Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
File: 1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft (raw, json)
Hash identifier: PXidjYdNuxaV11O03OzSSiWAZ3G0E3j43tLYjKLmEuQ=
Subject key identifier: 99:22:A5:6B:CB:89:AE:19:97:19:0A:C3:48:4F:56:AA:A8:61:A4:E9
Authority key identifier: FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
Certificate issuer: /CN=fb2445f9eaca2080e657470405090cccec718518
Certificate serial: 019F8F4772CEF709E63A37077B5747CFDC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
Manifest number: B1
Signing time: Thu 23 Jul 2026 14:00:52 +0000
Manifest this update: Thu 23 Jul 2026 14:00:52 +0000
Manifest next update: Fri 24 Jul 2026 14:00:52 +0000
Files and hashes: 1: 1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl (hash: p6/tYgLjmiNUoThRbPJ0H7e6pGzuavko2JJ3hu0yu50=)
2: x97mdtKpGTOO1cukgJmsPeM4jMg.roa (hash: P9iY2nb7fkn1P2NTqzyagvrr9TTLD7Tmn6hSWIxyZHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:72:ce:f7:09:e6:3a:37:07:7b:57:47:cf:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2445f9eaca2080e657470405090cccec718518
Validity
Not Before: Jul 23 14:00:52 2026 GMT
Not After : Jul 24 14:00:52 2026 GMT
Subject: CN=9922a56bcb89ae1997190ac3484f56aaa861a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:a0:67:0f:20:11:6a:0b:8e:2a:8a:c4:c7:
ed:ff:b1:16:b0:a4:1e:c9:0c:6a:3c:c2:19:e2:0a:
2d:8f:49:68:08:13:5f:bc:40:03:67:4d:d1:93:ae:
da:91:8f:06:c0:49:fb:d8:d2:52:b2:63:77:49:2f:
4e:ab:fb:a5:28:d6:69:a2:6c:57:c5:67:d8:bf:80:
01:2d:1b:60:ee:ed:94:63:40:51:6c:fd:d3:18:b7:
93:6d:7d:3f:0f:7b:14:5b:1c:5f:9e:4e:92:ff:75:
89:cd:aa:67:a7:9d:dd:55:fb:64:3c:51:d8:e6:9b:
ac:a1:f7:ef:50:c6:2d:49:54:65:ff:ee:12:41:b8:
8c:93:6b:a3:14:f0:71:38:44:89:e1:cf:93:cb:8b:
cd:9c:85:65:3f:8f:5d:07:7b:a0:04:6c:81:8b:b3:
05:13:07:f6:0c:49:12:53:87:22:7c:67:71:1f:09:
39:b0:02:06:97:6a:fb:f8:c9:26:3a:f9:09:60:dd:
68:de:4c:31:f0:84:70:1a:72:58:25:43:7b:3d:15:
59:13:30:d4:f1:ef:e7:0b:a6:3b:4a:ab:a6:44:66:
be:5b:b4:2d:fc:5c:e1:08:aa:a8:e8:4b:29:c4:21:
3e:ab:aa:23:d5:44:37:6f:9e:6d:53:f8:cd:ce:4a:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:A5:6B:CB:89:AE:19:97:19:0A:C3:48:4F:56:AA:A8:61:A4:E9
X509v3 Authority Key Identifier:
keyid:FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:16:bc:47:5a:17:d4:ee:22:63:4e:90:f0:59:e1:fa:14:
67:63:43:0f:a4:12:16:63:fa:db:7f:21:2b:8c:01:47:5c:a7:
