Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: 1zD7VT9ssGwMYD6EVQbBfvYKBTa0AP+2WPhzdY4p0qk=
Subject key identifier: 33:E3:AD:77:95:D3:68:2D:BF:D2:D6:48:D9:75:3B:12:96:9C:0B:98
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019F921193BA00EEBFF9753F4C29E6EF00AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 03D2
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: dwvZNvtRo0hcqxfbK0Y1jAZJW7Ri6K+ImtoWyBg1GrQ=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:93:ba:00:ee:bf:f9:75:3f:4c:29:e6:ef:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=33e3ad7795d3682dbfd2d648d9753b12969c0b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:38:52:43:b6:41:3b:97:33:56:c8:08:88:
c4:0a:da:ea:f7:6a:25:8f:8f:c3:e8:77:3c:c1:6a:
88:16:e8:96:bd:e7:a7:b6:c2:81:b0:7c:65:14:a8:
2e:ea:34:92:0e:32:c2:41:2d:0f:44:d3:f4:2a:12:
56:e8:37:14:32:f7:25:87:de:cf:52:f2:6a:5f:b4:
98:fa:8a:ab:45:2c:f3:35:14:5a:8c:56:12:d2:3b:
3b:47:04:5c:cc:65:5a:2c:25:ea:a6:95:c8:ce:cb:
ce:6c:1e:db:43:4d:21:57:77:c8:27:9e:10:72:da:
de:b7:14:ee:44:73:94:a2:19:bb:ec:ae:f8:6d:96:
1b:f3:fa:73:cc:27:b9:ed:8a:09:22:7b:76:ed:01:
eb:b9:31:dc:8b:cd:38:26:fe:52:97:10:e4:ff:61:
d7:ec:f8:75:a2:02:78:bc:af:1b:71:2a:74:12:91:
98:05:17:22:87:d4:ec:de:6f:cc:ef:19:45:da:72:
4e:7a:29:b7:68:5a:ff:20:b7:56:ed:54:56:ff:9e:
e5:b0:c7:43:61:1d:10:f2:94:0c:cf:0f:f5:39:8c:
78:44:5a:e8:e4:7b:2d:a1:d8:d5:af:0c:d9:a3:5c:
25:55:ca:76:44:a0:b7:44:b7:ae:28:08:93:7a:98:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:AD:77:95:D3:68:2D:BF:D2:D6:48:D9:75:3B:12:96:9C:0B:98
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f7:ae:d3:9d:8a:12:6a:93:82:57:83:96:2e:30:43:2a:30:
01:46:b7:4b:d4:ac:7d:3d:39:c3:f2:27:cf:36:1d:85:da:15:
24:36:d8:a7:58:2a:61:42:0c:fd:0d:7b:1b:a5:cc:60:c1:17:
4c:5e:d0:de:ef:d3:4b:ae:f9:89:c4:15:ca:f7:b9:5b:9f:31:
9d:58:43:27:5a:6a:c2:8c:6c:01:d1:83:69:0a:38:e3:9f:17:
8c:00:7d:aa:46:f0:ea:83:8a:87:b9:3b:9f:e9:df:99:0a:36:
05:c7:6d:25:ca:e8:fc:07:78:27:02:81:4f:05:fc:ea:a7:75:
8f:c2:8c:74:0c:a1:07:9e:3f:41:8c:c0:bd:ab:8f:b5:23:be:
39:69:e6:a3:89:34:99:1f:bb:b4:68:25:0e:6d:e3:ba:0e:cb:
0c:dc:69:7f:37:10:64:43:58:9b:d1:12:a7:d9:1b:3f:f1:60:
09:7a:4d:9e:5b:28:cf:af:e2:18:4f:ac:8b:83:8d:28:65:dd:
79:c5:38:b8:36:62:06:34:ca:9d:79:aa:11:2d:70:e2:47:c7:
d6:d1:73:0a:9a:ba:e9:37:a7:ab:22:20:e2:28:68:14:d5:8f:
a8:e7:81:81:85:2f:12:2a:7a:88:00:95:a6:0f:cb:cd:72:76:
85:c9:36:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZO6AO6/+XU/TCnm7wCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzAwMzQxMDRmMWJmNjU4MTQ0YjRhYTQ1YjQxYTNmNTc3
OWRjMGYwHhcNMjYwNzI0MDMwMDUzWhcNMjYwNzI1MDMwMDUzWjAzMTEwLwYDVQQD
EygzM2UzYWQ3Nzk1ZDM2ODJkYmZkMmQ2NDhkOTc1M2IxMjk2OWMwYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5E4UkO2QTuXM1bICIjECtrq92ol
j4/D6Hc8wWqIFuiWveentsKBsHxlFKgu6jSSDjLCQS0PRNP0KhJW6DcUMvclh97P
UvJqX7SY+oqrRSzzNRRajFYS0js7RwRczGVaLCXqppXIzsvObB7bQ00hV3fIJ54Q
ctretxTuRHOUohm77K74bZYb8/pzzCe57YoJInt27QHruTHci804Jv5SlxDk/2HX
7Ph1ogJ4vK8bcSp0EpGYBRcih9Ts3m/M7xlF2nJOeim3aFr/ILdW7VRW/57lsMdD
YR0Q8pQMzw/1OYx4RFro5HstodjVrwzZo1wlVcp2RKC3RLeuKAiTepjRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPjrXeV02gtv9LWSNl1OxKWnAuYMB8GA1UdIwQY
MBaAFNZwA0EE8b9lgUS0qkW0Gj9XedwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQt
ZjkxNzJjY2JjNWFmLzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQtZjkxNzJjY2JjNWFm
LzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKveu052K
EmqTgleDli4wQyowAUa3S9SsfT05w/InzzYdhdoVJDbYp1gqYUIM/Q17G6XMYMEX
TF7Q3u/TS675icQVyve5W58xnVhDJ1pqwoxsAdGDaQo4458XjAB9qkbw6oOKh7k7
n+nfmQo2BcdtJcro/Ad4JwKBTwX86qd1j8KMdAyhB54/QYzAvauPtSO+OWnmo4k0
mR+7tGglDm3jug7LDNxpfzcQZENYm9ESp9kbP/FgCXpNnlsoz6/iGE+si4ONKGXd
ecU4uDZiBjTKnXmqES1w4kfH1tFzCpq66TenqyIg4ihoFNWPqOeBgYUvEip6iACV
pg/LzXJ2hck2Sg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:14 2026 by rpki-client