Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: nkdxOjyg/ct+KJKMbMRp+1oxtv6+e7pfIKVYopAZTmU=
Subject key identifier: 5B:76:8A:B6:18:F2:10:03:D4:F9:AE:3E:AC:7D:AE:51:31:07:65:96
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 019F91DB0273C890FBAAABB4B9E867D286AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 02:01:16 +0000
Manifest this update: Fri 24 Jul 2026 02:01:16 +0000
Manifest next update: Sat 25 Jul 2026 02:01:16 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: J+qPAJDiQKKhH150U5DuQ4i+XftSi7FREl2WJijQsY0=)
2: otcWIKtbjTrCyo_84vs3wowbaF4.roa (hash: 9VlMOAnXc/ATSpTaKuPtGHL4kHOHZKRnHkwF61ZvPSY=)
3: v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa (hash: iLCA29fFNiihWmOcKz9zvu1/0ED29J1vmWFbLXrkxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:02:73:c8:90:fb:aa:ab:b4:b9:e8:67:d2:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jul 24 02:01:16 2026 GMT
Not After : Jul 25 02:01:16 2026 GMT
Subject: CN=5b768ab618f21003d4f9ae3eac7dae5131076596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:d5:bc:fd:b6:b7:f2:33:ae:3e:3f:66:54:
c1:b8:00:61:3d:7a:7b:e8:54:1c:49:cd:e7:a6:a6:
1b:40:d1:f4:9a:f1:79:2c:b4:0c:d2:c6:c8:33:ce:
e9:e9:1d:f5:44:4c:5e:2f:c4:8b:a7:dc:11:18:40:
75:75:7b:ad:af:fa:e6:b4:ff:bd:1e:eb:96:e6:b7:
cf:8c:62:d9:30:7a:19:9a:e5:a8:ad:4d:65:fb:6f:
ed:24:af:72:90:5b:4c:fe:44:af:8c:80:44:ef:2d:
16:69:1c:9a:3a:82:4b:a6:00:3e:3e:92:2f:a0:2f:
3a:c5:41:c8:b4:f5:12:67:b6:1d:b1:96:30:4b:9b:
3c:1d:ff:00:02:3f:0f:1c:d7:7f:28:33:98:ef:3b:
a6:10:07:93:41:4d:a2:3f:66:a8:41:7e:dc:4c:68:
31:6f:04:14:75:12:b6:f4:1d:01:25:f4:7e:05:8c:
91:14:be:1b:11:20:51:99:68:89:8a:9b:ce:d1:16:
c4:b6:55:1e:9c:8d:e1:e4:5c:53:26:2e:0b:0e:be:
12:7d:64:0d:c1:ed:19:32:79:e9:83:fc:31:38:30:
94:30:0b:9f:7d:2e:99:b7:f0:da:b1:0d:07:e4:d7:
aa:50:fb:2a:92:bf:f1:80:9f:90:cb:95:e8:70:20:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:8A:B6:18:F2:10:03:D4:F9:AE:3E:AC:7D:AE:51:31:07:65:96
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:b4:9f:1d:c9:8b:67:12:ca:2f:63:0f:cc:f5:1b:d7:35:
aa:20:01:b5:7c:3d:99:5f:38:bc:ef:4a:a1:d7:37:c8:65:71:
c7:5f:90:48:e5:72:05:0e:c5:dc:6a:ad:72:10:48:5f:9c:86:
00:7c:09:91:8e:ae:1c:cf:23:5b:38:09:83:4b:0b:bb:e9:42:
70:1a:21:68:24:bf:76:08:ec:f4:30:d7:36:94:3d:c5:ad:3e:
b8:fc:fb:fa:98:9f:59:5c:db:36:e0:3d:71:be:13:6f:16:79:
9b:d5:73:d6:4f:6f:e1:3e:7e:e7:2f:07:51:cb:2a:70:15:c4:
17:5e:ab:b3:b1:fe:ab:2b:b4:9d:1b:80:3b:c4:57:b4:f2:67:
53:0a:3c:c4:5e:fe:38:68:2a:44:80:e8:d9:cc:bf:83:33:ed:
50:21:6e:91:7a:26:cd:b5:11:3d:30:55:0d:49:12:b1:ab:61:
ec:9d:6e:24:7f:16:62:14:db:a9:aa:09:06:e4:a1:f7:fe:03:
02:1f:0e:c5:6b:47:08:ec:c9:d3:17:32:69:79:11:64:1b:3a:
d0:04:9e:dc:a3:29:e6:8e:c9:f0:9b:8e:0f:34:e7:73:77:84:
d1:84:0e:33:ac:61:ab:d5:2d:39:85:2f:4d:09:e7:94:7c:7e:
fc:89:97:4c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+R2wJzyJD7qqu0uehn0oatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTAzYzA3NWE2OTA1NTZiZDQ2MjEyMmIyNDY5OWUxYjZi
MTkyNzgwHhcNMjYwNzI0MDIwMTE2WhcNMjYwNzI1MDIwMTE2WjAzMTEwLwYDVQQD
Eyg1Yjc2OGFiNjE4ZjIxMDAzZDRmOWFlM2VhYzdkYWU1MTMxMDc2NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyITVvP22t/Izrj4/ZlTBuABhPXp7
6FQcSc3npqYbQNH0mvF5LLQM0sbIM87p6R31RExeL8SLp9wRGEB1dXutr/rmtP+9
HuuW5rfPjGLZMHoZmuWorU1l+2/tJK9ykFtM/kSvjIBE7y0WaRyaOoJLpgA+PpIv
oC86xUHItPUSZ7YdsZYwS5s8Hf8AAj8PHNd/KDOY7zumEAeTQU2iP2aoQX7cTGgx
bwQUdRK29B0BJfR+BYyRFL4bESBRmWiJipvO0RbEtlUenI3h5FxTJi4LDr4SfWQN
we0ZMnnpg/wxODCUMAuffS6Zt/DasQ0H5NeqUPsqkr/xgJ+Qy5XocCBjOQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFt2irYY8hAD1PmuPqx9rlExB2WWMB8GA1UdIwQY
MBaAFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WQThCMXBwQlZhOVJpRWlza2FaNGJheGtuZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0LTdjOTYtNGViNy05OTQw
LTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVpc2thWjRiYXhrbmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc1LzRmYTRiNC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUz
ZjUvMS8xLVZBOEIxcHBCVmE5UmlFaXNrYVo0YmF4a25nLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA60
nx3Ji2cSyi9jD8z1G9c1qiABtXw9mV84vO9Kodc3yGVxx1+QSOVyBQ7F3GqtchBI
X5yGAHwJkY6uHM8jWzgJg0sLu+lCcBohaCS/dgjs9DDXNpQ9xa0+uPz7+pifWVzb
NuA9cb4TbxZ5m9Vz1k9v4T5+5y8HUcsqcBXEF16rs7H+qyu0nRuAO8RXtPJnUwo8
xF7+OGgqRIDo2cy/gzPtUCFukXomzbURPTBVDUkSsath7J1uJH8WYhTbqaoJBuSh
9/4DAh8OxWtHCOzJ0xcyaXkRZBs60ASe3KMp5o7J8JuODzTnc3eE0YQOM6xhq9Ut
OYUvTQnnlHx+/ImXTA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:52 2026 by rpki-client