6a:cb:8d:b8:e1:0a:62:16:07:52:b1:3c:18:17:c9:19:a3:4a:
ae:91:bd:48:1c:b5:40:9c:fd:97:07:36:6d:d9:91:85:fb:56:
ed:7c:96:d5:97:85:da:db:b5:02:44:06:9b:9b:22:7d:2d:a3:
ec:9a:68:b5:96:54:4a:a3:f5:1a:b8:27:bc:e1:9c:b8:29:a0:
8e:85:ba:00:ff:83:09:b7:89:58:84:28:4b:05:30:2d:4a:7f:
40:92:30:c4:2c:19:54:ef:35:b8:27:af:e2:f9:3d:33:d5:48:
aa:6b:09:c3:c9:31:59:79:ef:a4:17:06:cb:96:a5:fe:de:76:
30:25:f1:71:d5:01:3e:f0:28:df:b6:b7:8e:e5:76:96:d4:6f:
37:64:f7:f7:0a:19:ee:78:3f:e1:a8:83:ae:46:f9:07:ae:57:
a9:88:53:65:98:67:74:d5:1b:d3:4d:e6:36:2f:92:4b:47:ec:
58:33:44:f6:ca:68:4d:32:01:7d:24:25:3c:8b:c1:8e:de:1e:
46:b7:6e:8e:e1:94:95:de:e2:13:2d:03:5c:16:c4:63:5c:f7:
36:ca:6a:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+PR3LO9wnmOjcHe1dHz9wOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjQ0NWY5ZWFjYTIwODBlNjU3NDcwNDA1MDkwY2NjZWM3
MTg1MTgwHhcNMjYwNzIzMTQwMDUyWhcNMjYwNzI0MTQwMDUyWjAzMTEwLwYDVQQD
Eyg5OTIyYTU2YmNiODlhZTE5OTcxOTBhYzM0ODRmNTZhYWE4NjFhNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F+gZw8gEWoLjiqKxMft/7EWsKQe
yQxqPMIZ4gotj0loCBNfvEADZ03Rk67akY8GwEn72NJSsmN3SS9Oq/ulKNZpomxX
xWfYv4ABLRtg7u2UY0BRbP3TGLeTbX0/D3sUWxxfnk6S/3WJzapnp53dVftkPFHY
5pusoffvUMYtSVRl/+4SQbiMk2ujFPBxOESJ4c+Ty4vNnIVlP49dB3ugBGyBi7MF
Ewf2DEkSU4cifGdxHwk5sAIGl2r7+MkmOvkJYN1o3kwx8IRwGnJYJUN7PRVZEzDU
8e/nC6Y7SqumRGa+W7Qt/FzhCKqo6EspxCE+q6oj1UQ3b55tU/jNzkq7swIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJkipWvLia4ZlxkKw0hPVqqoYaTpMB8GA1UdIwQY
MBaAFPskRfnqyiCA5ldHBAUJDMzscYUYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15UkYtZXJLSUlEbVYwY0VCUWtNek94eGhSZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvOWI0NmE3LTA1MTUtNDE3My1hMmMz
LWFjYTNjNWQwOTU2Ni8xLzEteVJGLWVyS0lJRG1WMGNFQlFrTXpPeHhoUmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRiLzliNDZhNy0wNTE1LTQxNzMtYTJjMy1hY2EzYzVkMDk1
NjYvMS8xLXlSRi1lcktJSURtVjBjRUJRa016T3h4aFJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcUW
vEdaF9TuImNOkPBZ4foUZ2NDD6QSFmP6238hK4wBR1ynasuNuOEKYhYHUrE8GBfJ
GaNKrpG9SBy1QJz9lwc2bdmRhftW7XyW1ZeF2tu1AkQGm5sifS2j7JpotZZUSqP1
GrgnvOGcuCmgjoW6AP+DCbeJWIQoSwUwLUp/QJIwxCwZVO81uCev4vk9M9VIqmsJ
w8kxWXnvpBcGy5al/t52MCXxcdUBPvAo37a3juV2ltRvN2T39woZ7ng/4aiDrkb5
B65XqYhTZZhndNUb003mNi+SS0fsWDNE9spoTTIBfSQlPIvBjt4eRrdujuGUld7i
Ey0DXBbEY1z3NspqJA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:53 2026 by rpki-client