Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
File: 1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft (raw, json)
Hash identifier: 29BaC3liFdckuPLmwjEzr4mJljoUbGJNTrr5PIXUhf8=
Subject key identifier: FB:11:70:26:C3:24:94:30:F1:A4:46:3F:2D:44:30:58:44:8B:39:DD
Authority key identifier: D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
Certificate issuer: /CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Certificate serial: 019F9022D09017B59609741DD1BD336F6EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
Manifest number: 2A
Signing time: Thu 23 Jul 2026 18:00:28 +0000
Manifest this update: Thu 23 Jul 2026 18:00:28 +0000
Manifest next update: Fri 24 Jul 2026 18:00:28 +0000
Files and hashes: 1: 1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl (hash: J6I+Ode3zNtFqW1ldRsJxHx/PepCf1zxAQ3uHimteTc=)
2: HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa (hash: sd3DHouChJiiWx6aUYWxL5mwg+5RY2ZI/mpyAHXQkl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d0:90:17:b5:96:09:74:1d:d1:bd:33:6f:6e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Validity
Not Before: Jul 23 18:00:28 2026 GMT
Not After : Jul 24 18:00:28 2026 GMT
Subject: CN=fb117026c3249430f1a4463f2d443058448b39dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:4f:81:f3:7d:e8:03:9f:bd:1f:9e:4a:7c:
67:fb:1c:54:66:6c:fc:40:97:4e:2a:50:ce:54:2a:
7a:ef:b1:c6:df:70:11:41:c0:15:bf:56:18:74:0e:
c0:86:67:9c:88:43:24:59:02:85:98:76:7c:6d:29:
64:fe:f6:82:84:ba:97:1a:54:0e:5a:88:f6:66:f4:
2b:20:be:74:c4:8c:1a:fe:6e:29:47:b1:1d:1e:da:
ef:68:20:6c:3b:7e:c8:60:0e:0c:be:e9:58:58:d3:
4a:6e:b9:2f:fa:8a:54:40:90:58:ec:87:4f:33:6f:
99:ef:45:f4:ae:54:b9:b9:6d:a4:79:75:c5:65:9b:
5d:b5:e6:98:59:2d:69:d7:c4:9f:b3:24:57:7d:11:
55:37:b4:7c:9f:9c:0e:5a:57:10:88:4d:1d:f1:ab:
23:9b:ee:eb:c5:44:ba:d2:7b:f0:97:d6:58:65:47:
38:44:df:1f:1a:f1:9f:b6:7a:b6:91:d1:11:82:ec:
d3:1f:9e:61:46:3d:66:55:b7:d6:87:01:0a:6d:bf:
62:f2:1a:cd:29:a8:2e:75:fa:25:ec:e9:b3:fb:fd:
75:49:14:57:85:30:14:b5:8f:65:85:c6:7b:df:d3:
10:f9:c3:b7:07:4c:86:59:5c:1f:ab:e4:a0:fd:2f:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:11:70:26:C3:24:94:30:F1:A4:46:3F:2D:44:30:58:44:8B:39:DD
X509v3 Authority Key Identifier:
keyid:D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b0:46:0b:bd:8e:6c:c7:5f:2b:04:38:c4:e4:90:87:4d:1b:
23:39:f9:f3:73:ff:4f:60:85:76:d4:ae:4c:78:09:f9:05:0d:
4e:49:85:17:a2:7c:46:b7:14:7c:f3:92:b5:6a:a4:86:49:c7:
17:74:ab:12:34:b8:94:99:f3:71:47:29:1d:84:ec:4c:64:2f:
2f:2f:c8:16:58:9a:29:72:6d:d5:d4:71:26:3b:c5:21:13:5d:
eb:cc:40:10:a7:c6:e1:f2:30:2c:78:f7:96:e3:d5:e4:1b:28:
d5:81:e1:6e:50:6f:10:df:49:86:94:7e:bd:2d:44:98:78:4a:
44:3c:f3:93:c3:00:68:df:39:54:1f:e7:bd:86:a1:d9:0f:e4:
d9:0c:cc:53:00:6d:a6:2a:98:37:72:b8:c7:5e:5f:02:d8:f6:
7b:c2:cc:6b:bd:20:63:42:7d:98:30:ed:74:7f:a2:a0:ce:9a:
0e:cf:11:e4:a5:35:dc:05:ee:a3:7f:48:99:9c:7b:37:3c:0a:
3d:b6:6a:9a:a9:a5:ca:b2:fa:ea:5e:32:bc:46:87:33:e8:4a:
80:68:97:04:49:b6:e4:ca:95:80:b0:01:9d:35:68:89:5b:c5:
69:05:bb:7b:f2:f3:45:8a:54:00:88:05:08:05:89:b5:e4:2b:
5f:f9:1b:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QItCQF7WWCXQd0b0zb27EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YmIxMzIwMjdmZTY1NTA0NzZjY2FjNDNlOTJmOGFkODEz
ZjBmMzAwHhcNMjYwNzIzMTgwMDI4WhcNMjYwNzI0MTgwMDI4WjAzMTEwLwYDVQQD
EyhmYjExNzAyNmMzMjQ5NDMwZjFhNDQ2M2YyZDQ0MzA1ODQ0OGIzOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsZPgfN96AOfvR+eSnxn+xxUZmz8
QJdOKlDOVCp677HG33ARQcAVv1YYdA7AhmeciEMkWQKFmHZ8bSlk/vaChLqXGlQO
Woj2ZvQrIL50xIwa/m4pR7EdHtrvaCBsO37IYA4MvulYWNNKbrkv+opUQJBY7IdP
M2+Z70X0rlS5uW2keXXFZZtdteaYWS1p18SfsyRXfRFVN7R8n5wOWlcQiE0d8asj
m+7rxUS60nvwl9ZYZUc4RN8fGvGftnq2kdERguzTH55hRj1mVbfWhwEKbb9i8hrN
Kagudfol7Omz+/11SRRXhTAUtY9lhcZ739MQ+cO3B0yGWVwfq+Sg/S8eiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsRcCbDJJQw8aRGPy1EMFhEizndMB8GA1UdIwQY
MBaAFNa7EyAn/mVQR2zKxD6S+K2BPw8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXJzVElDZi1aVkJIYk1yRVBwTDRyWUVfRHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGVhZDEtYzllYy00Y2M2LTg0YzQt
ZTMwY2EwNzIwZWExLzEvMXJzVElDZi1aVkJIYk1yRVBwTDRyWUVfRHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83ZGVhZDEtYzllYy00Y2M2LTg0YzQtZTMwY2EwNzIwZWEx
LzEvMXJzVElDZi1aVkJIYk1yRVBwTDRyWUVfRHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbBGC72O
bMdfKwQ4xOSQh00bIzn583P/T2CFdtSuTHgJ+QUNTkmFF6J8RrcUfPOStWqkhknH
F3SrEjS4lJnzcUcpHYTsTGQvLy/IFliaKXJt1dRxJjvFIRNd68xAEKfG4fIwLHj3
luPV5Bso1YHhblBvEN9JhpR+vS1EmHhKRDzzk8MAaN85VB/nvYah2Q/k2QzMUwBt
piqYN3K4x15fAtj2e8LMa70gY0J9mDDtdH+ioM6aDs8R5KU13AXuo39ImZx7NzwK
PbZqmqmlyrL66l4yvEaHM+hKgGiXBEm25MqVgLABnTVoiVvFaQW7e/LzRYpUAIgF
CAWJteQrX/kbAg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:02 2026 by rpki-client