Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: JiT3H6pwd83jCiYg7zQx3xssSPsiMZPVF/dvRUpA5qs=
Subject key identifier: 33:71:4E:12:1F:FA:1C:0F:FE:24:53:38:FC:A8:00:FB:FB:8F:74:4B
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 019F91A453F108807A27CC88D443B1C8D531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 19C2
Signing time: Fri 24 Jul 2026 01:01:33 +0000
Manifest this update: Fri 24 Jul 2026 01:01:33 +0000
Manifest next update: Sat 25 Jul 2026 01:01:33 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: bYKfQ82VtDrvaxJAYayq8Wv13I+A7lhfVyY4wYo327E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:53:f1:08:80:7a:27:cc:88:d4:43:b1:c8:d5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Jul 24 01:01:33 2026 GMT
Not After : Jul 25 01:01:33 2026 GMT
Subject: CN=33714e121ffa1c0ffe245338fca800fbfb8f744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:7b:79:d3:6a:e0:80:1a:e0:11:99:11:8d:
21:7b:16:6b:dd:84:26:50:13:72:b1:07:07:59:f6:
3b:c4:82:98:8e:61:03:52:80:45:cd:e4:ec:00:f6:
c5:88:0e:84:ef:82:ba:18:a2:a5:f2:eb:bc:20:84:
4f:4f:14:27:f4:b6:ed:85:46:20:ef:40:2e:cd:86:
1d:b2:f0:e7:42:59:ec:e1:e4:fd:3e:eb:c9:86:77:
0d:6c:ce:6e:ec:a8:72:96:c4:e2:8a:17:54:c1:9f:
58:8b:37:2d:41:fd:2d:9b:60:85:fd:98:eb:c0:c7:
d1:61:a3:ae:9f:87:a5:8c:7c:e6:19:a8:20:ba:2d:
a1:38:cb:53:14:8b:52:67:98:f4:b5:da:d4:1d:92:
61:01:9e:c7:90:e2:a5:f4:4a:4e:55:eb:73:ea:3f:
03:9b:7e:f4:da:fe:ec:1c:d7:12:6d:97:83:16:2e:
ae:95:63:8e:dc:4f:2f:d4:ff:2e:4a:c1:f4:5b:45:
3a:92:be:6c:a2:19:08:3b:34:43:64:0c:67:c3:d1:
0f:6e:5a:6c:77:6c:c2:d4:48:41:2a:35:2e:b2:3d:
7b:e2:34:30:26:c7:7f:36:26:f8:1a:74:30:f6:3f:
85:38:ca:95:45:44:b0:7b:e0:db:47:a9:b1:f3:79:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:4E:12:1F:FA:1C:0F:FE:24:53:38:FC:A8:00:FB:FB:8F:74:4B
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:fc:52:a4:14:9f:c6:ff:ce:f8:1d:96:92:98:9d:39:eb:
b8:19:67:40:6d:e5:96:f1:e4:75:fc:ff:19:5c:f0:08:80:7a:
0c:06:21:d5:2e:17:18:20:a5:34:3b:6b:19:19:3e:95:30:41:
8a:f0:4a:37:b8:dc:04:d2:70:95:fa:9a:73:57:9a:ea:52:78:
b3:35:b3:ea:49:71:3c:9b:59:b0:23:2f:43:91:f6:e7:95:38:
95:f0:f5:2e:7e:78:44:af:0e:35:5b:f0:8d:6d:fc:f6:d8:3f:
a8:48:97:c5:da:4c:36:2b:9a:ea:28:1f:16:d5:91:c1:a4:b2:
25:81:1c:0e:b1:19:c9:26:99:d9:f3:45:d5:08:67:63:0a:e9:
b1:3a:0d:91:db:ae:f1:05:f3:1e:91:6d:b2:65:e6:56:dc:a6:
28:16:0b:56:02:7f:df:0e:fa:f0:91:35:47:c7:8b:3a:6a:7c:
74:ff:6c:38:2b:12:d3:15:a6:9b:a6:bf:c3:e3:52:ab:8a:1c:
19:d0:86:be:5c:c6:bd:22:44:e1:77:a2:a1:a5:f7:6b:3c:15:
37:c6:bd:dd:b1:a2:5e:4e:4a:b8:b9:86:a1:9c:25:64:a5:06:
0f:c4:94:75:1f:23:02:91:12:7a:b6:03:b2:8e:6a:d3:21:27:
9f:ec:a2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpFPxCIB6J8yI1EOxyNUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDYwZDIwMTc5NWE2YTk5MmVkNGFjMThiYjdjNTJjMTA4
Yjc4NTIwHhcNMjYwNzI0MDEwMTMzWhcNMjYwNzI1MDEwMTMzWjAzMTEwLwYDVQQD
EygzMzcxNGUxMjFmZmExYzBmZmUyNDUzMzhmY2E4MDBmYmZiOGY3NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0F7edNq4IAa4BGZEY0hexZr3YQm
UBNysQcHWfY7xIKYjmEDUoBFzeTsAPbFiA6E74K6GKKl8uu8IIRPTxQn9LbthUYg
70AuzYYdsvDnQlns4eT9PuvJhncNbM5u7KhylsTiihdUwZ9YizctQf0tm2CF/Zjr
wMfRYaOun4eljHzmGaggui2hOMtTFItSZ5j0tdrUHZJhAZ7HkOKl9EpOVetz6j8D
m3702v7sHNcSbZeDFi6ulWOO3E8v1P8uSsH0W0U6kr5sohkIOzRDZAxnw9EPblps
d2zC1EhBKjUusj174jQwJsd/Nib4GnQw9j+FOMqVRUSwe+DbR6mx83kzSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNxThIf+hwP/iRTOPyoAPv7j3RLMB8GA1UdIwQY
MBaAFNtGDSAXlaapku1KwYu3xSwQi3hSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2Ut
ZTgyZWQzZDc2YTg3LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2UtZTgyZWQzZDc2YTg3
LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZn8UqQU
n8b/zvgdlpKYnTnruBlnQG3llvHkdfz/GVzwCIB6DAYh1S4XGCClNDtrGRk+lTBB
ivBKN7jcBNJwlfqac1ea6lJ4szWz6klxPJtZsCMvQ5H255U4lfD1Ln54RK8ONVvw
jW389tg/qEiXxdpMNiua6igfFtWRwaSyJYEcDrEZySaZ2fNF1QhnYwrpsToNkduu
8QXzHpFtsmXmVtymKBYLVgJ/3w768JE1R8eLOmp8dP9sOCsS0xWmm6a/w+NSq4oc
GdCGvlzGvSJE4XeioaX3azwVN8a93bGiXk5KuLmGoZwlZKUGD8SUdR8jApESerYD
so5q0yEnn+yioQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:56 2026 by rpki-client