Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: EQqidPICxY5UAqb4vnV+PAheEpPKIWa3OfqO/8p+VTg=
Subject key identifier: 80:F8:4B:D1:22:02:E3:21:C5:56:D3:CE:DF:F2:F8:A2:34:F4:67:9E
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019F90FEEB0F67AA09FA1AD966A541515F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 22:00:52 +0000
Manifest this update: Thu 23 Jul 2026 22:00:52 +0000
Manifest next update: Fri 24 Jul 2026 22:00:52 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: KzD3LhBClDCnFqDsNGsv/TqjZhkZEe8Plaga5nnqVp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:eb:0f:67:aa:09:fa:1a:d9:66:a5:41:51:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Jul 23 22:00:52 2026 GMT
Not After : Jul 24 22:00:52 2026 GMT
Subject: CN=80f84bd12202e321c556d3cedff2f8a234f4679e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:46:9f:f8:94:0b:6c:f4:04:04:1d:18:2c:
c5:85:96:8a:aa:e0:52:2c:e7:cc:c9:57:a9:7b:fe:
11:63:f2:cc:21:fa:44:b1:2e:68:51:91:80:1c:99:
a5:a0:d7:1e:8c:d7:5a:12:4c:b4:7e:f8:45:eb:7b:
f3:99:a1:2a:6a:b1:a3:9f:8e:6c:90:cf:7c:6e:38:
a7:82:59:78:93:17:5d:ad:56:09:ed:2e:1d:4f:85:
28:ba:07:89:ad:45:f5:81:2a:8a:c9:f1:3b:de:81:
87:08:93:62:36:7d:92:f0:b0:7a:1f:1f:ec:2c:b5:
98:fd:8d:92:0a:c2:82:d8:27:4e:b5:22:8a:b0:44:
d3:05:48:eb:f9:c5:ca:c1:5b:ef:3a:62:17:b7:97:
d1:90:e5:2d:8c:3a:81:57:e5:1a:02:fd:38:97:1b:
71:b7:6e:1b:30:cd:7c:04:d3:4b:4c:c1:0f:46:f6:
c3:d1:b1:75:56:dd:f3:9a:8e:c1:0f:de:0b:b3:4c:
f5:ff:86:e6:fc:1c:b3:9b:70:0d:72:3d:9c:6d:29:
34:0f:c0:ae:78:a2:3c:08:bd:98:f1:fb:85:65:74:
e5:a9:73:54:8c:ee:a0:13:dd:b9:0f:18:97:c0:b0:
62:aa:5f:b9:1b:09:17:05:3d:4b:41:00:ea:87:72:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:4B:D1:22:02:E3:21:C5:56:D3:CE:DF:F2:F8:A2:34:F4:67:9E
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:dd:98:98:bf:0a:b8:7e:66:c3:a8:25:a1:ca:41:99:95:4d:
5d:d5:ca:b6:f2:d3:77:4c:f9:5c:e0:37:f4:33:e4:87:8a:0d:
35:e9:84:03:55:d9:b3:84:99:85:e4:64:e0:67:f6:e1:13:74:
9a:d7:d1:fe:3e:2d:a3:5f:a6:c2:e7:b4:24:06:77:bd:7d:8c:
f3:67:56:cd:82:4b:62:66:d5:e1:d9:ef:dc:25:be:f8:28:37:
7e:e4:e1:4b:60:0f:01:2b:e0:c9:ba:62:fa:6d:86:54:22:10:
fd:d3:04:3c:54:1d:4f:ed:02:53:95:5c:35:35:c5:4f:4b:73:
e1:71:9f:e5:07:a3:cb:d4:95:3a:1e:af:c7:12:4b:0a:23:66:
bb:fe:7f:c2:8c:8d:21:d2:e1:9a:70:df:75:60:81:3e:0c:e0:
51:d4:03:fb:5b:4f:48:69:f3:66:47:27:37:61:7d:99:3b:51:
40:85:54:8e:76:a3:77:3f:10:3c:62:17:ec:b2:66:fc:38:27:
57:a8:e6:8c:80:c5:1f:c6:86:1e:d4:67:55:e8:ea:a4:f6:30:
d0:f8:5f:f7:03:d0:d2:12:42:e9:66:cf:f2:87:ba:69:ef:ed:
df:dd:34:2c:60:e6:26:f3:43:45:73:f0:da:20:50:95:d5:c7:
1f:23:ea:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/usPZ6oJ+hrZZqVBUV9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmRkZTk1MGRhNTZmMTIwMzMyN2U1MGUyYjM5NWM0MDIy
NTE3OTgwHhcNMjYwNzIzMjIwMDUyWhcNMjYwNzI0MjIwMDUyWjAzMTEwLwYDVQQD
Eyg4MGY4NGJkMTIyMDJlMzIxYzU1NmQzY2VkZmYyZjhhMjM0ZjQ2NzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx51Gn/iUC2z0BAQdGCzFhZaKquBS
LOfMyVepe/4RY/LMIfpEsS5oUZGAHJmloNcejNdaEky0fvhF63vzmaEqarGjn45s
kM98bjingll4kxddrVYJ7S4dT4UougeJrUX1gSqKyfE73oGHCJNiNn2S8LB6Hx/s
LLWY/Y2SCsKC2CdOtSKKsETTBUjr+cXKwVvvOmIXt5fRkOUtjDqBV+UaAv04lxtx
t24bMM18BNNLTMEPRvbD0bF1Vt3zmo7BD94Ls0z1/4bm/Byzm3ANcj2cbSk0D8Cu
eKI8CL2Y8fuFZXTlqXNUjO6gE925DxiXwLBiql+5GwkXBT1LQQDqh3L9iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID4S9EiAuMhxVbTzt/y+KI09GeeMB8GA1UdIwQY
MBaAFNZt3pUNpW8SAzJ+UOKzlcQCJReYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAt
ODk3NTJlNGJmNWQzLzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAtODk3NTJlNGJmNWQz
LzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN2YmL8K
uH5mw6glocpBmZVNXdXKtvLTd0z5XOA39DPkh4oNNemEA1XZs4SZheRk4Gf24RN0
mtfR/j4to1+mwue0JAZ3vX2M82dWzYJLYmbV4dnv3CW++Cg3fuThS2APASvgybpi
+m2GVCIQ/dMEPFQdT+0CU5VcNTXFT0tz4XGf5Qejy9SVOh6vxxJLCiNmu/5/woyN
IdLhmnDfdWCBPgzgUdQD+1tPSGnzZkcnN2F9mTtRQIVUjnajdz8QPGIX7LJm/Dgn
V6jmjIDFH8aGHtRnVejqpPYw0Phf9wPQ0hJC6WbP8oe6ae/t3900LGDmJvNDRXPw
2iBQldXHHyPq2g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:23 2026 by rpki-client