Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: WbPzWP/BGjBsEN5eLVHZ5vKvB4mk60qQ3QyWOUGanf4=
Subject key identifier: 64:D1:82:FF:70:E3:5A:35:EE:56:6A:3E:5E:65:32:86:9F:2C:49:78
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019F12D3C0CC8B1D7127406CF77740ADB112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1981
Signing time: Mon 29 Jun 2026 10:01:34 +0000
Manifest this update: Mon 29 Jun 2026 10:01:34 +0000
Manifest next update: Tue 30 Jun 2026 10:01:34 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: 1fwjDAdLg0M9K2x1yZfUg36fQ8HPtp4mBs4O+Eh3ro0=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:c0:cc:8b:1d:71:27:40:6c:f7:77:40:ad:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Jun 29 10:01:34 2026 GMT
Not After : Jun 30 10:01:34 2026 GMT
Subject: CN=64d182ff70e35a35ee566a3e5e6532869f2c4978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:6a:d3:38:31:58:17:de:3c:b6:1b:2b:f4:
42:c9:df:48:e6:2b:59:45:c3:8b:41:39:97:7e:c1:
7d:54:71:bb:08:8c:b5:df:2b:41:52:11:52:d6:9c:
01:3d:0b:88:e3:19:be:88:1d:3c:df:0c:8f:ce:a5:
e7:cc:58:ff:c4:f4:fb:6b:03:75:c2:46:09:5c:8b:
1c:44:95:55:7c:c8:98:72:ae:a7:85:52:00:b4:0e:
f0:70:c1:c2:76:89:31:a4:b2:6f:e5:ec:df:5c:46:
08:b8:74:68:52:c4:f7:7b:d8:47:70:5d:c2:d6:5f:
ef:61:44:d7:7f:09:71:26:43:f3:08:dd:8d:d2:bb:
bb:30:02:12:15:ce:3d:58:33:dd:d7:cf:ba:ec:be:
09:e9:c4:5c:a2:48:a2:85:4a:72:66:14:bf:23:99:
e4:79:c8:e3:00:5e:b8:83:7d:2a:7e:e1:ed:ab:14:
d2:7a:f3:2a:d2:8c:fe:04:b7:e7:b6:7a:c4:d8:0c:
fe:d0:2c:24:04:73:ae:fe:5a:0d:33:9f:19:d2:60:
ed:15:be:ec:bb:22:c9:2f:32:a5:1b:20:8d:41:17:
8e:8e:66:49:f1:51:f8:a9:93:fc:8d:bf:08:e2:b8:
a5:07:40:96:a6:16:86:0c:26:c0:15:8b:a1:de:c2:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:82:FF:70:E3:5A:35:EE:56:6A:3E:5E:65:32:86:9F:2C:49:78
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:79:6d:01:2d:d7:76:67:30:69:9d:79:c0:78:3e:32:70:
fb:6f:2e:29:19:0c:97:7d:b9:e0:c3:e2:95:f6:e2:cb:8e:07:
fe:da:a5:e4:df:c4:85:a7:8e:4a:e0:d9:a6:aa:3a:e3:3e:7a:
f6:4d:d0:16:43:c6:a1:f9:34:a8:c0:06:a0:6e:d7:39:00:f0:
52:38:73:81:f7:ed:73:aa:0c:e3:6b:1b:ab:f9:a2:d7:a2:11:
db:2c:a6:30:5d:8d:5d:4b:74:e3:5a:b2:a3:b8:0a:72:71:c3:
1c:8a:0c:fd:f1:aa:13:3e:bd:a6:be:a7:68:65:c5:42:c9:10:
51:08:fe:b2:a7:85:54:13:8f:49:3d:a1:e7:55:76:e0:dd:2b:
9b:11:16:3e:47:7d:d6:40:9d:4e:0f:15:1c:fe:13:69:32:7b:
93:f4:f5:54:7d:ca:78:41:cf:bb:64:2a:c4:6c:e3:0b:a0:c4:
c8:67:13:4b:ad:ba:95:6c:5c:3b:de:8b:57:e7:78:8a:8c:45:
97:70:44:d3:10:7c:4f:cc:d1:f6:c7:38:30:42:c2:99:01:cc:
fe:e7:6a:32:02:54:60:8e:b8:5c:4a:b7:8c:fe:a1:2d:3d:0b:
27:30:a9:5b:c3:9d:35:ca:f8:df:29:ca:5b:b8:3c:29:bf:e6:
b9:d1:dd:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S08DMix1xJ0Bs93dArbESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZGM5MWU2NjY0OTRkMGRjNTZhMmI4MWQyMjlhYmQ2ZWUz
NWY4NGMwHhcNMjYwNjI5MTAwMTM0WhcNMjYwNjMwMTAwMTM0WjAzMTEwLwYDVQQD
Eyg2NGQxODJmZjcwZTM1YTM1ZWU1NjZhM2U1ZTY1MzI4NjlmMmM0OTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8tq0zgxWBfePLYbK/RCyd9I5itZ
RcOLQTmXfsF9VHG7CIy13ytBUhFS1pwBPQuI4xm+iB083wyPzqXnzFj/xPT7awN1
wkYJXIscRJVVfMiYcq6nhVIAtA7wcMHCdokxpLJv5ezfXEYIuHRoUsT3e9hHcF3C
1l/vYUTXfwlxJkPzCN2N0ru7MAISFc49WDPd18+67L4J6cRcokiihUpyZhS/I5nk
ecjjAF64g30qfuHtqxTSevMq0oz+BLfntnrE2Az+0CwkBHOu/loNM58Z0mDtFb7s
uyLJLzKlGyCNQReOjmZJ8VH4qZP8jb8I4rilB0CWphaGDCbAFYuh3sIh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTRgv9w41o17lZqPl5lMoafLEl4MB8GA1UdIwQY
MBaAFCDckeZmSU0NxWorgdIpq9buNfhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMt
MWQwMGVhODQxZDNlLzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMtMWQwMGVhODQxZDNl
LzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABit5bQEt
13ZnMGmdecB4PjJw+28uKRkMl3254MPilfbiy44H/tql5N/EhaeOSuDZpqo64z56
9k3QFkPGofk0qMAGoG7XOQDwUjhzgfftc6oM42sbq/mi16IR2yymMF2NXUt041qy
o7gKcnHDHIoM/fGqEz69pr6naGXFQskQUQj+sqeFVBOPST2h51V24N0rmxEWPkd9
1kCdTg8VHP4TaTJ7k/T1VH3KeEHPu2QqxGzjC6DEyGcTS626lWxcO96LV+d4ioxF
l3BE0xB8T8zR9sc4MELCmQHM/udqMgJUYI64XEq3jP6hLT0LJzCpW8OdNcr43ynK
W7g8Kb/mudHdsA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:29:38 2026 by rpki-client