Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: QarUy2tIZ8qadNQbT0k+zdes8Kb3T5GHCasLVJLn3aw=
Subject key identifier: B3:11:24:F1:E3:32:BB:89:83:05:34:FD:66:4B:56:89:FA:03:B8:A9
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 019F9090CE0B6142034D73ED0C70ED4B48BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 20:00:36 +0000
Manifest this update: Thu 23 Jul 2026 20:00:36 +0000
Manifest next update: Fri 24 Jul 2026 20:00:36 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: 8hl/WC0/lO6DXJs+LoBiOnN1ZNK1ghlbweavJdEPLf4=)
2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ce:0b:61:42:03:4d:73:ed:0c:70:ed:4b:48:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jul 23 20:00:36 2026 GMT
Not After : Jul 24 20:00:36 2026 GMT
Subject: CN=b31124f1e332bb89830534fd664b5689fa03b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:79:87:a8:82:07:02:72:a8:04:ed:4a:93:
ba:3c:53:48:4d:c2:e1:69:71:58:b0:c1:f4:38:86:
ab:fe:99:92:d7:c6:3c:8d:18:bf:e2:50:53:6d:e6:
df:fb:7b:b1:e9:11:b6:0d:75:82:98:b1:b9:17:c2:
a8:16:d5:09:64:0a:4c:7c:99:d4:23:55:db:69:63:
da:69:24:d8:aa:a7:d1:9a:7e:e4:4e:56:90:00:28:
c3:78:7f:08:2e:81:c7:c2:6b:b1:67:4f:4e:9e:99:
9d:b7:fc:8a:a7:af:29:9e:87:9b:f8:c8:a4:81:a5:
a0:97:8e:67:16:4b:ff:0e:9c:65:ea:ca:4d:ea:f6:
83:1a:2a:37:a4:4f:86:5b:52:be:7a:28:5f:ce:26:
d4:5f:3a:10:fd:f3:15:ed:15:7e:30:c9:23:bc:cb:
3d:d9:c5:8d:a2:91:38:ee:e0:92:05:91:c3:d8:bc:
4f:66:2c:4f:57:93:0d:87:bf:e8:0e:79:9d:9b:fa:
a2:4f:b7:f6:b5:e4:e5:1e:1d:00:11:9a:4d:4f:fb:
88:4e:e6:22:ef:d4:99:5f:07:1d:7e:92:3b:bf:ce:
c5:e2:82:2c:a5:7b:f2:fc:ae:62:78:2b:81:c4:a6:
ba:e1:4a:32:3c:6d:ee:22:b5:28:03:ae:8d:e4:db:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:24:F1:E3:32:BB:89:83:05:34:FD:66:4B:56:89:FA:03:B8:A9
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9b:50:6c:90:94:77:8e:d3:e0:57:3f:5b:cd:cc:3a:34:fa:
51:27:b0:3d:a0:c6:be:8d:a1:3f:b5:25:8f:5c:7e:d6:09:3d:
a2:a3:14:26:e7:44:6f:32:3a:17:04:27:f4:f0:26:eb:fd:77:
d9:43:30:76:6a:d4:49:0f:d7:60:a3:89:af:09:a3:75:f1:9f:
bc:aa:44:76:31:49:2c:2c:a6:48:1c:d5:16:5a:eb:47:d9:1f:
a7:9a:1c:b0:2f:ee:a1:91:70:fd:56:76:3d:e1:36:b0:82:f4:
96:a0:a2:72:80:59:58:7f:dc:8e:10:c2:bf:06:fe:4a:7d:96:
b4:bd:08:49:5b:f0:1c:e5:c0:9a:9d:08:5f:9a:9a:29:0d:ec:
5b:85:92:6a:1d:94:a9:cd:fe:e6:b7:07:05:56:1f:9f:b6:c5:
2e:88:a3:85:26:24:fb:4e:91:58:e5:5c:5c:69:58:69:6a:4a:
16:bb:b9:29:77:54:d4:c7:96:78:ab:a1:6d:36:c5:9f:af:78:
28:76:d0:09:41:69:ae:31:4e:e2:bf:04:6d:3d:54:93:34:73:
22:85:71:f3:d3:1b:4e:84:77:35:0b:fa:37:36:f4:2d:f6:41:
32:86:a0:2d:a5:70:4f:51:14:b9:09:fb:b2:3a:77:b8:d3:3f:
04:ec:54:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkM4LYUIDTXPtDHDtS0i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm
ZDllZWUwHhcNMjYwNzIzMjAwMDM2WhcNMjYwNzI0MjAwMDM2WjAzMTEwLwYDVQQD
EyhiMzExMjRmMWUzMzJiYjg5ODMwNTM0ZmQ2NjRiNTY4OWZhMDNiOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlJ5h6iCBwJyqATtSpO6PFNITcLh
aXFYsMH0OIar/pmS18Y8jRi/4lBTbebf+3ux6RG2DXWCmLG5F8KoFtUJZApMfJnU
I1XbaWPaaSTYqqfRmn7kTlaQACjDeH8ILoHHwmuxZ09Onpmdt/yKp68pnoeb+Mik
gaWgl45nFkv/Dpxl6spN6vaDGio3pE+GW1K+eihfzibUXzoQ/fMV7RV+MMkjvMs9
2cWNopE47uCSBZHD2LxPZixPV5MNh7/oDnmdm/qiT7f2teTlHh0AEZpNT/uITuYi
79SZXwcdfpI7v87F4oIspXvy/K5ieCuBxKa64UoyPG3uIrUoA66N5Nt5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMRJPHjMruJgwU0/WZLVon6A7ipMB8GA1UdIwQY
MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt
ZTI5ZWUzZDkxMzk1LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1
LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJtQbJCU
d47T4Fc/W83MOjT6USewPaDGvo2hP7Ulj1x+1gk9oqMUJudEbzI6FwQn9PAm6/13
2UMwdmrUSQ/XYKOJrwmjdfGfvKpEdjFJLCymSBzVFlrrR9kfp5ocsC/uoZFw/VZ2
PeE2sIL0lqCicoBZWH/cjhDCvwb+Sn2WtL0ISVvwHOXAmp0IX5qaKQ3sW4WSah2U
qc3+5rcHBVYfn7bFLoijhSYk+06RWOVcXGlYaWpKFru5KXdU1MeWeKuhbTbFn694
KHbQCUFprjFO4r8EbT1UkzRzIoVx89MbToR3NQv6Nzb0LfZBMoagLaVwT1EUuQn7
sjp3uNM/BOxUig==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:18 2026 by rpki-client