
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
File: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft (raw, json)
Hash identifier: WpTW2fgXQ9037wFB8elD843P6hD2zqH47xUN/NAHr0Y=
Subject key identifier: 14:ED:E2:06:8D:61:D0:9E:04:24:D9:0C:63:C3:13:13:DC:2A:0F:AE
Authority key identifier: FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
Certificate issuer: /CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Certificate serial: 019F91359601F870A3AA6CCD5BEA841ACAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 23:00:35 +0000
Manifest this update: Thu 23 Jul 2026 23:00:35 +0000
Manifest next update: Fri 24 Jul 2026 23:00:35 +0000
Files and hashes: 1: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl (hash: NcqdR8GNophRuiZB0nWMsVRbfgm4kS6WK/Ubn7YYfB8=)
2: sjcD7P1b4OH3bAoChPJ2EGVO_80.roa (hash: 3ibINEJI2J0CI3oq9fJ1To5iRpHn9oYrPYwzYRGItP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:96:01:f8:70:a3:aa:6c:cd:5b:ea:84:1a:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Validity
Not Before: Jul 23 23:00:35 2026 GMT
Not After : Jul 24 23:00:35 2026 GMT
Subject: CN=14ede2068d61d09e0424d90c63c31313dc2a0fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:6c:75:8c:1c:83:96:2e:5b:44:6e:27:de:
49:c7:98:5a:c7:71:cd:a3:cf:b5:e6:ec:61:5f:45:
53:ef:72:a9:ed:87:f6:aa:93:8a:28:1f:2f:75:50:
a3:42:f9:45:4c:12:82:16:5c:ee:0b:aa:b0:94:30:
63:b4:0d:89:d0:e7:a9:cd:aa:9b:92:e7:d8:c2:04:
2f:b6:97:19:9b:fb:21:2d:1b:39:3a:4b:c5:81:10:
81:83:40:ad:b3:f2:68:ae:1b:f4:11:06:3f:2a:0e:
85:e6:45:96:1f:b6:00:b4:e1:87:fd:32:84:86:de:
32:d9:cd:20:f2:fd:6d:78:d5:d4:4c:be:24:19:45:
d5:d7:d3:d2:07:c1:a4:47:b1:46:8b:ac:68:c7:d4:
64:56:29:ed:e1:f3:41:86:e6:0d:d4:cf:bf:38:37:
75:6b:c2:79:46:f4:91:4a:64:44:5b:99:27:5f:83:
39:a0:09:a1:fd:0f:ff:de:a6:3c:af:d0:28:71:69:
b3:fd:a4:ee:6a:de:63:74:22:0e:ba:17:87:21:00:
3f:bb:11:31:c4:79:aa:22:3d:d8:a3:98:ae:d6:05:
ad:a8:1a:a3:0a:00:c5:6f:d6:c6:00:57:e3:08:ac:
95:b0:d4:49:8b:ad:58:cb:a0:a1:60:ec:5a:85:50:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:E2:06:8D:61:D0:9E:04:24:D9:0C:63:C3:13:13:DC:2A:0F:AE
X509v3 Authority Key Identifier:
keyid:FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:03:04:85:71:80:96:da:21:1f:63:c2:ad:8d:5e:8d:89:06:
8b:2d:8f:8d:42:df:4e:0a:4c:4c:96:5a:4b:97:07:7a:5a:f3:
cb:35:e7:ce:4f:4f:b2:e6:78:a2:2b:1d:4a:b6:53:d8:e0:8e:
d6:f8:4e:8b:3f:77:e9:12:40:a2:a2:35:04:e2:90:70:03:b0:
6e:7f:22:db:c8:89:29:04:1a:f7:66:56:42:28:e2:fa:80:fa:
fb:fb:7b:52:0a:bd:46:62:55:5c:9d:7b:f6:f2:3f:b6:32:05:
79:8a:c9:ea:fe:74:cb:4e:48:b0:65:82:37:dd:cc:71:d2:82:
14:1d:ee:38:cf:76:c0:ab:98:69:86:7f:3c:fa:e8:e0:7b:14:
56:85:a3:8f:55:7f:6d:8d:f2:a0:64:e1:53:8d:5c:61:7e:33:
fb:32:d3:61:94:3a:e1:d6:ed:b1:07:3d:0c:a0:3a:0a:1d:27:
22:9e:d6:88:2d:1a:a5:ea:7d:73:0e:82:f5:74:a6:74:aa:35:
78:51:23:d1:d7:8a:c4:4b:4d:3a:88:63:40:17:0f:38:b0:1d:
58:e6:03:6f:57:78:69:e9:ba:07:7a:46:d0:74:86:c3:d1:fa:
e0:56:ca:69:73:5e:08:c3:50:ed:d7:f8:fc:61:53:81:ca:91:
1d:14:3b:c4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+RNZYB+HCjqmzNW+qEGsqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjU4MGEzZGNjYWNmMWE0NWRiZmJkZDA1ZTU4Y2NhZDQy
YTdlMWMwHhcNMjYwNzIzMjMwMDM1WhcNMjYwNzI0MjMwMDM1WjAzMTEwLwYDVQQD
EygxNGVkZTIwNjhkNjFkMDllMDQyNGQ5MGM2M2MzMTMxM2RjMmEwZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjhsdYwcg5YuW0RuJ95Jx5hax3HN
o8+15uxhX0VT73Kp7Yf2qpOKKB8vdVCjQvlFTBKCFlzuC6qwlDBjtA2J0Oepzaqb
kufYwgQvtpcZm/shLRs5OkvFgRCBg0Cts/Jorhv0EQY/Kg6F5kWWH7YAtOGH/TKE
ht4y2c0g8v1teNXUTL4kGUXV19PSB8GkR7FGi6xox9RkVint4fNBhuYN1M+/ODd1
a8J5RvSRSmREW5knX4M5oAmh/Q//3qY8r9AocWmz/aTuat5jdCIOuheHIQA/uxEx
xHmqIj3Yo5iu1gWtqBqjCgDFb9bGAFfjCKyVsNRJi61Yy6ChYOxahVB35QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBTt4gaNYdCeBCTZDGPDExPcKg+uMB8GA1UdIwQY
MBaAFPq1gKPcys8aRdv73QXljMrUKn4cMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yV0FvOXpLenhwRjJfdmRCZVdNeXRRcWZody5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvMmY5ZDRhLTBlOTktNGI4My1iNTA3
LTNjZTU2MzU3ZWI0OS8xLzEtcldBbzl6S3p4cEYyX3ZkQmVXTXl0UXFmaHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I5LzJmOWQ0YS0wZTk5LTRiODMtYjUwNy0zY2U1NjM1N2Vi
NDkvMS8xLXJXQW85ekt6eHBGMl92ZEJlV015dFFxZmh3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAME
hXGAltohH2PCrY1ejYkGiy2PjULfTgpMTJZaS5cHelrzyzXnzk9PsuZ4oisdSrZT
2OCO1vhOiz936RJAoqI1BOKQcAOwbn8i28iJKQQa92ZWQiji+oD6+/t7Ugq9RmJV
XJ179vI/tjIFeYrJ6v50y05IsGWCN93McdKCFB3uOM92wKuYaYZ/PPro4HsUVoWj
j1V/bY3yoGThU41cYX4z+zLTYZQ64dbtsQc9DKA6Ch0nIp7WiC0apep9cw6C9XSm
dKo1eFEj0deKxEtNOohjQBcPOLAdWOYDb1d4aem6B3pG0HSGw9H64FbKaXNeCMNQ
7df4/GFTgcqRHRQ7xA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:50 2026 by rpki-client