Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: CGRf+hKAHpXyxNC216Pe+aFHWx+fvS+BplKrp0u5J54=
Subject key identifier: 0D:FB:62:83:63:8B:44:C1:F1:EC:3A:A9:57:4D:BC:1C:EB:E1:22:B6
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 019F916CECEBCAC9CC414AE17FEC7E0DF83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 178B
Signing time: Fri 24 Jul 2026 00:01:02 +0000
Manifest this update: Fri 24 Jul 2026 00:01:02 +0000
Manifest next update: Sat 25 Jul 2026 00:01:02 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: iPs4TX/X6HmOtr8AqHOuqhVe+MKU79Bvnn4nUsP3Ofo=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ec:eb:ca:c9:cc:41:4a:e1:7f:ec:7e:0d:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jul 24 00:01:02 2026 GMT
Not After : Jul 25 00:01:02 2026 GMT
Subject: CN=0dfb6283638b44c1f1ec3aa9574dbc1cebe122b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:9e:0c:2c:09:60:5d:71:38:b9:f3:8b:5f:
d1:76:b6:99:c2:22:d9:d7:83:b7:41:cf:0e:c5:21:
b4:a9:a3:05:dd:f0:68:09:8d:e9:f6:50:bf:0f:87:
4d:32:58:d4:3b:8a:b6:55:2f:86:c4:6d:34:b4:bf:
5a:2d:15:76:6d:a1:b3:b2:f7:48:96:58:f0:6f:de:
71:1d:e4:e3:38:6b:6e:35:3c:bf:50:fd:0c:12:86:
c3:42:74:c8:9b:c5:08:73:d5:fc:6f:8b:b3:0f:64:
3c:ac:18:00:70:27:ff:b8:1d:09:38:2b:e7:e6:11:
6f:8e:31:72:ce:37:e2:44:bf:d1:de:56:31:cd:61:
a0:82:2d:c2:8e:5b:90:9b:92:49:9e:71:8c:db:f9:
68:d2:a3:20:cc:7c:48:bc:1f:64:10:ab:cd:3c:2e:
bd:6c:0b:29:0c:8f:b0:94:a8:cf:7b:b4:4e:92:39:
bf:61:b1:a2:87:66:91:41:21:4f:3d:c6:61:f2:47:
21:e0:3e:a8:32:a1:d8:cb:b2:da:6d:c7:e1:a4:fa:
91:68:cb:14:f2:be:1e:21:3f:b2:67:e2:2b:53:e5:
9a:de:85:ac:34:4c:6e:49:8e:8e:10:01:b7:8a:42:
65:a9:2e:2b:d0:89:97:b1:e0:a1:d0:00:a0:74:a6:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:62:83:63:8B:44:C1:F1:EC:3A:A9:57:4D:BC:1C:EB:E1:22:B6
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0b:48:d4:5d:f9:89:87:2e:2f:db:d0:9b:be:00:8a:4c:14:
03:f9:5e:b2:bc:7f:e5:ea:73:14:fa:a6:38:7e:be:73:11:69:
c3:9f:ce:74:23:30:54:2f:62:20:8e:ec:c0:37:46:56:56:9d:
6b:dc:6b:8e:4d:6c:98:1d:92:c7:dc:f6:0d:8c:92:7d:8f:cb:
fa:3f:56:89:b2:aa:fd:1f:a3:8c:4b:b1:60:9a:f3:ea:d6:41:
c5:a6:86:e9:cf:bb:27:c6:a9:e7:9a:a0:59:af:08:99:e6:72:
02:b4:16:d4:fc:a1:63:2e:f9:92:ad:39:df:e9:3d:74:33:56:
18:12:e0:cc:69:b4:2c:e6:5c:06:da:88:85:85:8c:51:eb:2d:
27:a6:2f:36:b6:40:ea:65:69:53:7b:76:8f:99:2e:1f:70:31:
67:7c:17:d2:93:3b:9c:e5:16:d3:93:66:34:2b:cc:33:ca:74:
e8:21:c0:85:2e:3c:e5:57:cd:90:41:92:9d:ea:9a:78:63:8c:
62:fb:ed:7a:d5:f0:e6:16:3c:cd:42:a4:43:fc:3f:8f:fa:2d:
3e:2c:c6:63:19:fe:69:b3:2a:d8:1f:6a:be:3f:6e:a1:74:ee:
34:16:1c:5c:82:60:ee:38:ce:fd:ca:03:26:f9:19:41:eb:51:
de:6e:3c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbOzrysnMQUrhf+x+Dfg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjYwNzI0MDAwMTAyWhcNMjYwNzI1MDAwMTAyWjAzMTEwLwYDVQQD
EygwZGZiNjI4MzYzOGI0NGMxZjFlYzNhYTk1NzRkYmMxY2ViZTEyMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fKeDCwJYF1xOLnzi1/RdraZwiLZ
14O3Qc8OxSG0qaMF3fBoCY3p9lC/D4dNMljUO4q2VS+GxG00tL9aLRV2baGzsvdI
lljwb95xHeTjOGtuNTy/UP0MEobDQnTIm8UIc9X8b4uzD2Q8rBgAcCf/uB0JOCvn
5hFvjjFyzjfiRL/R3lYxzWGggi3CjluQm5JJnnGM2/lo0qMgzHxIvB9kEKvNPC69
bAspDI+wlKjPe7ROkjm/YbGih2aRQSFPPcZh8kch4D6oMqHYy7LabcfhpPqRaMsU
8r4eIT+yZ+IrU+Wa3oWsNExuSY6OEAG3ikJlqS4r0ImXseCh0ACgdKZwgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA37YoNji0TB8ew6qVdNvBzr4SK2MB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngtI1F35
iYcuL9vQm74AikwUA/lesrx/5epzFPqmOH6+cxFpw5/OdCMwVC9iII7swDdGVlad
a9xrjk1smB2Sx9z2DYySfY/L+j9WibKq/R+jjEuxYJrz6tZBxaaG6c+7J8ap55qg
Wa8ImeZyArQW1PyhYy75kq053+k9dDNWGBLgzGm0LOZcBtqIhYWMUestJ6YvNrZA
6mVpU3t2j5kuH3AxZ3wX0pM7nOUW05NmNCvMM8p06CHAhS485VfNkEGSneqaeGOM
YvvtetXw5hY8zUKkQ/w/j/otPizGYxn+abMq2B9qvj9uoXTuNBYcXIJg7jjO/coD
JvkZQetR3m48XA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:49 2026 by rpki-client