Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File: A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier: jRXFzC1Gp3wHcWA5YgqiAfWLmbCvVP9j3jbr/iltDBk=
Subject key identifier: BE:D8:01:96:58:52:79:A1:CB:82:10:DE:93:6E:C4:7E:28:75:4B:C8
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer: /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial: 019F8F7F7639F355444E5339B39FBCB8F64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number: 081C
Signing time: Thu 23 Jul 2026 15:02:02 +0000
Manifest this update: Thu 23 Jul 2026 15:02:02 +0000
Manifest next update: Fri 24 Jul 2026 15:02:02 +0000
Files and hashes: 1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: aEuNDoSxnihL0jrMq3XjQ4EfOTwRI1fpYNYMXx36pKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:76:39:f3:55:44:4e:53:39:b3:9f:bc:b8:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Validity
Not Before: Jul 23 15:02:02 2026 GMT
Not After : Jul 24 15:02:02 2026 GMT
Subject: CN=bed80196585279a1cb8210de936ec47e28754bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:20:21:7e:99:30:39:68:3c:54:19:cb:ab:
b7:36:8b:57:2f:41:86:f9:9a:27:96:aa:20:82:f4:
23:b9:ee:2e:8f:b9:37:bf:03:5b:eb:f9:c7:aa:e8:
ff:fb:65:2f:dc:94:85:7b:08:50:26:6c:de:e9:ef:
09:f7:f9:6d:0d:45:ba:99:33:3a:1c:09:76:98:c0:
9a:9f:22:9b:c0:b6:69:59:cf:49:58:51:95:33:ab:
e2:19:ec:83:45:f9:5f:67:f4:45:fd:f7:c3:c5:05:
32:27:65:f0:03:44:97:99:d4:d7:71:c1:99:a2:6c:
0f:00:63:79:53:79:ea:67:6f:cc:4b:67:7c:e3:45:
59:47:a2:a9:ef:0f:89:de:0a:3a:0d:27:87:40:72:
c1:ed:b2:2c:cd:45:04:10:f0:b0:b9:5d:f1:54:5c:
9c:67:41:6c:db:ee:8f:bd:a9:fe:63:84:a8:dc:36:
11:90:45:16:87:f2:99:95:bd:6c:46:33:38:28:11:
aa:f7:52:51:7d:b6:93:ba:45:52:76:10:21:e0:b0:
86:75:c8:38:44:90:7d:5a:e2:38:0c:a2:aa:95:be:
37:4b:98:cd:3c:c5:6f:ae:c6:9d:8c:44:03:84:22:
61:be:ea:d0:18:05:1b:4e:df:d2:0c:ef:15:2f:9f:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D8:01:96:58:52:79:A1:CB:82:10:DE:93:6E:C4:7E:28:75:4B:C8
X509v3 Authority Key Identifier:
keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:d8:f3:d3:bd:d3:69:32:e3:08:3c:86:f3:74:04:f7:79:
a2:a9:ed:80:d2:48:74:eb:f0:0a:d8:ea:53:ca:f3:06:38:0a:
72:c6:21:50:f1:7f:62:15:f6:07:10:31:9a:7d:c9:e8:6a:f5:
6e:ba:62:41:c0:7f:c3:25:47:ab:c6:67:aa:39:65:c8:cf:3f:
d6:fb:62:75:89:54:d5:74:1a:e1:60:af:0d:c7:82:e3:0b:21:
da:0c:23:6b:6d:ad:17:50:e2:ab:6c:3c:a0:ff:fa:25:03:0c:
87:15:6c:23:b8:c3:51:52:9c:df:d7:cf:ab:a9:43:00:19:11:
f1:ae:96:cc:6a:2e:40:27:77:c0:fb:b0:96:c2:40:b2:e6:2d:
5b:61:cf:bc:e6:60:02:a9:38:20:ce:b2:36:82:32:d3:bc:3f:
67:29:70:61:7e:dc:71:38:da:49:f6:9c:e0:12:ae:3f:1e:1b:
a9:75:86:ec:56:c4:0f:3a:b0:ba:78:a5:92:8d:73:13:50:ca:
ec:c2:f3:bd:62:6a:da:a2:a8:23:b6:41:97:00:51:5b:0c:6e:
f9:73:f4:ba:cb:94:ec:e1:f7:38:49:5a:76:79:f8:01:8d:d9:
47:a1:ca:f4:ac:f3:ac:9f:1a:f6:e4:4b:ee:f0:65:97:2d:c3:
e7:5c:7a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf3Y581VETlM5s5+8uPZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTk5MzljZTFjNmFhOWJlYmJiNjU4MGUxNTZlZWJkODcx
ZGYzYjIwHhcNMjYwNzIzMTUwMjAyWhcNMjYwNzI0MTUwMjAyWjAzMTEwLwYDVQQD
EyhiZWQ4MDE5NjU4NTI3OWExY2I4MjEwZGU5MzZlYzQ3ZTI4NzU0YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPMgIX6ZMDloPFQZy6u3NotXL0GG
+ZonlqoggvQjue4uj7k3vwNb6/nHquj/+2Uv3JSFewhQJmze6e8J9/ltDUW6mTM6
HAl2mMCanyKbwLZpWc9JWFGVM6viGeyDRflfZ/RF/ffDxQUyJ2XwA0SXmdTXccGZ
omwPAGN5U3nqZ2/MS2d840VZR6Kp7w+J3go6DSeHQHLB7bIszUUEEPCwuV3xVFyc
Z0Fs2+6Pvan+Y4So3DYRkEUWh/KZlb1sRjM4KBGq91JRfbaTukVSdhAh4LCGdcg4
RJB9WuI4DKKqlb43S5jNPMVvrsadjEQDhCJhvurQGAUbTt/SDO8VL595iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7YAZZYUnmhy4IQ3pNuxH4odUvIMB8GA1UdIwQY
MBaAFANZk5zhxqqb67tlgOFW7r2HHfOyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NWJiNGMtYjI4MS00Yjg0LTgxYzAt
YTk2MmMyYjdiMTUzLzEvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NWJiNGMtYjI4MS00Yjg0LTgxYzAtYTk2MmMyYjdiMTUz
LzEvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsrY89O9
02ky4wg8hvN0BPd5oqntgNJIdOvwCtjqU8rzBjgKcsYhUPF/YhX2BxAxmn3J6Gr1
brpiQcB/wyVHq8ZnqjllyM8/1vtidYlU1XQa4WCvDceC4wsh2gwja22tF1Diq2w8
oP/6JQMMhxVsI7jDUVKc39fPq6lDABkR8a6WzGouQCd3wPuwlsJAsuYtW2HPvOZg
Aqk4IM6yNoIy07w/ZylwYX7ccTjaSfac4BKuPx4bqXWG7FbEDzqwunilko1zE1DK
7MLzvWJq2qKoI7ZBlwBRWwxu+XP0usuU7OH3OEladnn4AY3ZR6HK9KzzrJ8a9uRL
7vBlly3D51x6MA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:12 2026 by rpki-client