Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: KCTFTdZTCLWAz08rkuRjiEEr9CGHxktk9plZlxTmQZ8=
Subject key identifier: 61:19:EF:F9:86:AB:AD:5A:14:76:2C:4D:B3:71:CA:1E:A1:F9:D8:BF
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019F90C80B4E30502AA07E932E01BEB1D41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:56 +0000
Manifest this update: Thu 23 Jul 2026 21:00:56 +0000
Manifest next update: Fri 24 Jul 2026 21:00:56 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: kL6m+2sBh/l2NLhXGWecigp3TjyCrYmHcBmpVDvMGxY=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:0b:4e:30:50:2a:a0:7e:93:2e:01:be:b1:d4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jul 23 21:00:56 2026 GMT
Not After : Jul 24 21:00:56 2026 GMT
Subject: CN=6119eff986abad5a14762c4db371ca1ea1f9d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:78:27:e8:a3:eb:ae:b3:ca:67:05:a3:d7:
81:77:48:fb:77:74:45:bb:53:a2:74:04:27:e2:6f:
55:1a:3f:17:58:9e:30:48:25:e3:85:02:63:43:c6:
0b:9d:38:fa:c4:90:07:32:af:33:e5:bb:70:26:d1:
d7:82:e4:ff:4a:e5:42:43:72:07:4b:a6:db:4a:24:
0b:75:7d:bf:6c:c1:29:5c:0b:30:64:47:16:23:86:
69:2d:74:45:89:df:53:ae:d6:fa:dd:88:c9:61:9a:
d5:80:d3:f7:eb:90:2e:f0:d2:2a:87:fe:31:2b:ae:
5b:64:ab:fe:fd:5c:c0:03:92:c4:d7:e0:4d:c7:61:
47:93:6e:c9:82:5f:1f:54:91:87:72:80:4c:f1:cd:
eb:7c:22:a6:2f:0a:2e:8b:b7:44:ae:b4:a8:77:31:
0b:e3:af:35:7a:f4:29:54:dd:02:b1:20:9c:62:24:
d6:d1:f8:12:94:c7:3c:48:f5:b7:c4:62:c3:05:d6:
45:f0:39:81:f3:12:31:55:64:66:74:c2:44:f4:f8:
35:94:9b:26:81:db:83:a4:2e:f6:af:72:41:55:73:
a6:a6:5e:5f:6d:6b:2a:63:d0:d7:a4:e4:d6:58:6a:
1e:f1:2d:34:3b:75:d1:29:bd:41:01:d6:72:0d:57:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:19:EF:F9:86:AB:AD:5A:14:76:2C:4D:B3:71:CA:1E:A1:F9:D8:BF
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0b:c2:5c:2b:be:f0:dc:3b:c0:d1:7e:27:f0:76:ee:cc:6b:
15:67:2b:a0:b0:ac:f3:b0:0d:b3:c4:1f:cd:90:b7:a0:19:64:
a1:25:5c:9f:eb:94:e1:ba:22:0b:34:8a:2b:36:9b:13:f2:fd:
ce:60:19:d3:e3:45:a8:ae:a7:fb:80:10:e5:e2:c4:f6:02:f2:
5c:3f:34:3d:b3:3e:f8:af:34:7e:cb:8e:67:a7:99:96:03:4f:
da:ff:46:7c:da:ac:f5:5a:eb:87:95:7f:55:c5:9a:a9:27:b4:
63:90:d7:54:b8:4c:f6:4d:07:6b:9c:4d:92:17:de:b1:3f:f0:
86:d0:36:2c:7b:fe:16:45:55:73:44:92:50:b1:8e:23:f4:1c:
c4:ed:da:37:2f:da:fc:b5:45:39:00:e6:2a:ed:02:fc:7b:ea:
9f:16:ca:29:72:ab:47:de:ff:e5:b0:89:48:00:c9:a4:7d:f7:
49:e0:8c:1a:d0:af:d6:09:0f:a0:a8:54:c5:5a:86:a7:d2:cb:
87:b2:a2:86:0d:52:a0:fe:51:2b:aa:c5:ef:2f:33:9d:e2:33:
72:f1:60:a2:1e:66:bd:05:84:39:2e:4b:aa:96:28:58:b9:78:
4a:50:d1:d4:a8:fa:50:80:3a:aa:72:c6:49:2c:fd:d2:70:fc:
1c:9e:12:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyAtOMFAqoH6TLgG+sdQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh
NDg4YjYwHhcNMjYwNzIzMjEwMDU2WhcNMjYwNzI0MjEwMDU2WjAzMTEwLwYDVQQD
Eyg2MTE5ZWZmOTg2YWJhZDVhMTQ3NjJjNGRiMzcxY2ExZWExZjlkOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws14J+ij666zymcFo9eBd0j7d3RF
u1OidAQn4m9VGj8XWJ4wSCXjhQJjQ8YLnTj6xJAHMq8z5btwJtHXguT/SuVCQ3IH
S6bbSiQLdX2/bMEpXAswZEcWI4ZpLXRFid9Trtb63YjJYZrVgNP365Au8NIqh/4x
K65bZKv+/VzAA5LE1+BNx2FHk27Jgl8fVJGHcoBM8c3rfCKmLwoui7dErrSodzEL
4681evQpVN0CsSCcYiTW0fgSlMc8SPW3xGLDBdZF8DmB8xIxVWRmdMJE9Pg1lJsm
gduDpC72r3JBVXOmpl5fbWsqY9DXpOTWWGoe8S00O3XRKb1BAdZyDVc7AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEZ7/mGq61aFHYsTbNxyh6h+di/MB8GA1UdIwQY
MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt
YjMwMTYyZTNjY2MwLzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw
LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgvCXCu+
8Nw7wNF+J/B27sxrFWcroLCs87ANs8QfzZC3oBlkoSVcn+uU4boiCzSKKzabE/L9
zmAZ0+NFqK6n+4AQ5eLE9gLyXD80PbM++K80fsuOZ6eZlgNP2v9GfNqs9Vrrh5V/
VcWaqSe0Y5DXVLhM9k0Ha5xNkhfesT/whtA2LHv+FkVVc0SSULGOI/QcxO3aNy/a
/LVFOQDmKu0C/HvqnxbKKXKrR97/5bCJSADJpH33SeCMGtCv1gkPoKhUxVqGp9LL
h7Kihg1SoP5RK6rF7y8zneIzcvFgoh5mvQWEOS5LqpYoWLl4SlDR1Kj6UIA6qnLG
SSz90nD8HJ4Scw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:04 2026 by rpki-client