Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: VfIS3jRGsznQYRMlmAxx0c2Fd6hT9183mFIXDdue+jc=
Subject key identifier: 4F:C7:57:FD:F5:D0:3F:8E:1A:41:FA:BF:01:CD:0E:F7:FD:70:96:96
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019F9059B2399C4DFE03C005465FE5357261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 17EF
Signing time: Thu 23 Jul 2026 19:00:25 +0000
Manifest this update: Thu 23 Jul 2026 19:00:25 +0000
Manifest next update: Fri 24 Jul 2026 19:00:25 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: 0NUc9Ifls3z4FWgdD2nmEJsfimPXSp3j8rUhNQcO73Y=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b2:39:9c:4d:fe:03:c0:05:46:5f:e5:35:72:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jul 23 19:00:25 2026 GMT
Not After : Jul 24 19:00:25 2026 GMT
Subject: CN=4fc757fdf5d03f8e1a41fabf01cd0ef7fd709696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:9b:40:dc:d2:fd:9b:e6:0a:d3:53:46:cb:
32:d8:03:f3:67:42:fd:e2:ed:86:60:79:8d:3d:73:
94:4b:5a:21:e1:0e:15:be:70:6d:20:10:2c:77:25:
81:8e:c5:0b:73:11:66:cf:3e:be:52:32:cf:03:c6:
81:22:0a:29:1f:44:c0:ab:ce:06:bc:51:4d:ed:92:
0f:64:c0:22:ae:64:b9:94:60:9e:c3:20:6e:b3:3b:
bf:29:5e:f6:a7:dd:fa:d5:05:7c:ca:b8:d2:1e:d0:
9e:c4:f0:cd:54:99:c3:e3:2e:2c:2f:a0:af:e2:4d:
2a:5f:1d:2a:5f:27:81:8f:64:72:33:c3:6b:44:1d:
26:f5:b8:a0:90:1a:7e:87:ac:5e:bb:5e:0d:83:a6:
f5:03:c1:ec:47:97:0b:89:22:14:91:36:be:50:60:
18:8b:d5:3c:77:5c:5a:22:56:af:35:4a:af:5a:b6:
f7:82:2a:c8:a5:72:88:5a:fa:27:cf:96:71:35:5a:
5f:8e:d2:84:21:19:b2:fe:bf:46:82:e7:f5:c3:60:
8b:9a:56:28:f9:08:5b:bd:fc:ef:ea:81:e5:55:6a:
01:a4:ca:32:a5:ae:79:38:a4:da:d5:b0:52:ce:59:
ce:94:28:a5:cd:d0:c2:e3:de:d5:c1:f4:20:60:9a:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:57:FD:F5:D0:3F:8E:1A:41:FA:BF:01:CD:0E:F7:FD:70:96:96
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a1:c2:6a:28:ea:7c:0c:ef:e7:f8:4c:f0:00:6f:87:3c:bf:
49:63:e6:46:4f:bf:ab:7b:f8:fd:46:92:cf:63:a9:12:23:23:
26:5a:83:e3:61:dd:0a:46:4a:b6:29:dd:e6:8a:4e:dd:e6:7f:
45:48:5c:48:21:5c:32:36:25:86:2d:4d:d4:fb:1b:74:2e:4f:
a8:57:33:38:eb:af:4d:86:da:b1:57:97:32:a2:71:93:fb:18:
11:2c:3e:de:5d:18:3d:d2:94:44:cb:26:3a:a0:01:7f:c8:b1:
6e:49:36:bb:a7:ea:44:22:12:8b:e5:7c:00:a7:ba:5f:74:13:
31:e7:03:ae:48:c6:e0:f6:7a:ad:34:1e:05:51:a9:e7:4e:3b:
ab:dc:1f:db:1f:ad:61:9d:1e:56:82:e4:ec:c6:81:68:a8:2c:
89:c0:db:30:9d:11:83:47:57:9b:92:31:b9:c1:e3:3a:42:a0:
85:0b:c3:57:af:d2:5c:7d:e9:e8:88:0a:dc:d8:e0:65:91:b1:
32:c4:48:df:e6:95:a9:52:24:c1:2c:11:67:3d:06:05:b3:af:
bf:3d:af:30:91:81:31:13:a3:3c:30:1b:cf:b3:fb:a8:e5:27:
b8:a1:a7:31:04:3a:d8:25:7b:1c:f1:41:02:76:ff:ed:72:4a:
e1:79:b6:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWbI5nE3+A8AFRl/lNXJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODRlMGNlZTU3NWM2MTkwNTNmOGVlMmIxMDA0Y2M0NDJm
ZDJjZWQwHhcNMjYwNzIzMTkwMDI1WhcNMjYwNzI0MTkwMDI1WjAzMTEwLwYDVQQD
Eyg0ZmM3NTdmZGY1ZDAzZjhlMWE0MWZhYmYwMWNkMGVmN2ZkNzA5Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR6bQNzS/ZvmCtNTRssy2APzZ0L9
4u2GYHmNPXOUS1oh4Q4VvnBtIBAsdyWBjsULcxFmzz6+UjLPA8aBIgopH0TAq84G
vFFN7ZIPZMAirmS5lGCewyBuszu/KV72p9361QV8yrjSHtCexPDNVJnD4y4sL6Cv
4k0qXx0qXyeBj2RyM8NrRB0m9bigkBp+h6xeu14Ng6b1A8HsR5cLiSIUkTa+UGAY
i9U8d1xaIlavNUqvWrb3girIpXKIWvonz5ZxNVpfjtKEIRmy/r9Gguf1w2CLmlYo
+Qhbvfzv6oHlVWoBpMoypa55OKTa1bBSzlnOlCilzdDC497VwfQgYJo+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/HV/310D+OGkH6vwHNDvf9cJaWMB8GA1UdIwQY
MBaAFNSE4M7ldcYZBT+O4rEATMRC/SztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEt
ZWMwMjYyYWIzM2YxLzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEtZWMwMjYyYWIzM2Yx
LzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKHCaijq
fAzv5/hM8ABvhzy/SWPmRk+/q3v4/UaSz2OpEiMjJlqD42HdCkZKtind5opO3eZ/
RUhcSCFcMjYlhi1N1PsbdC5PqFczOOuvTYbasVeXMqJxk/sYESw+3l0YPdKURMsm
OqABf8ixbkk2u6fqRCISi+V8AKe6X3QTMecDrkjG4PZ6rTQeBVGp5047q9wf2x+t
YZ0eVoLk7MaBaKgsicDbMJ0Rg0dXm5IxucHjOkKghQvDV6/SXH3p6IgK3NjgZZGx
MsRI3+aVqVIkwSwRZz0GBbOvvz2vMJGBMROjPDAbz7P7qOUnuKGnMQQ62CV7HPFB
Anb/7XJK4Xm2bA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:56 2026 by rpki-client