Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: fAlQv8MkpxDlnE8p/yDZN7GPaYoJEHNlF/YSUZMUjbQ=
Subject key identifier: 2D:D2:00:CE:91:74:3C:F9:20:30:C0:E1:F6:2D:A8:E1:5D:06:27:D6
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 019F90599D9DA309D921194C7EA30DE71540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 19:00:19 +0000
Manifest this update: Thu 23 Jul 2026 19:00:19 +0000
Manifest next update: Fri 24 Jul 2026 19:00:19 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: CydiE+UQZmJfNV5hzBDNVTN6lda3UoyeOzqVZAXjJ4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:9d:9d:a3:09:d9:21:19:4c:7e:a3:0d:e7:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Jul 23 19:00:19 2026 GMT
Not After : Jul 24 19:00:19 2026 GMT
Subject: CN=2dd200ce91743cf92030c0e1f62da8e15d0627d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:06:8d:66:3e:64:f6:7b:ca:0c:f2:f5:d9:
6e:d0:35:a6:7b:1c:3d:5d:3b:09:c4:73:7a:61:d9:
01:e6:3f:71:8f:78:73:ff:b9:27:46:ab:e8:e3:86:
76:98:c7:a5:55:b1:29:16:a2:c0:82:20:c3:d1:37:
8d:a2:46:c7:9a:9b:f5:95:37:0a:fb:6a:c8:65:69:
93:4e:14:ba:0e:b8:db:1d:55:44:56:f0:26:64:de:
7c:79:1a:c2:9d:50:ff:52:fa:6e:04:f0:a9:c3:0f:
02:c3:73:e1:ca:f6:6d:3b:ca:65:ae:03:4c:36:91:
d9:c9:8e:7b:ff:89:01:a6:15:4c:f8:76:1c:3e:09:
34:36:27:64:3a:5c:83:5e:24:af:08:df:36:78:7f:
13:40:68:6e:9f:5c:9e:08:49:6c:23:42:39:e1:21:
af:54:c3:40:9b:f1:59:f4:27:07:32:d7:bd:fd:82:
15:50:e5:cb:59:26:4a:63:91:a3:c0:d4:5a:04:a3:
ef:f8:b0:e7:d1:b2:dd:7c:59:e0:f1:6a:5c:9c:9d:
e1:f5:f6:4c:f6:1d:59:c8:42:55:17:81:b7:bc:0a:
fb:46:e8:ab:07:76:cc:e0:61:d1:e2:4f:df:e5:c9:
cb:73:a6:9f:27:15:fd:a6:a2:dd:d8:6f:a6:c3:0b:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:00:CE:91:74:3C:F9:20:30:C0:E1:F6:2D:A8:E1:5D:06:27:D6
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:40:6c:7d:6c:52:74:36:90:6e:62:69:d5:73:c4:e0:aa:
fc:90:06:6c:14:d7:84:24:c2:3a:84:d3:4e:1e:0a:35:3e:fd:
7e:e1:1d:21:ff:bd:27:ad:6b:26:ec:4a:85:b0:02:30:c4:c1:
cb:3b:dd:30:ed:d5:8f:cf:0e:1c:01:4e:09:cc:39:76:c3:91:
be:06:94:e3:43:6b:66:9e:08:ef:40:88:de:af:54:bc:46:d8:
25:8e:19:2d:5e:2d:4e:ec:a2:a0:94:13:b7:54:9b:15:5d:78:
ca:38:08:f3:e8:79:1b:63:22:d1:e5:62:5e:fc:21:06:80:10:
2e:45:22:10:c8:e5:3f:22:a7:dd:dc:05:f7:2e:d7:75:f7:ee:
1a:a3:35:02:56:cf:ec:16:17:97:78:6f:11:72:1d:ae:c1:bd:
00:34:3c:ea:dd:87:c3:ec:52:38:92:cc:63:78:0e:ca:06:77:
cb:5b:8d:0e:97:fc:c2:45:58:c9:0e:0f:7c:9b:b2:84:e5:6e:
d1:d8:b1:7d:f8:8f:4b:be:a9:1d:92:65:48:e9:28:ca:43:f2:
7e:c3:33:90:f1:8e:cf:11:83:c0:ac:fc:06:57:43:61:cc:2a:
d2:f8:17:32:6b:97:68:e6:03:c8:6c:01:e7:93:37:a0:fb:57:
34:6b:52:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWZ2downZIRlMfqMN5xVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDU5N2I5NzNhZGExMDUyZjY1YjNlYTFkZTFlNDgyZTIz
ZjNkMmEwHhcNMjYwNzIzMTkwMDE5WhcNMjYwNzI0MTkwMDE5WjAzMTEwLwYDVQQD
EygyZGQyMDBjZTkxNzQzY2Y5MjAzMGMwZTFmNjJkYThlMTVkMDYyN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0QGjWY+ZPZ7ygzy9dlu0DWmexw9
XTsJxHN6YdkB5j9xj3hz/7knRqvo44Z2mMelVbEpFqLAgiDD0TeNokbHmpv1lTcK
+2rIZWmTThS6DrjbHVVEVvAmZN58eRrCnVD/UvpuBPCpww8Cw3PhyvZtO8plrgNM
NpHZyY57/4kBphVM+HYcPgk0NidkOlyDXiSvCN82eH8TQGhun1yeCElsI0I54SGv
VMNAm/FZ9CcHMte9/YIVUOXLWSZKY5GjwNRaBKPv+LDn0bLdfFng8WpcnJ3h9fZM
9h1ZyEJVF4G3vAr7RuirB3bM4GHR4k/f5cnLc6afJxX9pqLd2G+mwwu29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3SAM6RdDz5IDDA4fYtqOFdBifWMB8GA1UdIwQY
MBaAFNXVl7lzraEFL2Wz6h3h5ILiPz0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTIt
ZjI1OGY3ZDUwZDc1LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTItZjI1OGY3ZDUwZDc1
LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARddAbH1s
UnQ2kG5iadVzxOCq/JAGbBTXhCTCOoTTTh4KNT79fuEdIf+9J61rJuxKhbACMMTB
yzvdMO3Vj88OHAFOCcw5dsORvgaU40NrZp4I70CI3q9UvEbYJY4ZLV4tTuyioJQT
t1SbFV14yjgI8+h5G2Mi0eViXvwhBoAQLkUiEMjlPyKn3dwF9y7XdffuGqM1AlbP
7BYXl3hvEXIdrsG9ADQ86t2Hw+xSOJLMY3gOygZ3y1uNDpf8wkVYyQ4PfJuyhOVu
0dixffiPS76pHZJlSOkoykPyfsMzkPGOzxGDwKz8BldDYcwq0vgXMmuXaOYDyGwB
55M3oPtXNGtSCw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:23 2026 by rpki-client