Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File: F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier: ulxqzWOYuhWp/57fFlLC5dxGYKR9odkY4a/WQ//kYF0=
Subject key identifier: 19:3D:CB:AF:F8:04:C6:48:4D:62:C6:0F:B6:C7:7C:A1:7A:DB:78:7E
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer: /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial: 01A06D95DF2E89218C3491C81DFCC88B9EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number: 19C7
Signing time: Fri 04 Sep 2026 18:02:13 +0000
Manifest this update: Fri 04 Sep 2026 18:02:13 +0000
Manifest next update: Sat 05 Sep 2026 18:02:13 +0000
Files and hashes: 1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: j/dhSVfmG5p5e2iF+EXIUwOCD0uQco1Rnx5TXCSWK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:df:2e:89:21:8c:34:91:c8:1d:fc:c8:8b:9e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
Validity
Not Before: Sep 4 18:02:13 2026 GMT
Not After : Sep 5 18:02:13 2026 GMT
Subject: CN=193dcbaff804c6484d62c60fb6c77ca17adb787e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:fe:91:ec:33:68:90:60:c0:5a:83:f2:f8:
e5:6c:59:42:1a:e0:9a:02:7a:d4:41:ef:5a:9e:41:
ff:6d:1b:33:dc:ee:c9:76:6e:63:39:85:b2:71:94:
8d:3b:fb:6f:4c:60:66:8c:53:1c:e9:a8:fa:0e:f3:
93:c3:30:57:0e:39:89:ca:fd:0c:54:21:94:31:64:
4c:be:a9:e3:d9:8b:e9:f3:a6:52:5f:09:ce:f4:2b:
d3:b4:b2:2f:f3:4d:cc:a8:41:b7:57:a3:2f:ad:bc:
8a:10:7d:f7:df:76:15:70:02:53:7d:ed:99:50:33:
7f:df:7d:52:4c:17:03:bf:9d:d8:ac:83:05:7e:0d:
7d:17:66:0a:1b:b5:56:71:93:11:5c:dc:89:53:f4:
00:1e:e0:fb:36:0e:a7:c6:27:35:9f:31:89:fe:e1:
5d:89:84:43:25:a6:b1:2a:59:f7:e4:5e:92:1c:a5:
4f:95:31:44:ad:8f:fa:49:4c:51:5b:54:04:28:ad:
4c:06:83:e9:b7:c6:f8:c8:f5:b1:2e:8a:73:de:d4:
5f:95:9d:56:92:ca:d5:8d:79:ee:4b:00:b7:c3:60:
81:7c:75:90:ea:00:48:36:89:d9:00:ff:7f:7f:0d:
e3:77:75:6d:16:b3:e9:79:69:7c:c5:ab:d8:fb:77:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:CB:AF:F8:04:C6:48:4D:62:C6:0F:B6:C7:7C:A1:7A:DB:78:7E
X509v3 Authority Key Identifier:
keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7b:db:34:c5:d6:c3:c3:f9:3a:5a:56:e2:85:8e:fa:fb:dc:
e5:e8:61:82:75:72:cf:00:48:7b:81:2b:9c:fc:fc:e5:9d:ca:
16:5c:b5:3a:1f:50:34:c4:b4:dd:10:e1:c2:bb:c8:8c:a1:af:
aa:88:c4:4c:13:d9:14:fe:d6:17:83:be:0a:e5:df:ca:8c:5d:
11:7b:87:8f:e8:39:61:10:85:1a:8a:fe:52:07:11:81:42:a5:
89:cf:41:57:48:ff:38:e1:05:41:f1:95:6d:8f:8f:80:b5:94:
8f:6c:52:89:40:e1:97:74:b5:5d:3a:d1:fa:f2:90:c8:53:de:
72:5a:9b:90:59:cb:74:c9:e5:cb:50:4e:7a:4d:53:0b:91:e6:
24:25:61:da:a3:c9:a6:cc:b0:d7:17:a4:65:04:8a:36:54:90:
ef:4f:83:bd:a1:ec:fe:5a:a2:c2:ea:63:e1:c8:77:e6:ea:34:
9c:78:74:1a:93:ad:68:80:ae:89:66:26:cd:a1:e7:39:ef:e8:
be:fd:c0:92:48:de:04:47:5f:59:e5:6f:42:e0:3a:97:ae:44:
16:25:4e:fe:f9:d7:5e:58:f5:e9:21:08:e2:e9:39:ba:68:3f:
32:41:0c:7e:49:53:e9:93:6c:3d:c4:1c:7d:9a:1d:5a:09:93:
62:d8:14:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtld8uiSGMNJHIHfzIi56+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWM5ZjM4MDM0OTY0YTFhOTJhZjgwYzc2OGY4M2QwODU0
MDc5M2UwHhcNMjYwOTA0MTgwMjEzWhcNMjYwOTA1MTgwMjEzWjAzMTEwLwYDVQQD
EygxOTNkY2JhZmY4MDRjNjQ4NGQ2MmM2MGZiNmM3N2NhMTdhZGI3ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJH+kewzaJBgwFqD8vjlbFlCGuCa
AnrUQe9ankH/bRsz3O7Jdm5jOYWycZSNO/tvTGBmjFMc6aj6DvOTwzBXDjmJyv0M
VCGUMWRMvqnj2Yvp86ZSXwnO9CvTtLIv803MqEG3V6MvrbyKEH3333YVcAJTfe2Z
UDN/331STBcDv53YrIMFfg19F2YKG7VWcZMRXNyJU/QAHuD7Ng6nxic1nzGJ/uFd
iYRDJaaxKln35F6SHKVPlTFErY/6SUxRW1QEKK1MBoPpt8b4yPWxLopz3tRflZ1W
ksrVjXnuSwC3w2CBfHWQ6gBINonZAP9/fw3jd3VtFrPpeWl8xavY+3cTGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk9y6/4BMZITWLGD7bHfKF623h+MB8GA1UdIwQY
MBaAFBdcnzgDSWShqSr4DHaPg9CFQHk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjF5Zk9BTkpaS0dwS3ZnTWRvLUQwSVZBZVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hODhkY2EtMjkwZi00NjU2LWFmYzUt
MzM5YjRjMzZiZmVhLzEvRjF5Zk9BTkpaS0dwS3ZnTWRvLUQwSVZBZVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hODhkY2EtMjkwZi00NjU2LWFmYzUtMzM5YjRjMzZiZmVh
LzEvRjF5Zk9BTkpaS0dwS3ZnTWRvLUQwSVZBZVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHvbNMXW
w8P5OlpW4oWO+vvc5ehhgnVyzwBIe4ErnPz85Z3KFly1Oh9QNMS03RDhwrvIjKGv
qojETBPZFP7WF4O+CuXfyoxdEXuHj+g5YRCFGor+UgcRgUKlic9BV0j/OOEFQfGV
bY+PgLWUj2xSiUDhl3S1XTrR+vKQyFPeclqbkFnLdMnly1BOek1TC5HmJCVh2qPJ
psyw1xekZQSKNlSQ70+DvaHs/lqiwupj4ch35uo0nHh0GpOtaICuiWYmzaHnOe/o
vv3AkkjeBEdfWeVvQuA6l65EFiVO/vnXXlj16SEI4uk5umg/MkEMfklT6ZNsPcQc
fZodWgmTYtgUGg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:55:38 2026 by rpki-client