Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: bcN9gGmhbxSTmUXh3c1evqdi79kmssJUKBQ6/yHM4ao=
Subject key identifier: 91:AB:EF:7E:8F:F2:2E:5F:9B:35:E5:F6:B4:71:DB:21:54:9F:B7:68
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019F17C2994477BFD72DA9E742A2F931E6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 09:00:56 +0000
Manifest this update: Tue 30 Jun 2026 09:00:56 +0000
Manifest next update: Wed 01 Jul 2026 09:00:56 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: bPffl2OMzD7WOj29SVyLV/2LnKX6QVzAaRAiBmgXy0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:99:44:77:bf:d7:2d:a9:e7:42:a2:f9:31:e6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Jun 30 09:00:56 2026 GMT
Not After : Jul 1 09:00:56 2026 GMT
Subject: CN=91abef7e8ff22e5f9b35e5f6b471db21549fb768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:0f:96:d4:1b:15:a8:0a:39:95:ca:4e:58:
85:48:af:89:d0:34:8b:6f:5e:f2:b7:b2:7c:46:eb:
fb:e5:bf:79:94:b6:a7:1d:6e:f9:19:58:0e:ca:4d:
ea:1b:46:0b:2f:15:e2:fe:f3:67:59:8a:99:30:13:
51:58:90:f2:f4:53:44:e2:2c:e5:ff:4c:93:4a:f2:
8e:f4:3c:e4:27:f2:54:c0:18:01:3f:63:c8:4b:4f:
56:e5:e4:c8:03:5a:11:ec:83:3c:f4:27:4c:c2:43:
12:8c:10:bc:5a:38:47:62:37:e3:6e:fb:07:8f:70:
f6:69:9c:10:60:04:07:e2:1c:bb:a9:d3:58:52:82:
33:37:5f:02:cb:8f:7a:03:2f:9c:93:76:ff:22:41:
88:e3:e7:46:59:8e:a0:d7:64:69:33:5e:76:1d:ca:
44:8b:eb:a3:5b:0d:49:6e:a3:cf:67:41:3a:87:79:
43:b0:d0:b0:c7:85:7c:79:a1:24:57:41:ca:a1:c0:
5c:02:57:d3:1a:eb:01:cc:36:29:c2:28:16:de:d9:
7c:64:e3:d3:ec:1b:47:69:df:11:e6:66:85:fb:84:
90:9c:36:f7:0f:26:86:c6:09:a1:b9:4b:04:35:41:
8a:1f:bf:ad:fe:64:b9:7e:25:5e:e4:9f:b1:87:b8:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:EF:7E:8F:F2:2E:5F:9B:35:E5:F6:B4:71:DB:21:54:9F:B7:68
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:17:f0:bf:18:dc:60:a2:71:b8:5f:94:29:65:c6:f4:e3:
3f:81:a0:46:cc:ad:78:58:35:ed:03:a7:75:40:cb:7a:f7:63:
4a:17:37:c2:95:10:d3:46:88:46:65:b0:33:28:0d:65:d1:e5:
a2:a0:1a:ad:34:ea:8d:4e:9a:5a:ec:89:5f:4b:42:e5:30:1a:
e0:4f:01:6d:ce:7a:09:8d:a9:2b:ae:36:78:b3:cd:ac:59:19:
6d:e7:6f:b0:41:ad:31:49:c3:19:f9:46:5b:e3:58:0b:a2:40:
c5:33:d6:ef:c5:d8:b6:ce:6a:cf:05:ed:ff:97:00:41:4d:a1:
fd:f0:40:77:ab:ea:b2:ac:cc:80:af:aa:37:02:5b:e5:f0:c4:
5a:5b:20:2e:1c:58:81:d6:49:8c:18:ba:73:7c:1b:c1:50:85:
8c:7f:54:61:97:e9:bb:f2:a4:cf:4d:f4:f7:07:8d:6c:3b:74:
b7:c3:4a:cf:75:61:ee:35:c4:0a:22:5d:5a:6f:08:e7:2b:26:
cf:26:cf:0c:b9:7e:0e:0f:7f:b9:40:b6:be:92:20:b7:31:27:
d6:24:f2:6d:74:a8:5d:4a:a3:c5:47:b0:0e:a5:1c:ed:ed:9e:
11:65:e3:7b:50:d4:86:cb:d0:13:86:17:79:3f:5b:33:f1:ff:
37:9f:e3:2a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8XwplEd7/XLannQqL5Meb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjU0OWMxYzA5YzExMDkzYTM3MzNiODMwOGFlMDQ1MmNl
NjI0YmEwHhcNMjYwNjMwMDkwMDU2WhcNMjYwNzAxMDkwMDU2WjAzMTEwLwYDVQQD
Eyg5MWFiZWY3ZThmZjIyZTVmOWIzNWU1ZjZiNDcxZGIyMTU0OWZiNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpYPltQbFagKOZXKTliFSK+J0DSL
b17yt7J8Ruv75b95lLanHW75GVgOyk3qG0YLLxXi/vNnWYqZMBNRWJDy9FNE4izl
/0yTSvKO9DzkJ/JUwBgBP2PIS09W5eTIA1oR7IM89CdMwkMSjBC8WjhHYjfjbvsH
j3D2aZwQYAQH4hy7qdNYUoIzN18Cy496Ay+ck3b/IkGI4+dGWY6g12RpM152HcpE
i+ujWw1JbqPPZ0E6h3lDsNCwx4V8eaEkV0HKocBcAlfTGusBzDYpwigW3tl8ZOPT
7BtHad8R5maF+4SQnDb3DyaGxgmhuUsENUGKH7+t/mS5fiVe5J+xh7g5bQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJGr736P8i5fmzXl9rRx2yFUn7doMB8GA1UdIwQY
MBaAFPr1ScHAnBEJOjczuDCK4EUs5iS6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12Vkp3Y0NjRVFrNk56TzRNSXJnUlN6bUpMby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvN2RhNWI0LTRiOWItNGMyOC04NmM4
LWZlNTQxNzBkZWVhMS8xLzEtdlZKd2NDY0VRazZOek80TUlyZ1JTem1KTG8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VjLzdkYTViNC00YjliLTRjMjgtODZjOC1mZTU0MTcwZGVl
YTEvMS8xLXZWSndjQ2NFUWs2TnpPNE1JcmdSU3ptSkxvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+MX
8L8Y3GCicbhflCllxvTjP4GgRsyteFg17QOndUDLevdjShc3wpUQ00aIRmWwMygN
ZdHloqAarTTqjU6aWuyJX0tC5TAa4E8Bbc56CY2pK642eLPNrFkZbedvsEGtMUnD
GflGW+NYC6JAxTPW78XYts5qzwXt/5cAQU2h/fBAd6vqsqzMgK+qNwJb5fDEWlsg
LhxYgdZJjBi6c3wbwVCFjH9UYZfpu/Kkz0309weNbDt0t8NKz3Vh7jXECiJdWm8I
5ysmzybPDLl+Dg9/uUC2vpIgtzEn1iTybXSoXUqjxUewDqUc7e2eEWXje1DUhsvQ
E4YXeT9bM/H/N5/jKg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:51 2026 by rpki-client