Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: 9jjOPUJgh4p4r1yYwB+IplMBuwOwgldmn3tX+MglsVc=
Subject key identifier: 88:8E:3D:8B:DB:30:E4:5F:6B:24:93:A9:BD:45:5B:4B:49:81:41:17
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019F91DAF54AD63765C664EBDDC59E6EA549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0C15
Signing time: Fri 24 Jul 2026 02:01:13 +0000
Manifest this update: Fri 24 Jul 2026 02:01:13 +0000
Manifest next update: Sat 25 Jul 2026 02:01:13 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: R3yM2XYc0rtpaByOdk3khVJ4+57sfMdLAwcNYTH+TRE=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:f5:4a:d6:37:65:c6:64:eb:dd:c5:9e:6e:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Jul 24 02:01:13 2026 GMT
Not After : Jul 25 02:01:13 2026 GMT
Subject: CN=888e3d8bdb30e45f6b2493a9bd455b4b49814117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:79:34:6f:64:9c:ae:68:73:4e:0a:bd:b9:
99:f9:7a:b5:c1:ae:9f:11:70:88:15:dd:b1:50:07:
e8:76:de:3e:95:72:b8:6e:de:43:03:62:51:e8:75:
0d:f6:f8:96:84:5e:23:d6:f2:7d:22:b6:eb:d8:2b:
de:69:4c:a6:6f:aa:28:75:3a:3a:68:55:2b:ad:92:
ba:a3:24:2f:6f:fe:91:68:ea:6f:9b:2f:bb:97:7e:
0e:fe:5e:8d:fd:0f:09:6d:63:f4:7e:54:54:14:20:
2c:fc:8d:70:7d:70:8d:e5:f3:d6:cb:fc:19:67:a9:
5a:12:12:6a:46:92:3b:f5:e9:dc:17:71:12:f5:ad:
f7:c5:07:fa:e8:00:9d:5f:49:be:38:ae:17:0e:36:
20:e2:30:00:95:d2:0a:96:0e:a3:57:3e:aa:bd:ca:
75:21:fa:2c:c0:7b:fc:71:d9:33:20:03:d4:f7:b0:
a9:62:4d:d7:1a:b2:38:37:b4:7b:ab:00:60:08:23:
76:f2:2f:b1:db:e7:8e:f5:aa:c0:b8:c6:42:09:09:
ca:21:b8:d0:5a:47:54:8c:c5:12:fd:08:25:e3:60:
fc:c2:80:13:3c:6c:3a:8c:24:3a:61:76:99:ea:9e:
ad:e7:67:af:0c:52:bf:60:4a:2c:22:2c:8a:b9:d3:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:3D:8B:DB:30:E4:5F:6B:24:93:A9:BD:45:5B:4B:49:81:41:17
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:31:77:60:81:e1:3e:28:96:1f:9a:03:08:da:c5:19:ad:ac:
7e:5c:47:f9:82:77:61:c7:df:e4:ca:de:2b:2e:c5:00:04:4f:
ca:26:9a:c9:db:18:a8:ec:32:e3:a1:27:4c:42:23:34:79:4b:
09:46:2f:d8:d4:30:29:5f:7e:c5:22:63:d8:3e:e4:83:b4:4b:
65:e5:8d:1d:8c:9d:75:18:6d:07:13:7c:2a:33:de:09:9e:dc:
a1:66:b7:f8:3f:d1:b5:69:f3:55:31:0f:c1:88:13:c0:f3:97:
0c:77:f6:41:e7:a7:47:26:4f:cd:88:7b:38:35:dc:7b:58:12:
12:1c:69:6b:07:aa:03:87:55:57:7d:7e:23:ea:a0:2e:f4:b3:
ff:97:0a:6e:ee:b0:d4:a0:42:fc:84:a0:b9:d9:25:45:23:c0:
58:c5:be:43:5d:3b:b6:d1:56:e7:82:3a:8f:62:e9:00:e6:67:
54:4e:3a:74:f3:e1:29:6a:00:e4:45:18:90:73:43:d3:2f:92:
67:55:03:77:fb:ba:7d:ba:36:4d:31:a6:c8:b6:02:46:84:4e:
55:21:67:79:bd:7e:13:73:76:38:c1:32:b1:ce:95:c0:69:7c:
fd:4e:34:16:76:b1:d4:c4:c2:d5:da:9e:1c:00:aa:0c:67:cd:
07:9e:ad:d0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+R2vVK1jdlxmTr3cWebqVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjYwNzI0MDIwMTEzWhcNMjYwNzI1MDIwMTEzWjAzMTEwLwYDVQQD
Eyg4ODhlM2Q4YmRiMzBlNDVmNmIyNDkzYTliZDQ1NWI0YjQ5ODE0MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp55NG9knK5oc04KvbmZ+Xq1wa6f
EXCIFd2xUAfodt4+lXK4bt5DA2JR6HUN9viWhF4j1vJ9Irbr2CveaUymb6oodTo6
aFUrrZK6oyQvb/6RaOpvmy+7l34O/l6N/Q8JbWP0flRUFCAs/I1wfXCN5fPWy/wZ
Z6laEhJqRpI79encF3ES9a33xQf66ACdX0m+OK4XDjYg4jAAldIKlg6jVz6qvcp1
IfoswHv8cdkzIAPU97CpYk3XGrI4N7R7qwBgCCN28i+x2+eO9arAuMZCCQnKIbjQ
WkdUjMUS/Qgl42D8woATPGw6jCQ6YXaZ6p6t52evDFK/YEosIiyKudMhcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIiOPYvbMORfaySTqb1FW0tJgUEXMB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk
YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjF3
YIHhPiiWH5oDCNrFGa2sflxH+YJ3Ycff5MreKy7FAARPyiaaydsYqOwy46EnTEIj
NHlLCUYv2NQwKV9+xSJj2D7kg7RLZeWNHYyddRhtBxN8KjPeCZ7coWa3+D/RtWnz
VTEPwYgTwPOXDHf2QeenRyZPzYh7ODXce1gSEhxpaweqA4dVV31+I+qgLvSz/5cK
bu6w1KBC/ISgudklRSPAWMW+Q107ttFW54I6j2LpAOZnVE46dPPhKWoA5EUYkHND
0y+SZ1UDd/u6fbo2TTGmyLYCRoROVSFneb1+E3N2OMEysc6VwGl8/U40Fnax1MTC
1dqeHACqDGfNB56t0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:38 2026 by rpki-client