Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: x4CNrKk3poJcFU1Mq6+eKX7p5fE1p9VUL6iq+pvcwiY=
Subject key identifier: F0:9C:9F:F6:07:DD:CF:F0:E3:89:49:E3:FD:F5:1F:49:DD:23:76:58
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019F8644BF56D2FBE37B5413D948A927780A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0F1C
Signing time: Tue 21 Jul 2026 20:01:19 +0000
Manifest this update: Tue 21 Jul 2026 20:01:19 +0000
Manifest next update: Wed 22 Jul 2026 20:01:19 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: lni9LBbZmSIfj4cARSxdQqomuZf0ZHvgEWWYa1vajv8=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:bf:56:d2:fb:e3:7b:54:13:d9:48:a9:27:78:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jul 21 20:01:19 2026 GMT
Not After : Jul 22 20:01:19 2026 GMT
Subject: CN=f09c9ff607ddcff0e38949e3fdf51f49dd237658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:8d:72:ad:13:81:96:d1:ff:a2:91:5e:96:
c5:b5:04:01:2e:4c:bb:ed:86:9c:b6:06:a5:03:02:
c0:f2:50:54:83:9c:2a:b9:58:dd:6e:98:b1:c3:9b:
26:24:f6:f8:db:f5:70:c2:52:58:0b:fe:6d:36:66:
d4:dc:32:40:09:b6:34:48:bd:a5:c0:36:85:7f:3f:
fe:33:94:e5:2d:e3:7c:cd:df:98:09:6c:46:3c:1d:
cc:45:20:ca:62:14:40:b0:13:1d:45:68:6c:8d:81:
8f:4e:22:83:4b:81:ba:a9:a9:f0:ba:5d:37:fc:1c:
dc:95:74:02:c4:02:21:6c:a3:83:f8:f7:11:78:13:
80:ba:5f:b7:dc:96:17:17:fd:ee:f7:49:4b:fb:07:
eb:22:fd:ae:bd:6d:0b:bc:e0:dc:29:9b:38:82:f4:
37:79:f9:3e:cd:a8:ea:27:22:13:7a:c0:cd:71:de:
20:bc:74:1c:8b:a2:c0:3b:47:18:14:c9:6e:3d:f4:
b7:68:f5:6d:fa:4d:01:39:60:b0:e0:db:8c:88:3a:
39:dd:4c:8e:97:b0:ea:d6:97:a4:7e:d5:fd:2b:e5:
b1:5c:fb:41:62:86:b2:25:77:04:1e:2d:46:24:05:
a2:44:12:de:db:90:63:93:8d:b0:44:cd:86:37:1f:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:9F:F6:07:DD:CF:F0:E3:89:49:E3:FD:F5:1F:49:DD:23:76:58
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:1a:9c:b1:0c:23:32:46:65:9c:1c:e2:95:50:28:14:b5:
c3:a6:fb:d2:51:84:9a:a4:81:62:39:48:99:b1:97:91:75:c2:
92:8f:ab:46:67:23:d3:37:19:7b:53:6b:da:59:01:49:4d:f4:
7c:f4:b8:04:7b:d6:51:f8:67:a1:62:ed:df:3b:dc:73:97:1b:
16:61:ee:ef:04:e8:b4:67:54:8f:76:50:e8:8d:59:b8:02:b0:
67:0b:86:d9:2c:72:49:ff:bf:5c:40:68:02:46:02:19:10:c4:
41:7d:96:4b:c9:7f:39:4c:8f:b8:97:d9:ef:cf:aa:b0:70:7c:
d9:a2:96:9c:f2:2c:55:ba:35:dd:6e:3f:b8:77:f6:f7:10:01:
69:d1:25:4c:91:41:68:d5:8b:1c:7a:f5:40:2a:19:19:91:f4:
9b:04:7a:9b:5d:08:2d:85:01:21:3b:9c:91:26:77:9d:ea:f5:
62:5e:23:81:fe:f7:bb:92:c6:ee:4e:6e:59:2e:82:6c:a7:1c:
a1:53:20:a1:82:ce:79:f6:68:73:ef:b6:23:99:95:03:ed:0a:
8c:26:cf:45:66:06:8a:b0:ca:a7:c3:42:23:05:65:f4:93:ec:
b4:b3:00:83:4d:fb:31:12:82:19:d5:25:ee:4a:e4:29:d5:18:
a6:50:6d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRL9W0vvje1QT2UipJ3gKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx
NTY2MzIwHhcNMjYwNzIxMjAwMTE5WhcNMjYwNzIyMjAwMTE5WjAzMTEwLwYDVQQD
EyhmMDljOWZmNjA3ZGRjZmYwZTM4OTQ5ZTNmZGY1MWY0OWRkMjM3NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz02Ncq0TgZbR/6KRXpbFtQQBLky7
7YactgalAwLA8lBUg5wquVjdbpixw5smJPb42/VwwlJYC/5tNmbU3DJACbY0SL2l
wDaFfz/+M5TlLeN8zd+YCWxGPB3MRSDKYhRAsBMdRWhsjYGPTiKDS4G6qanwul03
/BzclXQCxAIhbKOD+PcReBOAul+33JYXF/3u90lL+wfrIv2uvW0LvODcKZs4gvQ3
efk+zajqJyITesDNcd4gvHQci6LAO0cYFMluPfS3aPVt+k0BOWCw4NuMiDo53UyO
l7Dq1pekftX9K+WxXPtBYoayJXcEHi1GJAWiRBLe25Bjk42wRM2GNx9EiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCcn/YH3c/w44lJ4/31H0ndI3ZYMB8GA1UdIwQY
MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt
MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl
LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKUanLEM
IzJGZZwc4pVQKBS1w6b70lGEmqSBYjlImbGXkXXCko+rRmcj0zcZe1Nr2lkBSU30
fPS4BHvWUfhnoWLt3zvcc5cbFmHu7wTotGdUj3ZQ6I1ZuAKwZwuG2SxySf+/XEBo
AkYCGRDEQX2WS8l/OUyPuJfZ78+qsHB82aKWnPIsVbo13W4/uHf29xABadElTJFB
aNWLHHr1QCoZGZH0mwR6m10ILYUBITuckSZ3ner1Yl4jgf73u5LG7k5uWS6CbKcc
oVMgoYLOefZoc++2I5mVA+0KjCbPRWYGirDKp8NCIwVl9JPstLMAg037MRKCGdUl
7krkKdUYplBtuw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:18:58 2026 by rpki-client