Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: ZljBVRNq4YTC8w8GowU/H48965y1N36J26HpYjOkk1U=
Subject key identifier: B9:90:1C:E4:0C:DC:7F:DB:60:62:FB:7B:43:C9:1A:7B:81:31:4A:EC
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019F8FB4EE543D05274531420E16A2616AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 16:00:27 +0000
Manifest this update: Thu 23 Jul 2026 16:00:27 +0000
Manifest next update: Fri 24 Jul 2026 16:00:27 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: iy6PBDhYo049aFPbN3FjDy2SOrR81BQYqC4+e8kcfPY=)
2: GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa (hash: bXptPxFQyb9Owh/hKmiA83+wjy1OBwsMr11rFf9sFDQ=)
3: jn0yEdikXWBGn1EaR0b8w0TJFr8.roa (hash: 10DA5MXiJsweYaG/q6sof9ShkMYv66PwkP1hNlnqUDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:ee:54:3d:05:27:45:31:42:0e:16:a2:61:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jul 23 16:00:27 2026 GMT
Not After : Jul 24 16:00:27 2026 GMT
Subject: CN=b9901ce40cdc7fdb6062fb7b43c91a7b81314aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:f0:51:7d:df:18:bd:d2:b8:ea:79:fe:ed:
83:95:9a:73:b9:2f:8c:71:4f:ff:a8:eb:84:2e:4e:
4d:f9:dc:c1:b4:32:dc:55:17:b9:0b:1e:07:9a:7a:
47:29:3c:7c:4b:31:80:65:1d:c7:89:18:c3:2d:c4:
5a:b1:6f:17:ed:66:0c:8d:e4:7c:9b:f3:cf:77:0f:
8e:71:26:62:81:c2:77:90:07:ed:4c:6d:41:a4:ec:
0b:cd:de:9a:c0:a9:c7:e4:f3:05:73:8e:11:5a:62:
f7:f1:20:85:37:11:35:c5:c8:a7:81:83:09:69:c2:
5c:67:ca:1b:5b:d3:36:29:e5:bf:88:16:51:9d:bd:
81:22:7d:cb:40:45:71:84:7a:39:d1:d8:05:9f:af:
1a:a4:e0:15:67:9d:d2:85:87:51:37:76:9f:77:0b:
95:4e:b2:4d:47:ac:7b:d1:8b:bd:0e:50:ec:8b:32:
fb:a1:ae:e5:b3:b4:89:87:1d:8c:bf:c9:f1:88:25:
14:1c:44:af:1e:32:43:73:1c:65:c9:e1:de:3d:25:
6a:f7:27:51:2b:ea:a3:44:69:82:2b:fa:af:43:43:
8f:a4:c5:49:97:8f:4a:5d:c5:48:e2:02:51:95:3e:
c7:ca:77:d8:da:1c:4c:39:a0:d4:a5:ef:11:b9:26:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:1C:E4:0C:DC:7F:DB:60:62:FB:7B:43:C9:1A:7B:81:31:4A:EC
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c0:05:3a:fa:98:1f:4d:ab:f5:e5:38:1c:ef:28:30:4f:8d:
d4:87:51:ff:7e:8d:2a:29:66:55:21:8f:89:fa:29:9e:a1:8d:
4d:8b:7d:98:04:1a:21:55:ec:9c:24:fd:c7:19:77:9c:ab:dc:
02:3f:5b:20:7b:49:3e:1f:a5:69:50:63:98:8b:0e:d1:c1:8e:
04:fc:9d:8a:c8:40:a3:41:7f:71:d0:77:bb:61:af:b0:31:e4:
e2:78:fa:95:26:d9:52:17:7d:7f:e1:22:ba:98:86:8f:7d:11:
10:61:0f:97:dc:b1:cd:55:60:41:8a:7a:b7:24:d1:c6:fe:7d:
67:02:54:b5:e0:5f:3e:46:5d:07:92:83:14:48:e5:78:01:79:
6b:97:69:be:16:a9:b6:3b:86:f4:9b:c2:26:17:8c:cd:aa:6c:
ac:69:d4:02:7b:f6:27:c6:07:54:bf:fe:99:fb:6c:44:0c:37:
f7:a8:93:c4:f1:d7:46:2e:71:82:fb:39:1c:89:b2:e0:d2:b7:
9a:5a:5e:88:92:f0:75:df:3d:9c:05:42:af:e3:7d:b5:d1:43:
a7:0a:69:61:71:69:60:a6:07:07:8a:eb:38:68:13:72:73:fd:
21:79:63:a9:e9:82:93:b2:80:b8:b9:d4:86:5a:22:9a:ba:bb:
48:19:fb:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+PtO5UPQUnRTFCDhaiYWquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk
MDM5YjAwHhcNMjYwNzIzMTYwMDI3WhcNMjYwNzI0MTYwMDI3WjAzMTEwLwYDVQQD
EyhiOTkwMWNlNDBjZGM3ZmRiNjA2MmZiN2I0M2M5MWE3YjgxMzE0YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHXwUX3fGL3SuOp5/u2DlZpzuS+M
cU//qOuELk5N+dzBtDLcVRe5Cx4HmnpHKTx8SzGAZR3HiRjDLcRasW8X7WYMjeR8
m/PPdw+OcSZigcJ3kAftTG1BpOwLzd6awKnH5PMFc44RWmL38SCFNxE1xcingYMJ
acJcZ8obW9M2KeW/iBZRnb2BIn3LQEVxhHo50dgFn68apOAVZ53ShYdRN3afdwuV
TrJNR6x70Yu9DlDsizL7oa7ls7SJhx2Mv8nxiCUUHESvHjJDcxxlyeHePSVq9ydR
K+qjRGmCK/qvQ0OPpMVJl49KXcVI4gJRlT7HynfY2hxMOaDUpe8RuSZb5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLmQHOQM3H/bYGL7e0PJGnuBMUrsMB8GA1UdIwQY
MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy
LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk
MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMAF
OvqYH02r9eU4HO8oME+N1IdR/36NKilmVSGPifopnqGNTYt9mAQaIVXsnCT9xxl3
nKvcAj9bIHtJPh+laVBjmIsO0cGOBPydishAo0F/cdB3u2GvsDHk4nj6lSbZUhd9
f+EiupiGj30REGEPl9yxzVVgQYp6tyTRxv59ZwJUteBfPkZdB5KDFEjleAF5a5dp
vhaptjuG9JvCJheMzapsrGnUAnv2J8YHVL/+mftsRAw396iTxPHXRi5xgvs5HImy
4NK3mlpeiJLwdd89nAVCr+N9tdFDpwppYXFpYKYHB4rrOGgTcnP9IXljqemCk7KA
uLnUhloimrq7SBn7qA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:50:39 2026 by rpki-client