMB8GA1UdIwQY
MBaAFPu/TVnL2XiuESfGf9IvBMYv+DfPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03OU5XY3ZaZUs0Uko4Wl8waThFeGlfNE44OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvODhjOTk1LWVkZTAtNGNjNC1hNjZk
LTI1YmFhODIzMGZjYi8xLzEtNzlOV2N2WmVLNFJKOFpfMGk4RXhpXzROODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM0Lzg4Yzk5NS1lZGUwLTRjYzQtYTY2ZC0yNWJhYTgyMzBm
Y2IvMS8xLTc5TldjdlplSzRSSjhaXzBpOEV4aV80Tjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnun
HVqpDSSY4YftGTb0jM+lFbfanL2d1jpxLwIhXzi+nSuvl1v7YzJNHi+uy4ITwPpm
YTUi2yisaoD4KXMBvhtnDWct/H7FfTxMXC9CiCgEfhq34/3Ofo39JSI0zkNFxoAl
R5f2/iiheKqY48PHrbRnn2NA+ZVn1zL/I9X4xpeqxBS2bKDA2y/hdcj7Fe3Cu3u+
//9FtDOOkBUZ8h0oFcI7xJHOVFRU0iXClC5suzP5DAjE3Jw+UmTmgEfKZEQgYnJZ
21MId98kD3FE0mPhZuBes8k4Pp/4RD8p8r1Z7QK2omPvrbeHfC0Iu7Ps+ody9SCy
2qayLmve9CEEG2Y0dA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:13 2026 by rpki-client