Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: jHBYuYKfg0I8yuD350EhFsr/962yISdY6DhQySJM5yo=
Subject key identifier: A5:D8:AC:1D:A7:19:05:84:B6:5D:52:30:90:B0:D4:D2:7C:85:4B:AE
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019FA14D700FFD16D59218CDC1AA59322076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 02:00:34 +0000
Manifest this update: Mon 27 Jul 2026 02:00:34 +0000
Manifest next update: Tue 28 Jul 2026 02:00:34 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: DN8PEx+btCeNs+khSnScaFGP1xfboRi/gTzDyawjLM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:70:0f:fd:16:d5:92:18:cd:c1:aa:59:32:20:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jul 27 02:00:34 2026 GMT
Not After : Jul 28 02:00:34 2026 GMT
Subject: CN=a5d8ac1da7190584b65d523090b0d4d27c854bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:84:62:a7:8f:16:ae:40:19:59:7c:ea:2d:0b:
5e:42:2f:45:0a:fb:8f:89:bf:42:fa:a6:63:4b:fc:
3c:97:64:e6:06:8b:bb:83:1b:60:d4:1f:11:aa:b4:
da:6c:7c:b7:3a:72:3b:11:45:4c:6e:36:5f:0e:aa:
2e:7b:b6:cd:a5:f3:04:52:50:d3:6b:73:23:e2:df:
5b:e5:52:d3:b8:59:b7:95:f3:b8:af:f3:16:f1:c5:
e1:cc:e8:d3:64:b2:80:18:db:f3:a7:94:4c:84:94:
93:3c:5a:b0:43:a1:c4:c2:ab:3f:c1:75:20:d8:64:
ae:02:53:97:5d:0d:bf:09:8f:2c:96:73:64:b3:f7:
de:e8:62:8a:49:89:c6:48:98:55:2d:88:ec:80:0f:
b8:d9:13:95:47:70:cd:8e:a5:d2:92:4b:38:bd:34:
63:20:3d:6b:5f:fd:92:04:bb:e2:bb:b3:d7:93:67:
31:40:51:58:33:11:21:b9:32:7f:24:a3:71:99:4b:
23:fd:94:e3:26:a0:4c:4a:54:ff:ba:4f:dd:9f:1c:
e2:29:b1:8b:2c:c9:a3:36:8a:5f:b8:6f:59:99:90:
8b:22:dd:8c:5f:7a:41:de:ab:97:db:5f:94:4f:6b:
3f:c3:fb:f1:74:76:82:60:ef:2d:79:9f:77:61:17:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:AC:1D:A7:19:05:84:B6:5D:52:30:90:B0:D4:D2:7C:85:4B:AE
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:d0:0c:c5:94:06:1f:eb:be:6e:91:dc:a1:a6:e3:72:15:
e4:20:f1:e2:fb:f9:67:d7:64:11:85:9f:45:8e:bc:d3:8e:01:
7d:d0:23:20:6e:a7:42:7d:e4:43:5f:a6:00:d1:f2:99:bf:b7:
e2:83:74:03:5a:7d:13:95:6e:3c:09:83:4a:e6:59:d2:c1:94:
44:f5:25:48:90:90:85:b3:8c:5c:ba:2d:37:50:4c:b4:f2:b7:
f2:29:a3:ba:f6:d2:13:6a:ad:cd:4c:25:6e:8e:1f:d5:69:88:
0b:b0:dc:cc:8e:2d:27:95:e7:9d:7a:3e:39:da:2d:46:0d:3b:
9e:5a:bb:e2:b2:dd:89:c7:5b:de:24:75:b7:3d:f3:1c:39:1a:
56:82:33:1e:d9:c1:83:bf:ee:4d:1a:5e:12:24:48:40:55:61:
9b:ff:79:9f:98:c2:81:30:92:f2:cf:00:45:0c:4c:c2:67:4c:
35:bf:40:10:43:16:8f:7d:d3:7c:ff:59:16:f4:e2:04:bf:ec:
e1:1a:ee:7b:fb:91:46:23:22:8c:f5:fd:4b:67:69:b7:f9:60:
20:6f:35:0c:1e:bb:b9:33:9a:d7:bd:f5:35:65:ca:cd:61:45:
ff:0e:56:ca:5c:2d:d4:07:4c:cd:86:92:31:c6:7c:f1:0a:b1:
0a:79:39:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTXAP/RbVkhjNwapZMiB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjYwNzI3MDIwMDM0WhcNMjYwNzI4MDIwMDM0WjAzMTEwLwYDVQQD
EyhhNWQ4YWMxZGE3MTkwNTg0YjY1ZDUyMzA5MGIwZDRkMjdjODU0YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74Rip48WrkAZWXzqLQteQi9FCvuP
ib9C+qZjS/w8l2TmBou7gxtg1B8RqrTabHy3OnI7EUVMbjZfDqoue7bNpfMEUlDT
a3Mj4t9b5VLTuFm3lfO4r/MW8cXhzOjTZLKAGNvzp5RMhJSTPFqwQ6HEwqs/wXUg
2GSuAlOXXQ2/CY8slnNks/fe6GKKSYnGSJhVLYjsgA+42ROVR3DNjqXSkks4vTRj
ID1rX/2SBLviu7PXk2cxQFFYMxEhuTJ/JKNxmUsj/ZTjJqBMSlT/uk/dnxziKbGL
LMmjNopfuG9ZmZCLIt2MX3pB3quX21+UT2s/w/vxdHaCYO8teZ93YReevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXYrB2nGQWEtl1SMJCw1NJ8hUuuMB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagTQDMWU
Bh/rvm6R3KGm43IV5CDx4vv5Z9dkEYWfRY68044BfdAjIG6nQn3kQ1+mANHymb+3
4oN0A1p9E5VuPAmDSuZZ0sGURPUlSJCQhbOMXLotN1BMtPK38imjuvbSE2qtzUwl
bo4f1WmIC7DczI4tJ5XnnXo+OdotRg07nlq74rLdicdb3iR1tz3zHDkaVoIzHtnB
g7/uTRpeEiRIQFVhm/95n5jCgTCS8s8ARQxMwmdMNb9AEEMWj33TfP9ZFvTiBL/s
4Rrue/uRRiMijPX9S2dpt/lgIG81DB67uTOa1731NWXKzWFF/w5Wylwt1AdMzYaS
McZ88QqxCnk5aA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:33 2026 by rpki-client