Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: H0q5PCXEnC3iB8H/w58utL7uX3pjPKi9ATQNf3d1AW8=
Subject key identifier: 04:7B:19:C1:A4:E3:D0:BE:4E:A0:9A:DE:D6:AA:87:29:B3:96:CB:E5
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019F442DC313B8216C1A3C19F32D4095E128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 1571
Signing time: Thu 09 Jul 2026 00:01:17 +0000
Manifest this update: Thu 09 Jul 2026 00:01:17 +0000
Manifest next update: Fri 10 Jul 2026 00:01:17 +0000
Files and hashes: 1: BIo28pXo6DKLLlMdXKajPhOhgpE.roa (hash: Yxz0YX56/XjwEqK3eJFqdGwrvy8qCQG0h/ZHhD2mdYI=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: +3Zoz5sv/ErvMVvaKhDZTbuht5nyPVKmnBjTswJDROQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:44:2d:c3:13:b8:21:6c:1a:3c:19:f3:2d:40:95:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Jul 9 00:01:17 2026 GMT
Not After : Jul 10 00:01:17 2026 GMT
Subject: CN=047b19c1a4e3d0be4ea09aded6aa8729b396cbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:72:4d:43:56:ee:f2:e5:08:c8:11:ff:f5:
d9:38:f4:70:43:d9:50:c9:72:6c:7a:51:f8:9f:7e:
b2:61:0a:2d:92:41:7d:f3:3b:5f:0d:07:ad:24:da:
da:6e:ec:79:46:22:70:99:f2:e9:47:67:5b:80:7c:
7e:14:0e:6a:45:b1:99:b2:9e:06:6f:c8:cd:b4:45:
e6:29:06:aa:34:69:48:d8:b7:89:59:0b:71:1c:6a:
13:1f:aa:01:6d:15:65:88:1f:c4:45:bb:9e:ea:89:
ce:22:7f:43:90:84:7d:5c:64:38:52:68:c0:f2:a7:
f7:8d:8b:de:27:d6:6b:50:12:ba:2f:1f:39:16:87:
62:c3:e9:b0:15:56:27:65:01:39:6f:f4:52:9e:be:
63:bc:2b:7a:ae:7d:ac:80:2f:31:4d:f6:16:0a:ed:
f6:95:e0:ba:b1:19:da:be:e2:a0:01:62:5a:15:5e:
c6:89:2d:18:ca:7e:e3:21:58:cb:49:7b:6a:2b:14:
4d:f5:ab:31:d8:60:8c:ac:cd:95:2b:57:b7:e1:74:
4b:72:51:98:86:cc:b6:f9:3e:22:90:86:cb:2d:be:
7a:3b:5c:57:69:3d:a1:86:43:56:77:f3:06:38:da:
5b:34:35:3f:1a:84:81:b4:2e:9f:82:78:eb:9b:3e:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:19:C1:A4:E3:D0:BE:4E:A0:9A:DE:D6:AA:87:29:B3:96:CB:E5
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:98:e3:55:51:d0:e0:86:0b:c9:5d:b2:8b:08:6a:34:6b:
c9:18:e4:56:36:c0:5e:2c:db:17:45:0d:c4:4f:86:0d:06:3b:
f3:0e:f0:41:45:39:bc:77:29:13:93:61:77:61:a7:ab:65:37:
dc:11:30:22:4d:c8:55:49:dd:d1:13:cc:e0:d3:53:1f:a5:d9:
dd:59:c4:22:55:0c:df:49:d6:ae:a6:ee:93:32:17:26:b5:cf:
27:4a:e1:34:7a:69:d0:72:c9:7a:96:2d:43:a4:e9:d8:84:1d:
9a:0b:d6:f2:05:57:ad:e3:48:e3:0f:3e:83:ba:ca:28:4e:50:
ea:5d:42:54:0a:f5:6d:c0:9a:36:e2:be:f5:36:1d:a0:49:19:
cf:51:c4:79:b3:99:e1:9e:70:67:a2:1e:5b:ff:8f:12:e5:5a:
80:72:a4:85:06:06:4f:79:a6:d6:f2:db:6e:06:0b:52:49:bc:
4a:41:d1:29:96:bb:69:c0:95:6d:1b:d1:22:cd:e4:d0:07:d8:
c7:89:0b:30:3d:26:99:89:a0:57:59:ac:4e:0b:b2:1c:ca:7b:
4c:e4:e2:dc:bc:a2:7a:ba:8d:79:95:bd:71:30:e9:ae:f4:90:
46:76:b2:11:bf:46:8c:43:d0:83:69:8b:95:31:17:69:20:9a:
ed:79:58:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9ELcMTuCFsGjwZ8y1AleEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj
ZmMxOTkwHhcNMjYwNzA5MDAwMTE3WhcNMjYwNzEwMDAwMTE3WjAzMTEwLwYDVQQD
EygwNDdiMTljMWE0ZTNkMGJlNGVhMDlhZGVkNmFhODcyOWIzOTZjYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFxyTUNW7vLlCMgR//XZOPRwQ9lQ
yXJselH4n36yYQotkkF98ztfDQetJNrabux5RiJwmfLpR2dbgHx+FA5qRbGZsp4G
b8jNtEXmKQaqNGlI2LeJWQtxHGoTH6oBbRVliB/ERbue6onOIn9DkIR9XGQ4UmjA
8qf3jYveJ9ZrUBK6Lx85Fodiw+mwFVYnZQE5b/RSnr5jvCt6rn2sgC8xTfYWCu32
leC6sRnavuKgAWJaFV7GiS0Yyn7jIVjLSXtqKxRN9asx2GCMrM2VK1e34XRLclGY
hsy2+T4ikIbLLb56O1xXaT2hhkNWd/MGONpbNDU/GoSBtC6fgnjrmz4z7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR7GcGk49C+TqCa3taqhymzlsvlMB8GA1UdIwQY
MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt
ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0
LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHqY41VR
0OCGC8ldsosIajRryRjkVjbAXizbF0UNxE+GDQY78w7wQUU5vHcpE5Nhd2Gnq2U3
3BEwIk3IVUnd0RPM4NNTH6XZ3VnEIlUM30nWrqbukzIXJrXPJ0rhNHpp0HLJepYt
Q6Tp2IQdmgvW8gVXreNI4w8+g7rKKE5Q6l1CVAr1bcCaNuK+9TYdoEkZz1HEebOZ
4Z5wZ6IeW/+PEuVagHKkhQYGT3mm1vLbbgYLUkm8SkHRKZa7acCVbRvRIs3k0AfY
x4kLMD0mmYmgV1msTguyHMp7TOTi3LyierqNeZW9cTDprvSQRnayEb9GjEPQg2mL
lTEXaSCa7XlYdw==
-----END CERTIFICATE-----
Generated at Thu Jul 9 08:32:01 2026 by rpki-client