Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: BhL/h7yWB29eWb2pP+5lIOUjaCJs2KEYm2y0MjdfT8Y=
Subject key identifier: 99:C2:EA:0F:0F:36:20:F5:34:22:34:94:E5:46:C8:26:29:E6:DD:66
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019F916D018B1F39B774C502C1E7A37A67B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:01:07 +0000
Manifest this update: Fri 24 Jul 2026 00:01:07 +0000
Manifest next update: Sat 25 Jul 2026 00:01:07 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: 86IPbRuNCQ8Hl62uxUJEOgp0ZnhGzeih6cVgPvC2bf4=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:01:8b:1f:39:b7:74:c5:02:c1:e7:a3:7a:67:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Jul 24 00:01:07 2026 GMT
Not After : Jul 25 00:01:07 2026 GMT
Subject: CN=99c2ea0f0f3620f534223494e546c82629e6dd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:6f:76:cc:d2:bb:cb:2f:4b:c1:b3:51:90:
7a:08:99:df:f6:8c:95:5d:54:85:d8:17:f6:fc:b7:
4d:09:f3:44:12:34:54:e5:1f:af:8e:e9:7f:b7:bc:
70:8a:b6:0a:56:56:cd:d5:b7:5c:f2:ef:1c:94:d0:
76:11:5d:3c:a4:a1:41:5c:d1:c6:eb:14:7d:b6:e0:
ec:4c:eb:1c:c3:39:00:da:7a:5d:4b:2a:fa:84:6f:
1b:80:32:b6:aa:02:85:c9:13:5c:46:71:66:9b:0c:
74:6a:25:66:b0:b4:de:5f:07:69:e9:be:96:0b:df:
cd:04:df:3f:f6:82:53:f0:8c:75:9a:21:3e:a1:17:
30:b7:55:43:fb:ec:ed:44:dd:af:12:db:6f:19:cd:
fe:57:c2:46:2b:9b:e5:c6:5e:d7:15:69:3c:83:e3:
8e:46:c8:91:e1:8a:e3:36:d6:77:a0:1d:62:9c:8a:
b2:78:af:dc:4e:47:f2:c4:61:a0:8d:13:63:bd:6a:
fb:99:2c:ee:a2:ba:1a:49:95:f9:79:c3:66:1c:29:
b7:c5:0f:d5:66:76:6a:f5:37:d6:d4:e4:b9:f9:b9:
af:4b:1d:0e:b3:19:e3:7f:ce:0c:bb:2c:c7:68:c8:
03:b0:ed:18:e6:68:3f:f9:be:41:ac:c7:fd:7d:d0:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:EA:0F:0F:36:20:F5:34:22:34:94:E5:46:C8:26:29:E6:DD:66
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:48:32:20:7a:90:32:72:d7:64:26:7b:e1:1d:5b:0e:09:64:
8d:8b:47:c5:29:1d:0c:dd:fc:1e:2c:b0:c3:6c:f8:a4:58:4e:
eb:78:4d:ba:01:d6:12:e7:8f:0a:af:24:f1:46:64:69:5b:2e:
64:48:95:86:25:67:ae:30:90:5f:8f:ae:5b:f6:e1:eb:be:82:
4b:8e:9e:d7:01:e7:73:57:a7:41:8f:9c:bd:f3:4e:13:ac:1d:
0e:dd:b8:fb:13:75:29:ee:ad:07:58:c9:b2:1e:2d:d8:9a:d9:
17:a5:54:b5:8c:7a:bb:7d:1a:cc:49:6f:92:1f:da:c7:bd:40:
f3:53:cc:a9:de:c1:03:df:60:a2:5b:35:a0:5e:d3:4e:f1:2c:
8e:b6:fe:65:0b:40:5a:b7:2b:cc:cc:45:25:b5:76:68:d4:ac:
1c:33:d3:04:67:89:03:c5:58:04:89:95:2d:81:23:0a:91:65:
8f:7a:ce:13:ac:6f:d4:ed:3a:5e:00:9a:8e:4f:1e:51:31:9f:
f6:64:cc:de:4a:ef:90:e3:a4:a8:bb:36:ad:c7:0c:d1:41:96:
8c:96:4e:50:8b:f9:2e:d7:ce:82:f5:ba:47:45:0b:68:8f:4e:
27:11:8d:71:92:8a:d6:8b:44:ad:12:a0:3b:08:31:f3:c9:ae:
7e:54:a3:59
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+RbQGLHzm3dMUCweejemezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy
Y2FjMzQwHhcNMjYwNzI0MDAwMTA3WhcNMjYwNzI1MDAwMTA3WjAzMTEwLwYDVQQD
Eyg5OWMyZWEwZjBmMzYyMGY1MzQyMjM0OTRlNTQ2YzgyNjI5ZTZkZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNpvdszSu8svS8GzUZB6CJnf9oyV
XVSF2Bf2/LdNCfNEEjRU5R+vjul/t7xwirYKVlbN1bdc8u8clNB2EV08pKFBXNHG
6xR9tuDsTOscwzkA2npdSyr6hG8bgDK2qgKFyRNcRnFmmwx0aiVmsLTeXwdp6b6W
C9/NBN8/9oJT8Ix1miE+oRcwt1VD++ztRN2vEttvGc3+V8JGK5vlxl7XFWk8g+OO
RsiR4YrjNtZ3oB1inIqyeK/cTkfyxGGgjRNjvWr7mSzuoroaSZX5ecNmHCm3xQ/V
ZnZq9TfW1OS5+bmvSx0Osxnjf84MuyzHaMgDsO0Y5mg/+b5BrMf9fdAWYwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJnC6g8PNiD1NCI0lOVGyCYp5t1mMB8GA1UdIwQY
MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm
LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl
OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkgy
IHqQMnLXZCZ74R1bDglkjYtHxSkdDN38Hiyww2z4pFhO63hNugHWEuePCq8k8UZk
aVsuZEiVhiVnrjCQX4+uW/bh676CS46e1wHnc1enQY+cvfNOE6wdDt24+xN1Ke6t
B1jJsh4t2JrZF6VUtYx6u30azElvkh/ax71A81PMqd7BA99gols1oF7TTvEsjrb+
ZQtAWrcrzMxFJbV2aNSsHDPTBGeJA8VYBImVLYEjCpFlj3rOE6xv1O06XgCajk8e
UTGf9mTM3krvkOOkqLs2rccM0UGWjJZOUIv5LtfOgvW6R0ULaI9OJxGNcZKK1otE
rRKgOwgx88muflSjWQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:37 2026 by rpki-client