Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: 3SXg+6OWcAV/sDWrVpwLB4nLwZC+K/XsbCTxzJN4u18=
Subject key identifier: EA:12:36:33:43:F0:10:C3:1E:71:62:B2:EC:E1:F3:06:3C:12:D4:F3
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019F183028F5565D80C9F6DF5D58521AF10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 0614
Signing time: Tue 30 Jun 2026 11:00:36 +0000
Manifest this update: Tue 30 Jun 2026 11:00:36 +0000
Manifest next update: Wed 01 Jul 2026 11:00:36 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: /xb1fR1BeH1ajPjUWw2d0+nLfe0mjib/VftqWTrgqTc=)
2: nj_5MaQooSjXGiQr1BUruywSxrU.roa (hash: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:28:f5:56:5d:80:c9:f6:df:5d:58:52:1a:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Jun 30 11:00:36 2026 GMT
Not After : Jul 1 11:00:36 2026 GMT
Subject: CN=ea12363343f010c31e7162b2ece1f3063c12d4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:af:96:e9:84:9b:a3:96:87:5c:ff:7a:40:
9c:7b:65:93:a3:63:9c:35:15:42:b2:43:6a:0c:c6:
47:78:c0:47:8d:1c:a4:ae:90:11:16:5d:02:01:11:
82:fc:a5:8e:f3:47:8c:e9:1b:e3:ce:25:5a:4b:28:
b4:90:2d:7a:57:cd:d6:85:6b:a7:a2:9f:e8:fe:0e:
87:eb:52:64:ff:cf:45:b2:e9:3e:6d:41:4e:07:e7:
bf:2f:db:b0:f0:df:5b:fb:96:80:05:e8:3e:a6:45:
9a:78:76:7d:13:9d:8c:c4:ab:6f:6e:4a:aa:18:ab:
1b:e0:e7:e3:cd:6a:e4:83:5c:63:2a:eb:f7:bc:46:
00:37:d3:ab:e5:32:c0:4b:32:8a:10:9c:87:d2:f5:
ed:b4:b9:1b:b7:11:76:af:25:17:00:32:66:29:85:
28:dc:e1:04:f0:db:27:97:dc:72:d5:12:e8:54:85:
71:9e:21:00:e8:dc:b6:c1:3b:ec:09:09:f1:c4:a5:
6d:b3:d0:51:a6:23:b9:5e:27:f9:85:25:31:e7:61:
29:ce:aa:36:9f:30:d1:04:33:ab:2e:31:b6:1e:00:
8c:5d:ef:2d:94:35:cb:6a:2e:c3:8f:d7:b3:65:c1:
5f:cd:a8:5c:26:00:56:b8:18:9d:c1:c6:e3:31:fe:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:12:36:33:43:F0:10:C3:1E:71:62:B2:EC:E1:F3:06:3C:12:D4:F3
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c9:7c:07:37:1c:3d:cc:81:cd:44:4e:c1:65:e2:a9:8a:db:
45:c9:ea:17:c7:1e:d3:55:bf:96:bd:a1:a2:29:fc:59:b3:7a:
2c:50:5f:1e:26:38:15:5f:02:ff:97:e2:62:e7:4f:4f:3f:8f:
06:4f:36:04:f7:b9:fe:1c:97:74:2c:26:ae:ec:01:ce:80:26:
94:55:10:e7:88:9a:d3:48:e6:0e:30:50:94:a3:fd:8e:ea:35:
ca:9c:44:09:19:9e:5c:b3:94:b3:52:b3:c3:09:47:f3:ad:12:
e3:ac:ec:7d:9c:3a:85:bd:b6:b1:e8:ee:f9:66:af:0d:e6:05:
ee:ca:dc:cb:05:02:9f:3e:a6:4f:c9:0d:9b:f0:ef:88:61:c3:
82:c0:73:d5:64:9a:cf:38:a8:f1:f7:b7:3a:30:28:c4:e7:33:
db:4c:fc:ec:9e:37:84:e1:9e:79:62:e6:2d:f2:b9:c2:0b:7f:
41:01:f4:20:b2:c8:7b:9b:d8:59:ad:de:2d:77:58:ab:16:f3:
48:fc:89:21:84:48:a8:d8:f0:13:c1:93:15:89:6d:2c:6a:e7:
67:a5:0e:07:3a:30:89:35:64:01:f1:61:7c:19:3c:92:9f:6c:
b9:9a:94:4c:6d:87:d6:af:02:3e:e2:3b:63:db:8e:a0:62:e3:
02:c6:ec:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMCj1Vl2AyfbfXVhSGvEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl
NzU1NDYwHhcNMjYwNjMwMTEwMDM2WhcNMjYwNzAxMTEwMDM2WjAzMTEwLwYDVQQD
EyhlYTEyMzYzMzQzZjAxMGMzMWU3MTYyYjJlY2UxZjMwNjNjMTJkNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3huvlumEm6OWh1z/ekCce2WTo2Oc
NRVCskNqDMZHeMBHjRykrpARFl0CARGC/KWO80eM6RvjziVaSyi0kC16V83WhWun
op/o/g6H61Jk/89Fsuk+bUFOB+e/L9uw8N9b+5aABeg+pkWaeHZ9E52MxKtvbkqq
GKsb4OfjzWrkg1xjKuv3vEYAN9Or5TLASzKKEJyH0vXttLkbtxF2ryUXADJmKYUo
3OEE8Nsnl9xy1RLoVIVxniEA6Ny2wTvsCQnxxKVts9BRpiO5Xif5hSUx52Epzqo2
nzDRBDOrLjG2HgCMXe8tlDXLai7Dj9ezZcFfzahcJgBWuBidwcbjMf4q1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoSNjND8BDDHnFisuzh8wY8EtTzMB8GA1UdIwQY
MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt
ODgwYTgxYjk5Y2M1LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1
LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMl8Bzcc
PcyBzUROwWXiqYrbRcnqF8ce01W/lr2hoin8WbN6LFBfHiY4FV8C/5fiYudPTz+P
Bk82BPe5/hyXdCwmruwBzoAmlFUQ54ia00jmDjBQlKP9juo1ypxECRmeXLOUs1Kz
wwlH860S46zsfZw6hb22seju+WavDeYF7srcywUCnz6mT8kNm/DviGHDgsBz1WSa
zzio8fe3OjAoxOcz20z87J43hOGeeWLmLfK5wgt/QQH0ILLIe5vYWa3eLXdYqxbz
SPyJIYRIqNjwE8GTFYltLGrnZ6UOBzowiTVkAfFhfBk8kp9suZqUTG2H1q8CPuI7
Y9uOoGLjAsbs+A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:08 2026 by rpki-client