Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
File: 1Kje6labT0AYsLpuRDtVY663YiA.mft (raw, json)
Hash identifier: U19xpraTUsuPq6qTkTiWrBjcvcGke1YvYBSHtg3YwKo=
Subject key identifier: B0:54:D0:85:13:D4:FC:1F:C1:1A:1C:4E:FE:2D:C0:48:F0:5D:C0:00
Authority key identifier: D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
Certificate issuer: /CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Certificate serial: 019F8F7F58DB13CFE49CFEE0DE9AB5BF87CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:55 +0000
Manifest this update: Thu 23 Jul 2026 15:01:55 +0000
Manifest next update: Fri 24 Jul 2026 15:01:55 +0000
Files and hashes: 1: 1Kje6labT0AYsLpuRDtVY663YiA.crl (hash: gPdxy18JtOkiOOsmYuTkeJyd3+QCNZy4ebPbBPl2HJc=)
2: xYC5Ef2FbO1kh0k5v0MHpXVPRIA.roa (hash: C3ScL3FbyGqqQa43l4JUN7kvgyu4hkQO8y2hJ7M5RK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:58:db:13:cf:e4:9c:fe:e0:de:9a:b5:bf:87:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Validity
Not Before: Jul 23 15:01:55 2026 GMT
Not After : Jul 24 15:01:55 2026 GMT
Subject: CN=b054d08513d4fc1fc11a1c4efe2dc048f05dc000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:3f:9e:59:17:93:b4:df:f9:4c:5c:bb:7c:
5f:5a:e4:2b:66:4f:4c:5f:c0:f9:9f:eb:47:72:b6:
a5:1b:09:c5:26:16:a0:01:8a:db:e2:73:ce:8a:ec:
68:68:9f:3a:c7:4d:75:a1:c6:f9:73:63:c3:d4:76:
3f:40:88:73:61:58:e2:02:8a:03:25:d6:6b:c7:3b:
e5:40:14:93:37:de:44:03:96:dc:bb:f3:b8:10:c6:
ab:cc:b0:14:0a:f8:af:a5:e6:a1:35:6f:84:62:a5:
93:77:05:42:ed:16:e7:6b:ae:ff:52:de:53:14:bf:
01:eb:7e:ac:b0:73:bf:e7:7e:85:1a:1a:11:0c:9f:
9a:5c:e5:10:f1:bc:4f:4e:e1:fe:95:ee:d9:a7:91:
db:9a:e1:c4:1a:fe:07:1f:e1:bc:6a:fd:1c:9d:20:
66:c9:57:ce:9d:63:5f:f6:20:85:f4:d8:79:ab:e6:
56:8a:e5:62:b8:e2:b2:97:d1:f3:42:05:82:ad:41:
d1:d4:c5:ca:0d:77:69:a5:57:0f:26:fe:5e:fe:40:
b5:6d:59:7e:bf:11:4c:da:44:b2:a1:ab:5c:00:c0:
64:c0:94:65:20:9d:a9:e0:63:aa:15:ad:50:ab:d6:
d9:d6:90:ec:eb:30:86:d7:48:a1:7b:dd:70:28:05:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:D0:85:13:D4:FC:1F:C1:1A:1C:4E:FE:2D:C0:48:F0:5D:C0:00
X509v3 Authority Key Identifier:
keyid:D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:c7:7a:2e:cf:d1:17:ab:50:bd:a7:d6:bb:82:f8:d3:17:
b0:74:94:79:a8:8a:3a:aa:14:31:c3:08:5d:df:49:0c:8e:8c:
b3:3b:ab:cc:ac:89:1f:29:1a:2f:29:a1:55:2b:9d:b2:49:f2:
37:c2:a7:9c:f0:3d:8f:97:c2:d2:86:d1:c5:9f:9a:cf:2e:8a:
73:ce:9f:69:4b:22:4c:14:07:f9:cf:ab:be:fc:95:85:c5:8b:
b8:0e:45:84:43:d0:05:36:c3:25:02:53:82:22:35:f9:b3:1c:
b0:4c:72:87:b0:da:44:ad:08:9b:91:b5:8a:da:70:1d:37:b2:
f2:1a:75:e2:82:e3:1e:06:b3:e0:e1:6e:c8:c4:03:56:3b:c9:
94:93:e1:d6:42:ff:62:b5:1a:c2:74:92:19:4b:fc:7d:0e:19:
66:68:37:60:71:fe:50:b1:3f:9d:fb:75:f3:95:88:bc:4d:4c:
d2:f3:4c:a4:3c:0f:10:53:d6:76:af:cc:7c:eb:e8:b3:c7:73:
ad:ce:fb:58:87:ef:77:f1:2b:c3:72:93:bc:6c:2e:e7:fc:c8:
18:d5:d3:d6:0c:aa:0e:c5:74:54:02:3f:5f:a2:70:a6:dd:3b:
a1:b6:0e:93:ad:43:fa:85:df:35:05:eb:92:a8:82:ce:0e:aa:
e1:69:1c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf1jbE8/knP7g3pq1v4fLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YThkZWVhNTY5YjRmNDAxOGIwYmE2ZTQ0M2I1NTYzYWVi
NzYyMjAwHhcNMjYwNzIzMTUwMTU1WhcNMjYwNzI0MTUwMTU1WjAzMTEwLwYDVQQD
EyhiMDU0ZDA4NTEzZDRmYzFmYzExYTFjNGVmZTJkYzA0OGYwNWRjMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ8/nlkXk7Tf+Uxcu3xfWuQrZk9M
X8D5n+tHcralGwnFJhagAYrb4nPOiuxoaJ86x011ocb5c2PD1HY/QIhzYVjiAooD
JdZrxzvlQBSTN95EA5bcu/O4EMarzLAUCvivpeahNW+EYqWTdwVC7Rbna67/Ut5T
FL8B636ssHO/536FGhoRDJ+aXOUQ8bxPTuH+le7Zp5HbmuHEGv4HH+G8av0cnSBm
yVfOnWNf9iCF9Nh5q+ZWiuViuOKyl9HzQgWCrUHR1MXKDXdppVcPJv5e/kC1bVl+
vxFM2kSyoatcAMBkwJRlIJ2p4GOqFa1Qq9bZ1pDs6zCG10ihe91wKAXrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBU0IUT1PwfwRocTv4twEjwXcAAMB8GA1UdIwQY
MBaAFNSo3upWm09AGLC6bkQ7VWOut2IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It
MTYwMmQ2YWQxNDFhLzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh
LzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUbHei7P
0RerUL2n1ruC+NMXsHSUeaiKOqoUMcMIXd9JDI6MszurzKyJHykaLymhVSudskny
N8KnnPA9j5fC0obRxZ+azy6Kc86faUsiTBQH+c+rvvyVhcWLuA5FhEPQBTbDJQJT
giI1+bMcsExyh7DaRK0Im5G1itpwHTey8hp14oLjHgaz4OFuyMQDVjvJlJPh1kL/
YrUawnSSGUv8fQ4ZZmg3YHH+ULE/nft185WIvE1M0vNMpDwPEFPWdq/MfOvos8dz
rc77WIfvd/Erw3KTvGwu5/zIGNXT1gyqDsV0VAI/X6Jwpt07obYOk61D+oXfNQXr
kqiCzg6q4WkchA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:59 2026 by rpki-client