Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: eAXhpk9Dq1uVJEFWw1aYu6Uj4uvv+3Lq57mhOXa1hrs=
Subject key identifier: 19:9B:4A:BA:EC:7F:78:F2:52:B8:D2:53:91:D0:38:29:BD:1A:76:BC
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019F853151A2431763225AEB716FA371F647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 15:00:29 +0000
Manifest this update: Tue 21 Jul 2026 15:00:29 +0000
Manifest next update: Wed 22 Jul 2026 15:00:29 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: NN0hRw12ri2IHMUrwi65vFY8MkHy58fHb2vOW/WSa2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:51:a2:43:17:63:22:5a:eb:71:6f:a3:71:f6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jul 21 15:00:29 2026 GMT
Not After : Jul 22 15:00:29 2026 GMT
Subject: CN=199b4abaec7f78f252b8d25391d03829bd1a76bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:73:75:b8:b0:ea:b9:73:3a:b1:58:93:8e:
1d:fd:97:10:83:93:e2:20:58:79:d0:15:2c:af:bc:
f3:aa:8a:f3:ab:43:37:0a:52:57:ba:f6:ec:23:50:
8e:28:72:3b:cf:bd:9c:b6:98:76:a7:51:d3:9d:88:
37:8a:1f:e8:ab:67:b2:4d:2b:02:f0:3e:a6:0b:1e:
57:7e:9c:30:20:37:6e:6f:0d:72:0e:6a:7c:ea:f0:
86:2b:9e:2e:00:dd:ff:10:7b:e6:fe:9d:20:3d:41:
17:8d:cf:f9:81:09:e0:4d:b3:88:db:87:ce:03:56:
21:89:42:75:6c:4a:7b:3b:57:d3:43:78:d6:f4:02:
47:d9:24:14:5e:f1:fb:bb:c5:9c:9d:78:e7:f4:41:
0e:56:c8:c5:e4:a6:d2:30:e2:a5:d6:bf:b6:f5:eb:
0e:00:d8:c9:39:65:45:30:a6:ed:9b:cf:85:9a:a6:
4b:0b:f3:3c:80:d1:f5:1b:70:69:e2:ce:26:28:b3:
b5:61:3c:66:a6:d7:32:d8:fb:41:25:41:52:d9:6f:
d5:ef:ab:00:6e:78:aa:38:25:71:c8:7f:a7:a0:7f:
67:7d:8d:39:6a:d9:9c:3c:64:ae:04:fa:4b:1f:bb:
c2:bd:01:97:59:c9:d3:5a:7b:50:db:96:92:70:f9:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:4A:BA:EC:7F:78:F2:52:B8:D2:53:91:D0:38:29:BD:1A:76:BC
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:a5:20:48:6a:ed:56:a1:6b:45:37:b9:9a:60:d9:e3:52:
ec:5e:6e:fb:c6:d7:01:23:9e:f0:88:60:f6:57:8b:0d:fe:bd:
88:e4:6e:19:36:07:4a:92:76:48:48:74:e9:e6:e0:4e:3e:77:
dd:b1:a8:10:af:a4:78:2c:27:4e:2d:61:b7:8d:c7:64:5c:c3:
9f:06:96:be:92:53:54:6f:c2:86:1a:33:06:20:41:90:ff:b9:
72:0b:f3:4f:a2:60:db:e0:d3:4e:4e:e0:2d:a7:5c:7d:55:78:
3a:8a:e4:3a:0a:05:05:e1:8a:16:56:52:49:95:71:6d:23:e8:
87:e9:30:ea:0b:e3:c0:b2:c8:69:48:9b:c7:f1:77:83:dc:e3:
4f:91:f1:92:96:1f:6e:2d:d7:2a:0f:4e:ce:9d:bf:e6:9d:e2:
8f:52:df:98:54:0e:f7:75:32:ea:a3:f2:44:f2:91:a8:d3:e2:
6e:f3:7e:e0:fc:90:5c:b2:bf:9e:3c:db:62:4e:78:d6:42:82:
30:91:85:45:ed:05:c4:96:3f:b7:7a:19:35:f0:d4:12:47:9b:
95:13:5f:3c:fa:56:22:7a:86:7c:8e:26:cf:fe:92:8c:44:57:
ee:39:d0:24:87:19:39:48:36:d5:72:16:a0:f7:b9:ac:e6:69:
0b:82:1e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMVGiQxdjIlrrcW+jcfZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx
M2U5M2UwHhcNMjYwNzIxMTUwMDI5WhcNMjYwNzIyMTUwMDI5WjAzMTEwLwYDVQQD
EygxOTliNGFiYWVjN2Y3OGYyNTJiOGQyNTM5MWQwMzgyOWJkMWE3NmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrZzdbiw6rlzOrFYk44d/ZcQg5Pi
IFh50BUsr7zzqorzq0M3ClJXuvbsI1COKHI7z72ctph2p1HTnYg3ih/oq2eyTSsC
8D6mCx5XfpwwIDdubw1yDmp86vCGK54uAN3/EHvm/p0gPUEXjc/5gQngTbOI24fO
A1YhiUJ1bEp7O1fTQ3jW9AJH2SQUXvH7u8WcnXjn9EEOVsjF5KbSMOKl1r+29esO
ANjJOWVFMKbtm8+FmqZLC/M8gNH1G3Bp4s4mKLO1YTxmptcy2PtBJUFS2W/V76sA
bniqOCVxyH+noH9nfY05atmcPGSuBPpLH7vCvQGXWcnTWntQ25aScPm89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmbSrrsf3jyUrjSU5HQOCm9Gna8MB8GA1UdIwQY
MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt
NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk
LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBClIEhq
7Vaha0U3uZpg2eNS7F5u+8bXASOe8Ihg9leLDf69iORuGTYHSpJ2SEh06ebgTj53
3bGoEK+keCwnTi1ht43HZFzDnwaWvpJTVG/ChhozBiBBkP+5cgvzT6Jg2+DTTk7g
LadcfVV4OorkOgoFBeGKFlZSSZVxbSPoh+kw6gvjwLLIaUibx/F3g9zjT5HxkpYf
bi3XKg9Ozp2/5p3ij1LfmFQO93Uy6qPyRPKRqNPibvN+4PyQXLK/njzbYk541kKC
MJGFRe0FxJY/t3oZNfDUEkeblRNfPPpWInqGfI4mz/6SjERX7jnQJIcZOUg21XIW
oPe5rOZpC4IesA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:49 2026 by rpki-client