Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: V+EB7hHc3yUKlXJ6KTOAzstoldsQSMKp5FkLwXKPBeQ=
Subject key identifier: D6:EF:B5:CB:25:7A:90:53:AB:49:D3:87:1B:AC:0D:BD:F5:91:61:A1
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 019F84C41FE28964E3E4B57532A84AEE8EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0A25
Signing time: Tue 21 Jul 2026 13:01:13 +0000
Manifest this update: Tue 21 Jul 2026 13:01:13 +0000
Manifest next update: Wed 22 Jul 2026 13:01:13 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: gu9vqLe9cieokgOCd7OXTqgejg3JA9U3HW+pUe9/7Ao=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:1f:e2:89:64:e3:e4:b5:75:32:a8:4a:ee:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jul 21 13:01:13 2026 GMT
Not After : Jul 22 13:01:13 2026 GMT
Subject: CN=d6efb5cb257a9053ab49d3871bac0dbdf59161a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:79:f3:6b:27:d9:72:a6:24:65:0f:f8:64:
33:ac:95:33:16:0c:00:87:d7:a5:7b:ea:05:ad:29:
79:9d:e3:3b:27:8e:39:76:14:c7:2c:43:6e:f3:63:
f3:a2:fe:1c:c4:49:67:86:89:36:48:19:e8:d3:ce:
18:e5:d4:9f:b1:df:14:ff:ad:f6:19:93:b8:11:7d:
c5:9b:2e:a5:2d:2c:97:fe:40:a4:d9:4c:ac:5a:d8:
a4:d1:fb:81:39:56:91:e6:0d:a6:bd:59:b8:62:09:
88:b7:30:c4:39:a8:a8:93:b6:aa:6f:48:ca:1d:da:
f0:53:77:68:b5:16:20:69:73:9b:a1:1c:65:03:23:
53:70:f1:c0:38:ef:f0:89:33:04:90:f4:37:03:17:
7f:64:92:60:6f:9f:02:53:b0:a6:c6:f7:da:13:f1:
99:83:52:2b:9f:b6:e6:7f:6b:94:a7:27:64:99:6a:
05:a1:81:69:3d:27:67:86:36:27:bc:bb:56:18:26:
ee:8b:fb:a2:2a:23:1f:47:80:d7:e9:53:a4:2e:71:
48:ac:2a:47:18:13:3c:4a:95:8e:6f:c9:26:24:84:
73:6e:b5:9e:fd:df:f3:4b:3c:18:82:94:5c:07:90:
19:0d:ab:10:21:ba:6f:97:e9:8b:2c:ea:11:db:2b:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:B5:CB:25:7A:90:53:AB:49:D3:87:1B:AC:0D:BD:F5:91:61:A1
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:be:7e:65:e0:d3:0a:e0:9c:c1:36:2c:1a:d9:0f:3a:ee:
67:00:04:f9:ad:21:d2:24:40:e4:9a:b9:cf:d3:e3:a3:ea:66:
c6:74:8c:e8:7c:e7:0a:b6:bf:f1:75:bd:aa:cd:65:2d:3b:9c:
80:6b:10:bb:d6:c0:4d:fe:26:80:91:84:e5:d9:a3:fb:c3:f7:
5d:5c:03:1b:87:c2:bb:f9:de:43:36:aa:bb:f0:1c:ed:03:70:
83:82:15:84:df:ac:95:59:64:01:1e:33:ce:97:9d:e3:14:9e:
79:64:51:9a:c6:1b:a2:b4:e6:bd:74:67:a4:ae:4a:d6:bd:ff:
af:9b:e0:1c:af:d4:b1:aa:c9:7e:95:a4:97:d1:bf:ff:f2:78:
b7:0a:d2:c1:2d:8c:08:bd:6f:45:36:1b:92:6b:ac:3d:8a:fb:
cb:db:db:44:57:92:79:05:b9:d1:9d:c2:d8:62:ce:ab:c1:a0:
b2:95:0d:65:dc:26:22:20:c9:73:30:31:5a:3d:9c:46:8c:61:
8f:75:b8:9c:84:64:1c:f5:22:95:a5:df:73:9f:7b:97:5b:44:
3f:a5:76:90:f8:85:b2:80:ce:ac:29:2f:81:a6:45:57:33:59:
5b:62:b2:18:5b:f1:e0:be:86:db:2f:bd:d1:45:d0:a1:d0:0a:
1f:a1:b2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExB/iiWTj5LV1MqhK7o6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjYwNzIxMTMwMTEzWhcNMjYwNzIyMTMwMTEzWjAzMTEwLwYDVQQD
EyhkNmVmYjVjYjI1N2E5MDUzYWI0OWQzODcxYmFjMGRiZGY1OTE2MWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAR582sn2XKmJGUP+GQzrJUzFgwA
h9ele+oFrSl5neM7J445dhTHLENu82Pzov4cxElnhok2SBno084Y5dSfsd8U/632
GZO4EX3Fmy6lLSyX/kCk2UysWtik0fuBOVaR5g2mvVm4YgmItzDEOaiok7aqb0jK
HdrwU3dotRYgaXOboRxlAyNTcPHAOO/wiTMEkPQ3Axd/ZJJgb58CU7CmxvfaE/GZ
g1Irn7bmf2uUpydkmWoFoYFpPSdnhjYnvLtWGCbui/uiKiMfR4DX6VOkLnFIrCpH
GBM8SpWOb8kmJIRzbrWe/d/zSzwYgpRcB5AZDasQIbpvl+mLLOoR2yvQcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbvtcslepBTq0nThxusDb31kWGhMB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJd++fmXg
0wrgnME2LBrZDzruZwAE+a0h0iRA5Jq5z9Pjo+pmxnSM6HznCra/8XW9qs1lLTuc
gGsQu9bATf4mgJGE5dmj+8P3XVwDG4fCu/neQzaqu/Ac7QNwg4IVhN+slVlkAR4z
zped4xSeeWRRmsYborTmvXRnpK5K1r3/r5vgHK/UsarJfpWkl9G///J4twrSwS2M
CL1vRTYbkmusPYr7y9vbRFeSeQW50Z3C2GLOq8GgspUNZdwmIiDJczAxWj2cRoxh
j3W4nIRkHPUilaXfc597l1tEP6V2kPiFsoDOrCkvgaZFVzNZW2KyGFvx4L6G2y+9
0UXQodAKH6GyTQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:00:23 2026 by rpki-client