Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: dLU88Q1KeHIyB3LmH0pDAGUNcCohYoLQE4Pm0TJ1qwU=
Subject key identifier: 2C:FE:CF:FE:73:D9:DB:17:A7:63:6D:90:93:0D:C7:88:74:F5:9D:99
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019FA37322504CFCB07B65C267796A8040DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 12:00:59 +0000
Manifest this update: Mon 27 Jul 2026 12:00:59 +0000
Manifest next update: Tue 28 Jul 2026 12:00:59 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: BdCZW0iw6AEO/ZhCwKJWcgL3N8Oas19nm+wLLFZgx3Y=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:22:50:4c:fc:b0:7b:65:c2:67:79:6a:80:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jul 27 12:00:59 2026 GMT
Not After : Jul 28 12:00:59 2026 GMT
Subject: CN=2cfecffe73d9db17a7636d90930dc78874f59d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:c1:39:05:73:e0:39:c1:ea:7f:dd:ba:e0:
32:84:02:82:e1:52:96:42:ed:7d:e1:11:85:91:ea:
8d:ea:79:2d:49:5a:64:60:d9:83:29:e8:dc:8e:34:
44:dc:56:7b:30:9f:2e:93:92:9a:28:11:fb:0a:09:
9a:0b:39:6e:43:96:19:66:57:ee:ca:a4:ea:64:88:
c9:71:d2:58:90:f0:d5:89:ed:fe:75:27:47:86:e1:
c2:50:76:8f:da:25:26:3c:6f:c3:b8:6b:9e:e4:19:
e2:27:19:3f:3d:a1:01:69:34:6e:0f:6b:14:be:05:
6c:44:91:22:16:21:66:fa:16:bc:ce:74:a8:9c:05:
43:94:04:c8:dc:e2:64:6a:8c:a8:43:56:51:c6:b7:
55:ab:ec:27:c7:b9:64:17:1e:f1:3e:a3:10:db:74:
f4:08:bf:1c:0e:c4:00:c8:6f:a1:68:8f:c7:c6:79:
43:68:d5:e7:04:4b:1f:c8:71:a3:25:88:12:8e:cf:
2b:3c:b4:7c:c2:d6:7c:aa:42:3a:3e:b8:0b:d7:40:
e0:e2:d2:5d:f2:c4:0b:23:1f:24:74:5a:64:49:b1:
13:c2:3c:4a:5b:ac:04:a2:31:8f:0f:d7:f0:94:e2:
e3:32:e7:10:9a:de:ab:4a:a9:99:b6:83:4f:6d:16:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:CF:FE:73:D9:DB:17:A7:63:6D:90:93:0D:C7:88:74:F5:9D:99
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:05:1b:52:88:6e:9c:ce:f8:0a:0d:35:b3:2a:7c:2a:82:
90:1f:b1:22:df:48:2f:9b:eb:2e:6a:65:fa:34:39:24:79:39:
bf:13:96:2b:56:3b:60:ed:01:cf:5a:cd:f5:cf:3c:8f:45:70:
b0:ae:8e:61:ba:4c:80:df:e0:c9:a3:60:f1:c3:34:33:d1:02:
e4:7b:d4:c2:45:c0:7f:f1:08:87:fe:25:fa:33:aa:6a:90:06:
0c:d0:28:ea:12:df:5a:3e:21:55:a2:e6:7d:98:eb:d4:3f:d2:
4f:87:ce:7f:7e:8b:3f:4f:68:d0:83:70:04:6b:38:28:1a:2b:
9a:d6:22:c8:32:2f:a5:aa:c1:fb:78:c5:a3:95:9e:3e:4b:bc:
cc:92:73:c5:31:22:5e:d0:88:9f:30:18:4a:af:42:29:ee:05:
57:92:e2:e9:6b:4a:25:8e:d1:b6:8f:f1:e9:b9:b5:4a:c0:0c:
55:e9:e0:a4:51:d3:d2:57:02:20:44:bd:bf:70:50:62:8d:71:
af:a3:03:47:1c:bd:db:27:39:6c:cb:09:24:76:50:17:83:78:
5f:28:e5:7d:43:15:f0:ff:3c:de:d2:53:34:12:d9:7f:f9:bf:
67:4a:29:32:31:27:26:a1:ff:3a:c0:78:db:df:5c:ad:13:90:
06:91:ac:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcyJQTPywe2XCZ3lqgEDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjYwNzI3MTIwMDU5WhcNMjYwNzI4MTIwMDU5WjAzMTEwLwYDVQQD
EygyY2ZlY2ZmZTczZDlkYjE3YTc2MzZkOTA5MzBkYzc4ODc0ZjU5ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67PBOQVz4DnB6n/duuAyhAKC4VKW
Qu194RGFkeqN6nktSVpkYNmDKejcjjRE3FZ7MJ8uk5KaKBH7CgmaCzluQ5YZZlfu
yqTqZIjJcdJYkPDVie3+dSdHhuHCUHaP2iUmPG/DuGue5BniJxk/PaEBaTRuD2sU
vgVsRJEiFiFm+ha8znSonAVDlATI3OJkaoyoQ1ZRxrdVq+wnx7lkFx7xPqMQ23T0
CL8cDsQAyG+haI/HxnlDaNXnBEsfyHGjJYgSjs8rPLR8wtZ8qkI6PrgL10Dg4tJd
8sQLIx8kdFpkSbETwjxKW6wEojGPD9fwlOLjMucQmt6rSqmZtoNPbRaCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz+z/5z2dsXp2NtkJMNx4h09Z2ZMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtwFG1KI
bpzO+AoNNbMqfCqCkB+xIt9IL5vrLmpl+jQ5JHk5vxOWK1Y7YO0Bz1rN9c88j0Vw
sK6OYbpMgN/gyaNg8cM0M9EC5HvUwkXAf/EIh/4l+jOqapAGDNAo6hLfWj4hVaLm
fZjr1D/ST4fOf36LP09o0INwBGs4KBormtYiyDIvparB+3jFo5WePku8zJJzxTEi
XtCInzAYSq9CKe4FV5Li6WtKJY7Rto/x6bm1SsAMVengpFHT0lcCIES9v3BQYo1x
r6MDRxy92yc5bMsJJHZQF4N4XyjlfUMV8P883tJTNBLZf/m/Z0opMjEnJqH/OsB4
299crROQBpGsEA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:20 2026 by rpki-client