Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: cRnZB4vAjMhaUx2txhRiMxsYb+ZHXTUmBFOTOLIiOws=
Subject key identifier: ED:53:95:A6:48:D8:25:39:8B:69:9F:A0:7C:D1:C5:17:47:51:08:F4
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019F8FB519D390C9A1BE6C8940C046D44E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 0651
Signing time: Thu 23 Jul 2026 16:00:38 +0000
Manifest this update: Thu 23 Jul 2026 16:00:38 +0000
Manifest next update: Fri 24 Jul 2026 16:00:38 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: lL5Fww0TzTMqUji6R9lToUQ4BD39WrUBt0gSaRtZGi0=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:19:d3:90:c9:a1:be:6c:89:40:c0:46:d4:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Jul 23 16:00:38 2026 GMT
Not After : Jul 24 16:00:38 2026 GMT
Subject: CN=ed5395a648d825398b699fa07cd1c517475108f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:c3:39:95:0d:8f:82:2b:d5:2c:b5:15:2f:
e3:c2:ef:88:07:05:85:5c:a0:a7:f8:14:4d:dd:1d:
ab:43:01:1e:62:ea:4a:cb:6a:ce:91:67:24:1a:dc:
c2:29:69:8d:19:ba:be:a5:29:cb:ba:c8:e0:d2:6e:
86:ea:da:38:65:36:81:25:5e:46:27:9a:57:23:94:
d0:9e:25:4e:5f:83:dd:a6:0b:eb:e4:51:9c:32:ef:
5e:82:59:93:25:2f:b7:e9:73:e7:43:4b:9e:ce:f6:
b6:ef:a6:d2:9d:27:1c:6a:1d:d4:b7:0b:bb:04:c3:
20:69:d3:e9:35:83:33:8a:a4:1a:a9:41:34:a2:01:
bb:cd:d3:10:19:07:25:a2:40:8b:cc:4a:4c:fe:95:
33:1f:f8:14:9e:bb:a5:19:6d:71:94:37:b0:43:6c:
84:7b:51:51:11:51:09:21:79:e7:79:32:d0:5c:64:
fc:66:39:9f:19:68:90:e0:90:07:b4:9e:48:63:ab:
14:b2:bf:3a:c2:4d:4b:52:6f:76:59:8a:cf:1f:1f:
69:1f:3d:2a:d2:d9:4a:03:de:1a:58:78:2a:c1:9e:
86:bf:31:2c:af:95:0b:b7:33:e7:fd:1f:63:75:e4:
96:74:f6:26:61:1e:60:26:e1:16:8d:b5:9f:b1:62:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:53:95:A6:48:D8:25:39:8B:69:9F:A0:7C:D1:C5:17:47:51:08:F4
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4e:be:47:e2:cd:55:10:b2:31:9e:ad:6e:e6:6d:6f:66:db:
7e:f3:96:14:45:f0:80:10:b3:24:a7:ca:07:4e:55:46:b0:3c:
a7:dd:42:4a:0a:be:17:2c:10:05:af:ba:56:f0:6c:13:15:31:
f8:94:b6:e3:f5:82:b8:70:0b:00:95:98:a5:dd:c0:b9:96:c6:
90:f9:ff:eb:63:28:da:12:78:51:50:0b:dc:de:50:a0:3d:e6:
a8:39:96:fc:65:f2:a3:b7:2e:6c:8e:12:cb:e2:bd:c5:59:ff:
da:b0:be:90:80:bf:f3:94:7f:11:24:6e:33:dd:e5:07:54:08:
e8:4e:09:67:26:c4:17:c1:e2:d8:fd:5a:43:a1:6c:74:eb:b4:
58:4c:32:42:a0:77:2e:47:14:02:38:9f:f8:7e:ff:63:a2:6a:
b2:3b:a6:fa:71:c1:68:e9:0f:9c:65:c1:63:85:fb:bc:07:3c:
3d:28:6a:28:15:cf:44:d5:39:9b:eb:da:42:22:00:e0:03:92:
3a:d2:6c:84:05:31:3b:47:25:37:b7:2c:c0:07:4f:6b:ce:66:
4c:39:30:f8:b2:34:b5:02:fc:c8:35:45:ab:27:49:34:a4:31:
f8:91:97:02:e4:0b:83:e2:f3:d0:f7:d9:b8:7a:b8:b0:42:99:
81:0b:40:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtRnTkMmhvmyJQMBG1E5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4
MzkwOTcwHhcNMjYwNzIzMTYwMDM4WhcNMjYwNzI0MTYwMDM4WjAzMTEwLwYDVQQD
EyhlZDUzOTVhNjQ4ZDgyNTM5OGI2OTlmYTA3Y2QxYzUxNzQ3NTEwOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/DOZUNj4Ir1Sy1FS/jwu+IBwWF
XKCn+BRN3R2rQwEeYupKy2rOkWckGtzCKWmNGbq+pSnLusjg0m6G6to4ZTaBJV5G
J5pXI5TQniVOX4Pdpgvr5FGcMu9eglmTJS+36XPnQ0uezva276bSnSccah3Utwu7
BMMgadPpNYMziqQaqUE0ogG7zdMQGQclokCLzEpM/pUzH/gUnrulGW1xlDewQ2yE
e1FREVEJIXnneTLQXGT8ZjmfGWiQ4JAHtJ5IY6sUsr86wk1LUm92WYrPHx9pHz0q
0tlKA94aWHgqwZ6GvzEsr5ULtzPn/R9jdeSWdPYmYR5gJuEWjbWfsWIUTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1TlaZI2CU5i2mfoHzRxRdHUQj0MB8GA1UdIwQY
MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt
Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm
LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU6+R+LN
VRCyMZ6tbuZtb2bbfvOWFEXwgBCzJKfKB05VRrA8p91CSgq+FywQBa+6VvBsExUx
+JS24/WCuHALAJWYpd3AuZbGkPn/62Mo2hJ4UVAL3N5QoD3mqDmW/GXyo7cubI4S
y+K9xVn/2rC+kIC/85R/ESRuM93lB1QI6E4JZybEF8Hi2P1aQ6FsdOu0WEwyQqB3
LkcUAjif+H7/Y6Jqsjum+nHBaOkPnGXBY4X7vAc8PShqKBXPRNU5m+vaQiIA4AOS
OtJshAUxO0clN7cswAdPa85mTDkw+LI0tQL8yDVFqydJNKQx+JGXAuQLg+Lz0PfZ
uHq4sEKZgQtAdg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:34 2026 by rpki-client