Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: TEzbT8KRl2pUQee40P3P7a1+qL6Cr8jqRaEbyBU0t9Y=
Subject key identifier: 2B:39:F2:17:01:93:ED:4A:DB:4B:D4:EA:67:65:5B:05:2C:B8:55:2B
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019F935BE371EDDB97CE36947B118FDF0D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 159A
Signing time: Fri 24 Jul 2026 09:01:40 +0000
Manifest this update: Fri 24 Jul 2026 09:01:40 +0000
Manifest next update: Sat 25 Jul 2026 09:01:40 +0000
Files and hashes: 1: BIo28pXo6DKLLlMdXKajPhOhgpE.roa (hash: Yxz0YX56/XjwEqK3eJFqdGwrvy8qCQG0h/ZHhD2mdYI=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: 3bGfCetQRfC+wsy6khuLtbXwS3AdqVbNfDWjC1CIU3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:e3:71:ed:db:97:ce:36:94:7b:11:8f:df:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Jul 24 09:01:40 2026 GMT
Not After : Jul 25 09:01:40 2026 GMT
Subject: CN=2b39f2170193ed4adb4bd4ea67655b052cb8552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:9a:91:3d:fc:07:f8:42:7e:da:ee:01:85:
d7:c0:87:80:d3:ee:04:3d:e4:ed:0f:6c:2f:08:ad:
20:c4:07:15:cc:11:a4:1a:af:ae:27:41:1c:3f:13:
6f:1d:1e:c4:27:98:3f:f0:fd:7c:47:19:f3:33:02:
40:07:1b:8b:6b:a7:ad:1b:65:55:ca:8b:7a:45:ed:
25:f0:0a:9c:eb:3b:e4:0d:3c:98:7c:9f:95:78:20:
b0:5d:82:bd:ea:87:ac:fc:95:86:ee:21:e3:d3:ad:
ce:55:ab:b6:7a:ba:e0:ee:e9:a4:bd:78:dd:4c:76:
6a:d0:c6:cd:05:63:35:0d:92:b5:40:cb:0c:cc:28:
e9:ac:d5:90:0b:25:a8:ca:5f:52:7c:1d:8e:a5:50:
11:49:ec:db:f3:cf:94:de:48:3c:de:fa:91:f1:1d:
7b:2f:b3:64:00:ad:8c:b1:ff:4f:fe:f5:60:1a:a2:
f2:36:8b:76:c2:9d:3d:61:56:20:76:33:80:04:4c:
b7:c4:7c:8d:c5:5d:e9:45:95:9a:39:d1:4d:c9:9d:
5f:44:d1:11:8e:08:dc:c7:7f:40:cc:62:66:1d:43:
11:45:6e:04:07:4d:14:01:de:c3:6b:19:0a:4c:71:
94:1b:9a:f9:04:d1:fd:0d:ef:8f:41:a1:05:95:c2:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:F2:17:01:93:ED:4A:DB:4B:D4:EA:67:65:5B:05:2C:B8:55:2B
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:78:19:12:50:64:b8:e3:90:68:fd:2b:49:48:e2:ca:63:
c6:45:59:98:99:b1:cb:46:8b:89:23:af:01:7f:79:d8:95:1e:
fc:f4:d5:84:cd:cc:2b:39:30:f1:28:6c:b2:b6:ac:66:27:38:
88:f7:a2:c3:59:05:f2:c3:f7:e5:9b:ec:0d:01:ed:95:c5:d8:
39:8f:fb:26:aa:00:18:15:57:d8:68:14:40:c9:4a:1e:f0:ce:
aa:7f:58:f9:90:d0:1a:28:90:f3:36:4f:c1:80:bb:7a:3c:88:
a9:fa:42:9d:53:58:4c:a2:14:bc:9f:c8:f7:b5:b7:3e:f1:1c:
94:a6:fa:09:c5:f1:f4:08:03:2e:1d:bc:01:9b:1c:f3:f0:0d:
15:dc:9b:c5:f5:14:ca:81:49:e6:35:66:8e:4f:95:da:c0:ca:
95:18:41:21:c9:26:19:a8:8c:32:2c:9f:9e:39:0d:c4:9c:c1:
92:54:1c:92:d2:cf:68:1f:af:4a:42:62:cd:e6:13:f6:cd:ef:
7a:e5:9e:0a:5d:58:02:c3:62:bb:74:36:ed:dc:38:90:80:23:
bb:b6:f3:a3:47:c4:14:9c:85:c7:67:49:40:a1:8c:ea:b6:74:
f5:8d:65:5e:2c:5d:5e:0f:aa:0f:9c:f4:67:fb:10:7a:bc:87:
73:17:97:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW+Nx7duXzjaUexGP3w1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj
ZmMxOTkwHhcNMjYwNzI0MDkwMTQwWhcNMjYwNzI1MDkwMTQwWjAzMTEwLwYDVQQD
EygyYjM5ZjIxNzAxOTNlZDRhZGI0YmQ0ZWE2NzY1NWIwNTJjYjg1NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv+akT38B/hCftruAYXXwIeA0+4E
PeTtD2wvCK0gxAcVzBGkGq+uJ0EcPxNvHR7EJ5g/8P18RxnzMwJABxuLa6etG2VV
yot6Re0l8Aqc6zvkDTyYfJ+VeCCwXYK96oes/JWG7iHj063OVau2errg7umkvXjd
THZq0MbNBWM1DZK1QMsMzCjprNWQCyWoyl9SfB2OpVARSezb88+U3kg83vqR8R17
L7NkAK2Msf9P/vVgGqLyNot2wp09YVYgdjOABEy3xHyNxV3pRZWaOdFNyZ1fRNER
jgjcx39AzGJmHUMRRW4EB00UAd7DaxkKTHGUG5r5BNH9De+PQaEFlcLQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs58hcBk+1K20vU6mdlWwUsuFUrMB8GA1UdIwQY
MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt
ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0
LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0N4GRJQ
ZLjjkGj9K0lI4spjxkVZmJmxy0aLiSOvAX952JUe/PTVhM3MKzkw8ShssrasZic4
iPeiw1kF8sP35ZvsDQHtlcXYOY/7JqoAGBVX2GgUQMlKHvDOqn9Y+ZDQGiiQ8zZP
wYC7ejyIqfpCnVNYTKIUvJ/I97W3PvEclKb6CcXx9AgDLh28AZsc8/ANFdybxfUU
yoFJ5jVmjk+V2sDKlRhBIckmGaiMMiyfnjkNxJzBklQcktLPaB+vSkJizeYT9s3v
euWeCl1YAsNiu3Q27dw4kIAju7bzo0fEFJyFx2dJQKGM6rZ09Y1lXixdXg+qD5z0
Z/sQeryHcxeXWA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:38 2026 by rpki-client