Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: EilT0EvCJ0vm2cqQ8vPEnqZUA2ftbca116Q50Di87zA=
Subject key identifier: 97:22:AE:5D:F8:98:1D:0E:D5:8E:8E:6C:03:25:06:E2:BD:4A:20:94
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 019F9135504191E9686BDDFE7B9D18414B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 0328
Signing time: Thu 23 Jul 2026 23:00:17 +0000
Manifest this update: Thu 23 Jul 2026 23:00:17 +0000
Manifest next update: Fri 24 Jul 2026 23:00:17 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: UAJrctK630QZpmmAfiODC/QQ6APwaH63pDGOz9PxBLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:50:41:91:e9:68:6b:dd:fe:7b:9d:18:41:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Jul 23 23:00:17 2026 GMT
Not After : Jul 24 23:00:17 2026 GMT
Subject: CN=9722ae5df8981d0ed58e8e6c032506e2bd4a2094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:0f:02:58:27:c1:6b:96:21:8d:86:76:34:
67:e2:82:75:ac:b4:f3:4a:60:9f:fa:06:89:b6:a4:
e8:bd:b8:8b:26:ec:1a:84:df:f2:2e:b8:1f:e7:60:
25:6f:9a:e7:62:f5:f4:b5:59:52:0b:6e:e2:cf:6b:
d7:f9:00:70:dc:2a:85:ee:82:8a:8f:eb:1d:f2:e6:
db:cb:77:05:7b:0d:9e:7b:94:8a:39:48:79:7e:90:
c4:e8:0b:4c:db:df:ed:45:42:a9:44:4a:85:39:db:
a3:e0:16:46:5d:88:45:7d:a0:b8:31:a8:15:78:de:
00:0b:08:70:3b:c1:a9:21:2e:0a:18:70:80:c2:98:
87:fe:c4:16:b9:50:08:55:05:75:19:c5:99:5b:52:
7e:46:70:77:56:51:12:63:8f:9a:8b:f8:93:4d:23:
f1:7b:53:ef:d4:ca:61:0c:e9:e5:ce:df:1a:a3:76:
aa:27:aa:92:f4:31:27:a1:78:19:ee:c2:72:de:32:
61:9d:42:8d:9a:d7:e7:db:6e:a9:ca:3e:cb:87:fe:
3c:55:95:8e:7b:b2:0f:3e:ed:49:04:5b:f9:b3:0d:
4f:f3:4b:fa:fb:fd:a1:2b:54:42:cf:01:0d:12:8d:
f0:4a:a5:3f:a5:1a:ea:3e:f8:cc:ff:a5:a6:eb:82:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:22:AE:5D:F8:98:1D:0E:D5:8E:8E:6C:03:25:06:E2:BD:4A:20:94
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:43:e7:20:da:99:d9:05:ca:c3:d7:3e:b2:ef:82:87:12:c6:
93:64:42:a8:77:8a:e4:41:89:10:92:42:d0:14:e9:5c:2d:1d:
5d:46:35:ce:63:44:22:f9:79:0e:49:b5:47:ff:9c:d6:30:5a:
1a:ea:62:b4:4b:32:8e:a5:37:e4:84:98:7d:bd:41:58:61:eb:
f8:35:22:89:e4:4e:c3:46:52:72:7c:43:d2:f8:d0:7d:3f:1c:
c2:ae:97:f9:97:5d:aa:f9:33:85:f8:8a:81:de:34:50:3e:82:
d0:42:c0:01:f3:36:b0:9d:cf:cd:41:e6:ed:6d:99:03:06:4a:
68:36:41:bd:a5:30:62:cc:54:9c:ae:da:28:56:b3:ff:a9:fa:
f6:ba:6f:8e:f9:6a:88:ec:91:39:9e:22:65:3c:51:e6:18:33:
15:25:09:5b:8b:4d:55:3b:5d:27:c7:60:f4:25:50:bc:55:92:
b8:66:5c:95:5b:cd:21:8b:c9:ba:a0:99:d3:4f:20:69:0e:9c:
19:35:c4:61:13:c4:d6:20:12:13:e4:6b:9b:90:61:c8:be:09:
ea:29:c5:bf:a5:54:1e:df:60:aa:18:27:bd:39:96:84:6b:bb:
30:33:e4:b7:f2:e2:24:16:31:62:9c:30:20:db:9d:b8:e3:37:
4b:5d:a1:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNVBBkeloa93+e50YQUueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2VmY2EwYzZjZDk0NzZkMzMwMTU2MDM4NzJkMjYxYmYy
YjM1MzYwHhcNMjYwNzIzMjMwMDE3WhcNMjYwNzI0MjMwMDE3WjAzMTEwLwYDVQQD
Eyg5NzIyYWU1ZGY4OTgxZDBlZDU4ZThlNmMwMzI1MDZlMmJkNGEyMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj4PAlgnwWuWIY2GdjRn4oJ1rLTz
SmCf+gaJtqTovbiLJuwahN/yLrgf52Alb5rnYvX0tVlSC27iz2vX+QBw3CqF7oKK
j+sd8ubby3cFew2ee5SKOUh5fpDE6AtM29/tRUKpREqFOduj4BZGXYhFfaC4MagV
eN4ACwhwO8GpIS4KGHCAwpiH/sQWuVAIVQV1GcWZW1J+RnB3VlESY4+ai/iTTSPx
e1Pv1MphDOnlzt8ao3aqJ6qS9DEnoXgZ7sJy3jJhnUKNmtfn226pyj7Lh/48VZWO
e7IPPu1JBFv5sw1P80v6+/2hK1RCzwENEo3wSqU/pRrqPvjM/6Wm64JYYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcirl34mB0O1Y6ObAMlBuK9SiCUMB8GA1UdIwQY
MBaAFNbO/KDGzZR20zAVYDhy0mG/KzU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjIt
NjYwOGI2MWE5YWFhLzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjItNjYwOGI2MWE5YWFh
LzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUPnINqZ
2QXKw9c+su+ChxLGk2RCqHeK5EGJEJJC0BTpXC0dXUY1zmNEIvl5Dkm1R/+c1jBa
GupitEsyjqU35ISYfb1BWGHr+DUiieROw0ZScnxD0vjQfT8cwq6X+ZddqvkzhfiK
gd40UD6C0ELAAfM2sJ3PzUHm7W2ZAwZKaDZBvaUwYsxUnK7aKFaz/6n69rpvjvlq
iOyROZ4iZTxR5hgzFSUJW4tNVTtdJ8dg9CVQvFWSuGZclVvNIYvJuqCZ008gaQ6c
GTXEYRPE1iASE+Rrm5BhyL4J6inFv6VUHt9gqhgnvTmWhGu7MDPkt/LiJBYxYpww
INuduOM3S12h+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:58 2026 by rpki-client