Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: JANjh75EDG6vIoHp20h0sSt1yP0s73yNBzFmMJETBFI=
Subject key identifier: EC:5D:32:C6:C6:2E:38:06:96:AD:30:5B:FA:85:E8:A5:4F:5C:34:A2
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019F90236F4E97D88C4129BFAB47DF080FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 16F1
Signing time: Thu 23 Jul 2026 18:01:09 +0000
Manifest this update: Thu 23 Jul 2026 18:01:09 +0000
Manifest next update: Fri 24 Jul 2026 18:01:09 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: Y3/Hcjvt4/kiMfUdlHqjbUJEZqDc/r+F3fT8y72v2s4=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:6f:4e:97:d8:8c:41:29:bf:ab:47:df:08:0f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jul 23 18:01:09 2026 GMT
Not After : Jul 24 18:01:09 2026 GMT
Subject: CN=ec5d32c6c62e380696ad305bfa85e8a54f5c34a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:fe:73:23:48:58:f3:2f:f8:4b:b0:cf:e2:
25:0f:84:b3:fa:7f:60:ec:cd:65:02:c8:fc:7c:d9:
32:8d:9a:ba:f7:7f:1b:b1:37:ce:51:da:fe:87:c4:
72:7e:a4:44:07:f3:59:ed:bb:8b:2c:d3:6e:68:8e:
c9:65:66:fd:93:31:bf:7c:95:35:ba:87:61:32:69:
d6:d0:fe:29:9a:5b:55:aa:ba:40:39:ce:07:50:7c:
f4:db:e0:af:01:83:5d:c8:6f:bf:ac:90:0d:ce:bc:
8e:1a:4a:33:9f:e0:28:2f:fa:e7:e3:7f:3d:8a:49:
e9:4c:c0:52:e0:01:91:d2:e9:24:aa:b3:ac:6c:e3:
81:e6:2e:53:dd:2e:6e:ad:6a:91:16:67:00:d9:ae:
0c:ea:41:75:20:88:58:27:27:e6:87:95:4b:9b:2d:
9f:2b:26:11:e0:ca:60:5d:f5:bf:8a:c7:db:e1:2e:
0e:aa:a0:a3:16:b2:5b:20:d4:1f:fd:bb:ec:a0:d4:
80:49:95:90:31:32:c2:db:83:49:56:1f:e4:4c:8c:
a8:fa:25:cb:ab:91:0f:7f:78:81:9e:ea:81:8e:69:
84:78:ef:bb:b7:6e:40:27:e2:32:50:6e:13:c3:1f:
f9:6e:bf:e8:d3:b1:d0:73:43:6f:4e:11:2b:fe:53:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:32:C6:C6:2E:38:06:96:AD:30:5B:FA:85:E8:A5:4F:5C:34:A2
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4b:5a:37:38:bd:54:b0:26:3c:1c:db:ba:89:b7:9a:da:61:
6a:de:40:f2:ac:9e:4f:d8:23:df:3c:94:f3:e7:3a:f5:76:39:
36:2a:cf:a0:9a:d5:eb:c9:68:26:d2:f7:ff:9c:b0:ef:ac:95:
4a:0a:25:db:e1:e4:da:b4:c4:0f:9b:c3:59:0c:c9:8c:62:05:
fd:de:d6:23:65:6c:e4:f7:0e:07:38:cc:2e:9e:81:cd:b8:84:
58:ab:6e:a5:6c:fd:d1:61:e4:79:c7:d6:e7:4b:8d:44:51:aa:
6e:d9:cf:34:22:f1:4e:4e:5c:af:d1:74:96:82:6a:e4:be:a5:
79:65:9c:d6:9a:f0:4b:33:5b:e0:fa:fd:7e:9b:ea:9a:6c:ad:
05:8e:31:16:39:c8:ee:79:68:e0:c3:d0:51:66:18:d3:5c:06:
f5:b3:6e:0b:3e:f7:08:3c:e1:6c:1f:16:e0:f8:0b:b6:fc:82:
3f:a3:31:7d:3c:fc:67:1d:55:1f:a1:63:95:66:7b:6e:e7:d4:
2e:52:08:b8:18:8b:ba:29:37:ba:65:5f:cd:9c:8a:de:73:f2:
be:1e:10:c5:56:e5:fb:50:5d:43:6e:59:3d:9e:e9:95:ce:59:
bf:69:3e:92:0e:ba:db:51:23:49:55:09:48:be:a2:4a:88:23:
f6:27:2e:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QI29Ol9iMQSm/q0ffCA/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5
N2ZkMGMwHhcNMjYwNzIzMTgwMTA5WhcNMjYwNzI0MTgwMTA5WjAzMTEwLwYDVQQD
EyhlYzVkMzJjNmM2MmUzODA2OTZhZDMwNWJmYTg1ZThhNTRmNWMzNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTH+cyNIWPMv+Euwz+IlD4Sz+n9g
7M1lAsj8fNkyjZq6938bsTfOUdr+h8RyfqREB/NZ7buLLNNuaI7JZWb9kzG/fJU1
uodhMmnW0P4pmltVqrpAOc4HUHz02+CvAYNdyG+/rJANzryOGkozn+AoL/rn4389
iknpTMBS4AGR0ukkqrOsbOOB5i5T3S5urWqRFmcA2a4M6kF1IIhYJyfmh5VLmy2f
KyYR4MpgXfW/isfb4S4OqqCjFrJbINQf/bvsoNSASZWQMTLC24NJVh/kTIyo+iXL
q5EPf3iBnuqBjmmEeO+7t25AJ+IyUG4Twx/5br/o07HQc0NvThEr/lOIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxdMsbGLjgGlq0wW/qF6KVPXDSiMB8GA1UdIwQY
MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt
MjhiOWQyNjFlY2IxLzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix
LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0taNzi9
VLAmPBzbuom3mtphat5A8qyeT9gj3zyU8+c69XY5NirPoJrV68loJtL3/5yw76yV
Sgol2+Hk2rTED5vDWQzJjGIF/d7WI2Vs5PcOBzjMLp6BzbiEWKtupWz90WHkecfW
50uNRFGqbtnPNCLxTk5cr9F0loJq5L6leWWc1prwSzNb4Pr9fpvqmmytBY4xFjnI
7nlo4MPQUWYY01wG9bNuCz73CDzhbB8W4PgLtvyCP6MxfTz8Zx1VH6FjlWZ7bufU
LlIIuBiLuik3umVfzZyK3nPyvh4QxVbl+1BdQ25ZPZ7plc5Zv2k+kg6621EjSVUJ
SL6iSogj9icuYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:21 2026 by rpki-client