Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: S6FMDXXsG1Pzz602e/5rhSqovKGwSv8D3PWIAONIy3Q=
Subject key identifier: 76:06:47:60:A3:1C:50:FA:61:18:78:93:4D:92:42:30:C8:72:8E:F9
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019F91DAA2BB0125C3AC1CE93337FA209E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 0653
Signing time: Fri 24 Jul 2026 02:00:52 +0000
Manifest this update: Fri 24 Jul 2026 02:00:52 +0000
Manifest next update: Sat 25 Jul 2026 02:00:52 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: 8D7tgPUHTAZU2FZlY+NTUVU8U+LhN66wgMqkykRZYRE=)
2: nj_5MaQooSjXGiQr1BUruywSxrU.roa (hash: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a2:bb:01:25:c3:ac:1c:e9:33:37:fa:20:9e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Jul 24 02:00:52 2026 GMT
Not After : Jul 25 02:00:52 2026 GMT
Subject: CN=76064760a31c50fa611878934d924230c8728ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:76:30:7d:fb:67:fc:8f:80:8b:5f:06:35:
b7:6d:20:08:0a:52:2a:7e:76:52:06:31:c0:a1:a9:
32:5f:fe:bf:f4:d9:9d:2e:06:e4:68:13:b9:8e:ad:
80:aa:74:83:24:65:b2:d3:95:5d:b6:74:f6:db:62:
48:78:77:eb:e8:a1:44:10:70:68:3d:c9:58:d5:67:
ae:f2:b0:cf:80:7f:ea:de:73:5a:20:5c:f4:89:67:
ed:29:5a:c7:1c:d2:da:78:d2:45:14:c4:76:1e:26:
23:f6:73:ea:75:d3:93:8f:28:af:59:1a:68:19:0b:
6d:9c:0b:ed:8c:24:a7:02:00:83:5b:cc:d0:e6:87:
c2:cf:d8:86:a7:a3:96:03:ff:13:65:14:ed:67:05:
71:02:ab:ec:20:8f:72:c5:9f:a9:76:ac:5f:3e:ef:
3d:aa:71:0e:65:cf:cc:d6:0f:c7:6c:8c:2d:4d:7f:
53:f0:32:61:f9:cc:db:8a:88:3f:f8:89:ed:03:73:
a7:2f:9c:90:38:e0:60:21:11:80:77:56:28:71:96:
b2:d3:37:f9:e9:ae:f1:2a:c5:e8:74:c6:f7:c8:dd:
3d:17:86:9a:9b:5f:41:ce:a5:3f:d5:e7:b9:50:40:
09:03:e6:44:a0:07:d6:b0:c0:ba:6c:38:79:21:09:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:47:60:A3:1C:50:FA:61:18:78:93:4D:92:42:30:C8:72:8E:F9
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:57:c7:ca:64:1b:96:a9:d3:8e:a7:00:65:d8:58:29:d4:
8d:22:65:7b:f6:a0:60:82:f8:15:8d:d7:48:93:a1:71:6b:8d:
cd:86:c4:93:0c:63:91:26:58:b8:f7:b4:76:12:92:6a:f2:7a:
27:3b:5a:57:9e:fc:d2:e0:eb:aa:db:9c:7d:63:f3:51:82:20:
b7:ca:b9:0a:00:78:4a:f7:91:14:43:f6:64:66:23:39:df:2e:
6d:f2:7b:fa:e2:c6:5a:64:26:0b:7e:da:19:0f:1d:03:96:9b:
dd:6d:97:b2:ac:80:71:1a:4f:d3:4d:69:a2:d6:03:4b:3c:cd:
15:2e:a7:0b:9f:59:84:6d:a5:fa:2e:de:e7:ce:9a:c0:e9:ff:
92:d2:b4:a3:48:29:3b:4c:fc:a4:b2:38:1b:92:4c:f2:4e:a5:
73:c6:84:41:08:fa:06:d8:a8:44:1c:55:3b:3a:02:35:e9:fe:
03:c4:85:fd:39:69:c5:7e:d0:ee:22:f5:35:22:d0:df:ee:03:
f6:62:26:25:99:0d:da:05:d4:58:ff:15:dc:a8:1c:51:f1:5f:
20:da:49:cc:39:a6:28:2c:49:dd:76:83:1d:e2:2b:ca:06:91:
fe:61:0e:f7:5a:8b:1d:1d:d3:78:3a:6f:08:65:d0:59:51:2b:
9b:22:ca:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2qK7ASXDrBzpMzf6IJ5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl
NzU1NDYwHhcNMjYwNzI0MDIwMDUyWhcNMjYwNzI1MDIwMDUyWjAzMTEwLwYDVQQD
Eyg3NjA2NDc2MGEzMWM1MGZhNjExODc4OTM0ZDkyNDIzMGM4NzI4ZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGV2MH37Z/yPgItfBjW3bSAIClIq
fnZSBjHAoakyX/6/9NmdLgbkaBO5jq2AqnSDJGWy05VdtnT222JIeHfr6KFEEHBo
PclY1Weu8rDPgH/q3nNaIFz0iWftKVrHHNLaeNJFFMR2HiYj9nPqddOTjyivWRpo
GQttnAvtjCSnAgCDW8zQ5ofCz9iGp6OWA/8TZRTtZwVxAqvsII9yxZ+pdqxfPu89
qnEOZc/M1g/HbIwtTX9T8DJh+czbiog/+IntA3OnL5yQOOBgIRGAd1YocZay0zf5
6a7xKsXodMb3yN09F4aam19BzqU/1ee5UEAJA+ZEoAfWsMC6bDh5IQnV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYGR2CjHFD6YRh4k02SQjDIco75MB8GA1UdIwQY
MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt
ODgwYTgxYjk5Y2M1LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1
LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4ZXx8pk
G5ap046nAGXYWCnUjSJle/agYIL4FY3XSJOhcWuNzYbEkwxjkSZYuPe0dhKSavJ6
JztaV5780uDrqtucfWPzUYIgt8q5CgB4SveRFEP2ZGYjOd8ubfJ7+uLGWmQmC37a
GQ8dA5ab3W2XsqyAcRpP001potYDSzzNFS6nC59ZhG2l+i7e586awOn/ktK0o0gp
O0z8pLI4G5JM8k6lc8aEQQj6BtioRBxVOzoCNen+A8SF/TlpxX7Q7iL1NSLQ3+4D
9mImJZkN2gXUWP8V3KgcUfFfINpJzDmmKCxJ3XaDHeIrygaR/mEO91qLHR3TeDpv
CGXQWVErmyLKUw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:58 2026 by rpki-client