Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: SEVfDCDPv9kM2ZLFpgLwrCbtj7kL/8AAp/hn9n5YT4c=
Subject key identifier: 4A:68:BE:85:18:2A:62:49:BB:67:E0:05:9E:B1:24:DB:5D:05:99:21
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019F848D0A19060520AF5AF06B8536A4DA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 12:01:03 +0000
Manifest this update: Tue 21 Jul 2026 12:01:03 +0000
Manifest next update: Wed 22 Jul 2026 12:01:03 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: vnZuS4vO6ZJfZpwuo8gol4Rv5goQVYnxUUsm40r2OcI=)
2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8d:0a:19:06:05:20:af:5a:f0:6b:85:36:a4:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Jul 21 12:01:03 2026 GMT
Not After : Jul 22 12:01:03 2026 GMT
Subject: CN=4a68be85182a6249bb67e0059eb124db5d059921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:9b:ce:63:cb:47:7f:04:be:b7:c6:3d:8d:
d2:c9:ce:06:ec:7e:3e:e9:41:ed:56:78:41:e1:95:
9a:0b:5a:26:0b:f3:6d:42:3a:7c:4f:bb:5c:81:17:
ee:05:7f:36:8c:c3:35:04:d2:de:9b:2a:db:a4:71:
b3:71:c9:bb:92:94:0d:1f:fc:6b:c7:02:c2:9a:fc:
24:64:75:e4:ee:d3:bf:10:d3:f9:3c:38:7a:d9:66:
40:58:a1:7c:b9:3c:a9:52:5f:f7:b3:d5:07:82:b8:
b0:16:40:4a:46:9a:e6:b3:dd:7f:0a:da:6e:c0:5b:
de:01:8f:73:79:f6:b2:2b:26:6e:1f:a9:8c:96:29:
4a:59:1a:16:1e:b8:04:d1:f0:9d:6f:82:7d:69:3f:
fd:10:6d:5d:18:80:22:83:f8:b2:04:ce:2a:a4:c1:
b0:c3:cd:e9:31:54:f1:4c:a7:88:48:56:1a:47:19:
1d:90:09:26:73:48:1d:f8:71:38:ba:42:e7:9c:d2:
51:70:91:cc:74:b1:d8:df:56:68:9d:51:ee:2b:ee:
97:23:58:6a:ce:c8:d1:f1:ac:a5:3a:a8:18:dd:f4:
e4:00:c0:46:60:73:c8:95:f4:25:e6:f7:ab:fa:10:
8a:45:16:7d:59:9d:61:bc:be:e8:a0:f8:33:64:e4:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:BE:85:18:2A:62:49:BB:67:E0:05:9E:B1:24:DB:5D:05:99:21
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:f4:c5:94:7b:54:bf:fa:7a:06:61:59:d9:1f:13:e7:78:
32:fc:70:c2:23:00:55:db:84:d8:21:d9:1b:26:1d:e2:63:3d:
9c:29:fb:69:e3:ee:97:8a:90:d0:57:5f:12:f4:d7:55:4b:de:
79:b2:0a:e7:1a:5e:10:82:23:eb:5e:43:de:5f:fb:e6:91:93:
d9:88:7e:1d:08:3c:44:c6:30:33:44:8c:ce:80:06:0f:d1:52:
e7:39:61:6e:75:11:22:2d:6f:e3:65:7d:78:06:d0:83:7d:94:
dd:5f:01:68:c7:a8:78:8a:c7:1b:e7:78:90:42:51:4d:6c:87:
e5:d2:9a:6d:5a:62:09:d3:90:32:e6:2c:7b:9f:27:8c:06:14:
8b:96:57:c0:eb:95:44:9e:e9:c8:e0:d2:97:6f:2e:94:aa:6f:
c7:a1:69:dd:ac:f6:c7:6e:64:1f:f9:3a:e1:ca:66:23:e0:ba:
d8:3b:24:2b:53:b7:b0:0c:8c:2e:6a:f4:68:01:d2:36:f3:6b:
e5:da:5e:87:cb:7b:f8:c6:32:a3:03:a2:ee:66:f5:62:2e:be:
c4:b1:a0:f9:ee:85:e2:eb:85:7b:74:2c:9a:93:c6:b9:77:ac:
02:96:70:b5:53:69:61:50:85:f8:82:54:4c:c5:5c:44:b4:86:
b7:f9:c3:39
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+EjQoZBgUgr1rwa4U2pNoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw
MGViY2YwHhcNMjYwNzIxMTIwMTAzWhcNMjYwNzIyMTIwMTAzWjAzMTEwLwYDVQQD
Eyg0YTY4YmU4NTE4MmE2MjQ5YmI2N2UwMDU5ZWIxMjRkYjVkMDU5OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ibzmPLR38EvrfGPY3Syc4G7H4+
6UHtVnhB4ZWaC1omC/NtQjp8T7tcgRfuBX82jMM1BNLemyrbpHGzccm7kpQNH/xr
xwLCmvwkZHXk7tO/ENP5PDh62WZAWKF8uTypUl/3s9UHgriwFkBKRprms91/Ctpu
wFveAY9zefayKyZuH6mMlilKWRoWHrgE0fCdb4J9aT/9EG1dGIAig/iyBM4qpMGw
w83pMVTxTKeISFYaRxkdkAkmc0gd+HE4ukLnnNJRcJHMdLHY31ZonVHuK+6XI1hq
zsjR8aylOqgY3fTkAMBGYHPIlfQl5ver+hCKRRZ9WZ1hvL7ooPgzZOTOCQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEpovoUYKmJJu2fgBZ6xJNtdBZkhMB8GA1UdIwQY
MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk
LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1
NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZf0
xZR7VL/6egZhWdkfE+d4MvxwwiMAVduE2CHZGyYd4mM9nCn7aePul4qQ0FdfEvTX
VUveebIK5xpeEIIj615D3l/75pGT2Yh+HQg8RMYwM0SMzoAGD9FS5zlhbnURIi1v
42V9eAbQg32U3V8BaMeoeIrHG+d4kEJRTWyH5dKabVpiCdOQMuYse58njAYUi5ZX
wOuVRJ7pyODSl28ulKpvx6Fp3az2x25kH/k64cpmI+C62DskK1O3sAyMLmr0aAHS
NvNr5dpeh8t7+MYyowOi7mb1Yi6+xLGg+e6F4uuFe3QsmpPGuXesApZwtVNpYVCF
+IJUTMVcRLSGt/nDOQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:06 2026 by rpki-client