Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: /Y1LcEp1rMBQy8DcS2mUr4vtzoguF888hAMzP5pYawA=
Subject key identifier: 65:7F:60:F0:2A:0F:33:F5:EF:82:4A:72:28:54:FB:83:95:56:86:8F
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019F90FEB050E20F683A7A8C32A450CAFF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 05BC
Signing time: Thu 23 Jul 2026 22:00:38 +0000
Manifest this update: Thu 23 Jul 2026 22:00:38 +0000
Manifest next update: Fri 24 Jul 2026 22:00:38 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: cgNlENZ9G+6o9FgVEE9Tq3uXvtowETqQFeITxRnqORk=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b0:50:e2:0f:68:3a:7a:8c:32:a4:50:ca:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Jul 23 22:00:38 2026 GMT
Not After : Jul 24 22:00:38 2026 GMT
Subject: CN=657f60f02a0f33f5ef824a722854fb839556868f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:21:94:76:58:de:37:8c:d5:fc:df:27:22:1a:
e4:7c:b9:1b:26:0c:b4:e0:80:9d:9a:de:d9:be:23:
9e:c0:42:75:d6:7e:fb:74:fb:58:62:07:b7:9a:1d:
24:66:30:36:d9:2f:36:57:8e:62:ff:54:47:6a:b1:
8b:18:49:c8:35:4b:5d:16:07:8d:f3:aa:ea:50:63:
de:62:a7:48:c0:c2:4d:06:db:f1:25:36:8b:ce:72:
f3:bd:d9:4d:76:a1:96:0c:56:d2:81:3a:48:ed:1b:
be:79:17:89:c4:6b:a4:51:7e:91:9d:a0:3c:89:76:
64:b7:f3:56:41:12:64:2d:03:39:a1:10:87:94:53:
9e:68:01:f6:21:74:a5:36:21:15:80:5b:cc:0f:e7:
df:bb:cf:d9:2c:88:a3:4b:c5:96:33:d3:ee:67:5e:
64:d8:44:8c:b5:52:ba:1d:9b:9c:1e:b6:a9:34:24:
82:2a:77:14:10:5d:0f:33:3a:81:bb:de:58:05:4a:
c9:cb:f9:81:40:c7:43:e7:37:37:13:96:89:82:87:
ad:77:b7:98:96:e4:20:14:2c:0d:07:18:dc:d5:19:
74:77:63:7c:40:ef:af:7d:68:2e:5f:04:f5:c9:60:
14:c1:a7:b9:9c:9f:52:72:7f:61:17:a4:f4:29:3e:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:60:F0:2A:0F:33:F5:EF:82:4A:72:28:54:FB:83:95:56:86:8F
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:a8:25:76:55:30:97:0b:eb:85:d6:3d:24:9d:29:41:5c:
4e:33:4d:99:09:19:4d:4b:6b:37:69:2f:64:19:ad:76:d6:fd:
97:c7:49:f7:32:2a:2c:29:79:6c:91:e2:1b:cf:41:ca:4f:6b:
68:43:5e:4d:0d:21:47:59:f6:b3:fd:ca:41:1f:2a:df:4c:9a:
25:0a:26:01:ab:24:1f:ac:1a:3e:81:c0:c8:12:cc:ce:e8:bc:
66:cb:03:6c:6f:4f:85:70:7c:76:49:da:f6:31:ba:b5:0c:fc:
a9:ae:e8:6d:bf:69:7d:ba:22:43:bb:fb:56:2c:50:1a:a6:c9:
de:7b:b5:e2:52:6c:20:50:b0:12:1d:28:bc:d7:e6:c7:1a:20:
d8:aa:41:99:a7:14:f1:6f:f4:fc:bd:42:ec:27:95:39:c4:cc:
d3:d9:72:ab:43:79:de:cd:9f:87:fe:13:93:24:e5:70:40:47:
b5:27:43:a6:25:fa:51:27:9a:80:40:33:f7:3d:3e:34:7d:02:
95:9d:aa:19:99:f7:03:34:ad:89:79:05:9a:6c:4f:d6:22:dc:
49:71:3f:19:5c:02:f7:e3:d2:9e:9a:34:44:ff:2e:b3:5d:fe:
db:88:d2:65:c6:f9:6c:ce:47:0a:99:d0:7c:c0:94:52:36:1b:
ae:03:30:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/rBQ4g9oOnqMMqRQyv93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODQzY2Q2MWQ4ZmZmMWY2Y2ZiMzgwYWUyNDNiZTBiMWQ5
NDM1YWIwHhcNMjYwNzIzMjIwMDM4WhcNMjYwNzI0MjIwMDM4WjAzMTEwLwYDVQQD
Eyg2NTdmNjBmMDJhMGYzM2Y1ZWY4MjRhNzIyODU0ZmI4Mzk1NTY4NjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iGUdljeN4zV/N8nIhrkfLkbJgy0
4ICdmt7ZviOewEJ11n77dPtYYge3mh0kZjA22S82V45i/1RHarGLGEnINUtdFgeN
86rqUGPeYqdIwMJNBtvxJTaLznLzvdlNdqGWDFbSgTpI7Ru+eReJxGukUX6RnaA8
iXZkt/NWQRJkLQM5oRCHlFOeaAH2IXSlNiEVgFvMD+ffu8/ZLIijS8WWM9PuZ15k
2ESMtVK6HZucHrapNCSCKncUEF0PMzqBu95YBUrJy/mBQMdD5zc3E5aJgoetd7eY
luQgFCwNBxjc1Rl0d2N8QO+vfWguXwT1yWAUwae5nJ9Scn9hF6T0KT5bTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGV/YPAqDzP174JKcihU+4OVVoaPMB8GA1UdIwQY
MBaAFNaEPNYdj/8fbPs4CuJDvgsdlDWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUt
ZWVjZDA5ZDkwYzY1LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUtZWVjZDA5ZDkwYzY1
LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdACoJXZV
MJcL64XWPSSdKUFcTjNNmQkZTUtrN2kvZBmtdtb9l8dJ9zIqLCl5bJHiG89Byk9r
aENeTQ0hR1n2s/3KQR8q30yaJQomAaskH6waPoHAyBLMzui8ZssDbG9PhXB8dkna
9jG6tQz8qa7obb9pfboiQ7v7VixQGqbJ3nu14lJsIFCwEh0ovNfmxxog2KpBmacU
8W/0/L1C7CeVOcTM09lyq0N53s2fh/4TkyTlcEBHtSdDpiX6USeagEAz9z0+NH0C
lZ2qGZn3AzStiXkFmmxP1iLcSXE/GVwC9+PSnpo0RP8us13+24jSZcb5bM5HCpnQ
fMCUUjYbrgMwPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:54 2026 by rpki-client