Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier: erlnw7znenIM8z5ruLpHNlBVe7ifEVLp1iK5K1smLjU=
Subject key identifier: 20:C4:39:48:A2:67:3E:DB:2F:EC:2E:E7:3F:5F:23:A7:99:70:05:DB
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer: /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial: 019F90913BB3909D723B46156FA3C6E0D6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number: 01C8
Signing time: Thu 23 Jul 2026 20:01:04 +0000
Manifest this update: Thu 23 Jul 2026 20:01:04 +0000
Manifest next update: Fri 24 Jul 2026 20:01:04 +0000
Files and hashes: 1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: yVSt5LkFBjGbUc6/WLGs6dgwVacYES5lXkUESS5X7Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:3b:b3:90:9d:72:3b:46:15:6f:a3:c6:e0:d6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Validity
Not Before: Jul 23 20:01:04 2026 GMT
Not After : Jul 24 20:01:04 2026 GMT
Subject: CN=20c43948a2673edb2fec2ee73f5f23a7997005db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:3b:2c:30:c1:31:8a:b3:6e:88:4a:e1:86:
e4:09:e6:b7:18:78:28:8c:dc:be:3b:2e:29:c3:6f:
a4:f7:ff:fa:c6:98:e8:07:1a:78:19:0f:8f:50:3f:
f0:15:dd:45:67:ac:ba:4a:95:d9:68:6b:b6:0e:c2:
98:18:a2:c1:43:29:a1:44:9b:30:50:ef:4b:0e:ad:
f5:9a:61:76:4a:d3:0c:55:3a:3e:bb:8e:38:9f:31:
65:af:7f:02:2c:7d:59:8c:91:04:ca:2a:d6:9a:3e:
b6:f1:32:48:c8:9a:18:48:da:40:9f:4e:0e:ed:2f:
2c:a6:24:2f:fd:6f:21:1e:09:ce:4e:bd:8c:70:a2:
14:fd:0e:c2:f7:89:15:1c:d1:aa:08:7a:89:e7:2d:
e9:81:e2:be:9f:4d:82:c3:06:44:6e:e8:2d:a6:3d:
5e:6d:fe:e9:a4:c5:38:f8:e6:9b:75:1d:1b:45:90:
5d:23:09:e9:38:12:2c:ad:a6:51:51:26:62:28:4f:
64:6e:39:02:41:c5:5e:ac:01:8b:ea:6c:e9:00:40:
c8:40:09:6f:42:bc:1a:5d:fc:46:79:be:d2:4c:f0:
17:67:52:0c:f0:54:16:b1:59:84:9a:b0:9e:fb:5a:
93:78:ed:7e:32:35:2f:7f:c5:78:51:40:07:03:39:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:39:48:A2:67:3E:DB:2F:EC:2E:E7:3F:5F:23:A7:99:70:05:DB
X509v3 Authority Key Identifier:
keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ad:e6:25:89:46:8e:3a:20:85:a8:10:1a:5c:88:94:6b:f7:
30:75:d7:1e:5d:66:a4:6b:c8:42:ae:bd:29:3f:3e:ef:be:7d:
34:11:c9:9c:35:e5:e5:11:ab:c9:50:c1:c4:c6:ff:03:53:6c:
21:5e:84:13:ad:89:53:7a:06:bd:c3:37:21:94:e5:52:c8:66:
ca:e1:ee:4e:93:3e:bb:3f:54:5d:b0:18:6d:fa:8c:9f:d9:36:
c0:ac:e0:c5:45:d1:07:9d:d3:09:63:93:6b:8e:72:ab:46:66:
d0:a3:30:1b:b8:a5:93:bb:91:63:2f:05:09:ac:2c:ed:34:07:
b0:08:ed:53:d9:eb:47:21:61:58:d6:7a:d6:34:02:84:58:e1:
a9:54:d1:2c:22:af:62:5b:77:68:fe:a1:68:c6:ee:9b:be:55:
31:9b:fb:d6:24:c6:0c:6e:fe:32:c7:6a:98:18:1d:21:f7:52:
b4:ff:da:56:36:40:4c:3b:39:fc:ba:0b:e1:5d:1d:1c:80:d9:
98:84:fb:5d:49:40:d5:f2:16:24:0e:86:48:9e:41:8d:73:6a:
4b:fe:ab:65:8d:b2:f3:33:b8:9b:7b:f2:2e:ea:16:c3:88:4f:
d5:38:36:59:23:da:e1:c1:28:a8:5d:89:27:1b:ec:5e:99:41:
10:6b:9a:93
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+QkTuzkJ1yO0YVb6PG4Na2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGRlZGQ4ZDQwZGJmMjNlMTEwNTQwYzQzMGQ5NGVjMzg3
ODk2M2EwHhcNMjYwNzIzMjAwMTA0WhcNMjYwNzI0MjAwMTA0WjAzMTEwLwYDVQQD
EygyMGM0Mzk0OGEyNjczZWRiMmZlYzJlZTczZjVmMjNhNzk5NzAwNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQo7LDDBMYqzbohK4YbkCea3GHgo
jNy+Oy4pw2+k9//6xpjoBxp4GQ+PUD/wFd1FZ6y6SpXZaGu2DsKYGKLBQymhRJsw
UO9LDq31mmF2StMMVTo+u444nzFlr38CLH1ZjJEEyirWmj628TJIyJoYSNpAn04O
7S8spiQv/W8hHgnOTr2McKIU/Q7C94kVHNGqCHqJ5y3pgeK+n02CwwZEbugtpj1e
bf7ppMU4+OabdR0bRZBdIwnpOBIsraZRUSZiKE9kbjkCQcVerAGL6mzpAEDIQAlv
QrwaXfxGeb7STPAXZ1IM8FQWsVmEmrCe+1qTeO1+MjUvf8V4UUAHAzlOwQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCDEOUiiZz7bL+wu5z9fI6eZcAXbMB8GA1UdIwQY
MBaAFPgN7djUDb8j4RBUDEMNlOw4eJY6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BM3QyTlFOdnlQaEVGUU1RdzJVN0RoNGxqby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMTJiNDllLTJmMmItNDVmNC1iNGU4
LTNhOGNlOWViMmFlYS8xLzEtQTN0Mk5RTnZ5UGhFRlFNUXcyVTdEaDRsam8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUwLzEyYjQ5ZS0yZjJiLTQ1ZjQtYjRlOC0zYThjZTllYjJh
ZWEvMS8xLUEzdDJOUU52eVBoRUZRTVF3MlU3RGg0bGpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX63m
JYlGjjoghagQGlyIlGv3MHXXHl1mpGvIQq69KT8+7759NBHJnDXl5RGryVDBxMb/
A1NsIV6EE62JU3oGvcM3IZTlUshmyuHuTpM+uz9UXbAYbfqMn9k2wKzgxUXRB53T
CWOTa45yq0Zm0KMwG7ilk7uRYy8FCaws7TQHsAjtU9nrRyFhWNZ61jQChFjhqVTR
LCKvYlt3aP6haMbum75VMZv71iTGDG7+MsdqmBgdIfdStP/aVjZATDs5/LoL4V0d
HIDZmIT7XUlA1fIWJA6GSJ5BjXNqS/6rZY2y8zO4m3vyLuoWw4hP1Tg2WSPa4cEo
qF2JJxvsXplBEGuakw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:09 2026 by rpki-client