Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: /Wrx+Teq2oI++w0KN3omRMXSLnXazqOBjKPyKNgDqAM=
Subject key identifier: 84:FA:86:16:D5:A1:85:89:1D:32:4A:C7:0C:C5:A9:D1:DC:D0:E2:E4
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019F17F9631EA4ECAD7FD5D73CE2DEDACBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 0613
Signing time: Tue 30 Jun 2026 10:00:47 +0000
Manifest this update: Tue 30 Jun 2026 10:00:47 +0000
Manifest next update: Wed 01 Jul 2026 10:00:47 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: pOeqHJIleAb9VAv5St1CcKb+Ba1A/i/wTGeIbHZwbiY=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:63:1e:a4:ec:ad:7f:d5:d7:3c:e2:de:da:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Jun 30 10:00:47 2026 GMT
Not After : Jul 1 10:00:47 2026 GMT
Subject: CN=84fa8616d5a185891d324ac70cc5a9d1dcd0e2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:24:3c:e9:b7:f9:47:f8:a8:96:dc:78:08:
65:52:f7:a7:1f:88:7b:0d:cf:fa:11:bc:c8:0a:bf:
34:53:53:29:e2:15:0e:ca:9d:eb:52:22:03:8d:46:
af:e6:5f:f1:2c:4d:13:f0:e2:18:33:97:95:e7:00:
dc:a9:13:97:20:ed:48:b5:29:09:09:ae:8e:15:40:
55:9c:4c:fc:8d:fd:94:9c:ba:37:b3:54:8e:6b:8b:
16:87:a2:17:b9:f8:11:fe:22:e9:0b:3c:68:d1:67:
61:ec:2d:cf:7e:b1:c3:7d:1c:03:63:85:62:78:7e:
34:a3:2e:cb:ee:7c:ed:43:b4:f8:be:ab:07:50:7a:
86:dd:0a:72:e9:dc:c6:7d:93:f1:1d:c5:9d:eb:2c:
24:cb:ce:44:5b:23:6c:85:58:e0:11:a5:48:db:d9:
12:34:58:2b:ff:ec:f2:b2:c2:23:a2:47:2a:f6:78:
da:a2:0a:e1:f0:41:1e:f3:59:b3:b1:5f:aa:42:8a:
aa:db:69:64:bd:d4:2f:ff:30:86:e8:35:ad:45:f1:
f0:34:1f:c2:f6:ef:f9:4c:8b:d3:6e:2f:b4:e6:55:
28:0b:0d:0e:7a:11:77:b2:90:7b:0f:4e:e2:eb:43:
64:4f:aa:2f:98:44:7e:d0:e8:e5:c9:b5:8b:e7:1f:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FA:86:16:D5:A1:85:89:1D:32:4A:C7:0C:C5:A9:D1:DC:D0:E2:E4
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f6:42:62:8d:44:37:a7:16:b5:6c:ff:6a:b3:b7:6e:8d:7b:
65:e9:e5:47:8b:6e:53:38:91:b2:57:4c:61:4d:44:8d:3a:c9:
29:ea:46:9f:5d:35:b4:3f:d5:e4:70:4b:35:00:5c:fe:55:de:
ca:ed:94:c5:aa:c8:b8:d4:50:96:9c:38:9e:2f:ea:84:90:b6:
57:4c:6b:c1:48:30:03:8d:fe:3a:7c:11:c0:c4:87:6d:6b:52:
4a:6b:8d:08:3e:eb:a1:60:ad:5b:24:29:3c:1a:76:b5:39:ba:
94:25:3c:b2:01:80:16:98:38:5a:f3:db:be:ab:91:42:ee:1b:
f1:6b:05:84:18:29:2e:da:fa:0d:24:51:7d:09:41:85:21:6a:
1e:65:29:bc:0f:f8:85:27:b5:ee:b7:97:e3:4b:de:6d:ea:b3:
dd:cf:8e:0f:f5:8a:fb:34:92:6e:53:78:c9:72:84:6e:91:f4:
e9:27:68:98:5d:a2:86:e6:38:7b:04:2c:60:35:f1:bd:01:15:
93:a2:58:4c:0a:7e:52:73:f2:4a:e5:86:8e:78:36:a7:d8:00:
c1:a4:b8:f5:0a:f3:7e:12:8c:e8:5c:c8:b7:9f:67:1a:d5:9b:
b4:85:02:a1:01:c0:b8:f1:03:0e:7b:2f:00:48:ac:08:1c:96:
1e:4e:c4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+WMepOytf9XXPOLe2svqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4
MzkwOTcwHhcNMjYwNjMwMTAwMDQ3WhcNMjYwNzAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg4NGZhODYxNmQ1YTE4NTg5MWQzMjRhYzcwY2M1YTlkMWRjZDBlMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsAkPOm3+Uf4qJbceAhlUvenH4h7
Dc/6EbzICr80U1Mp4hUOyp3rUiIDjUav5l/xLE0T8OIYM5eV5wDcqROXIO1ItSkJ
Ca6OFUBVnEz8jf2UnLo3s1SOa4sWh6IXufgR/iLpCzxo0Wdh7C3PfrHDfRwDY4Vi
eH40oy7L7nztQ7T4vqsHUHqG3Qpy6dzGfZPxHcWd6ywky85EWyNshVjgEaVI29kS
NFgr/+zyssIjokcq9njaogrh8EEe81mzsV+qQoqq22lkvdQv/zCG6DWtRfHwNB/C
9u/5TIvTbi+05lUoCw0OehF3spB7D07i60NkT6ovmER+0OjlybWL5x9MRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT6hhbVoYWJHTJKxwzFqdHc0OLkMB8GA1UdIwQY
MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt
Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm
LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevZCYo1E
N6cWtWz/arO3bo17ZenlR4tuUziRsldMYU1EjTrJKepGn101tD/V5HBLNQBc/lXe
yu2UxarIuNRQlpw4ni/qhJC2V0xrwUgwA43+OnwRwMSHbWtSSmuNCD7roWCtWyQp
PBp2tTm6lCU8sgGAFpg4WvPbvquRQu4b8WsFhBgpLtr6DSRRfQlBhSFqHmUpvA/4
hSe17reX40vebeqz3c+OD/WK+zSSblN4yXKEbpH06SdomF2ihuY4ewQsYDXxvQEV
k6JYTAp+UnPySuWGjng2p9gAwaS49QrzfhKM6FzIt59nGtWbtIUCoQHAuPEDDnsv
AEisCByWHk7ENg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:32 2026 by rpki-client