Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
File: 1-_LbWO2p3N4jau7HeVUO9rjLRow.mft (raw, json)
Hash identifier: WnfEC1zMvmHlBwZCyAxcn2RRjmEz2WdfJbSUZHRL384=
Subject key identifier: E5:43:F7:5F:FB:4D:F8:3B:56:17:81:7B:C9:1B:C7:E1:E1:BC:1D:67
Authority key identifier: FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
Certificate issuer: /CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Certificate serial: 019F916C75CDFE19047D3C2979D7FEF6A96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:32 +0000
Manifest this update: Fri 24 Jul 2026 00:00:32 +0000
Manifest next update: Sat 25 Jul 2026 00:00:32 +0000
Files and hashes: 1: 1-_LbWO2p3N4jau7HeVUO9rjLRow.crl (hash: AQus0TevnCx4rzg03MdC/ufrcZDZUzrR8SLw2safeEw=)
2: 2EDW-s-ud7-nCTr1Sgos54mN1mM.roa (hash: YCcPBkAYBuUswz1BVwdFoQLrC8n9zW+jV/kRYtdf2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:75:cd:fe:19:04:7d:3c:29:79:d7:fe:f6:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Validity
Not Before: Jul 24 00:00:32 2026 GMT
Not After : Jul 25 00:00:32 2026 GMT
Subject: CN=e543f75ffb4df83b5617817bc91bc7e1e1bc1d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:1e:79:11:f3:94:01:23:4f:b6:d5:2a:73:
03:7a:b7:b4:a7:20:b3:d7:0e:b3:cc:89:f8:8d:87:
c3:f8:1e:5f:b1:a0:0a:88:e3:15:c7:d9:d7:3e:8a:
c8:f9:82:a6:7d:4d:c7:aa:03:9f:6a:1f:92:07:6b:
86:f9:d4:bb:d2:ca:7e:ee:44:0c:2e:a8:b9:08:94:
23:52:46:d6:60:32:8f:83:49:f2:cb:32:55:18:1f:
65:b3:d4:63:f7:7c:c4:f8:28:f4:4f:51:27:8d:75:
f5:ac:c9:f4:1e:52:f4:ce:cd:fc:08:0c:92:76:ae:
5b:0b:25:ce:72:35:40:39:1a:52:3c:13:76:f4:80:
90:1b:64:8e:62:26:61:b6:27:05:4f:95:57:d3:15:
89:31:7d:4b:b6:02:70:42:50:93:60:0a:32:70:6d:
97:d6:27:9f:42:e4:d1:74:10:50:aa:85:65:87:26:
3a:33:44:56:08:3b:70:2b:d0:ec:45:c5:f6:4b:a8:
45:f6:3f:32:7a:f0:81:3e:b1:24:d5:1d:f3:42:a2:
45:72:56:2e:7e:4e:b8:a4:0b:15:b1:52:a5:aa:99:
7b:2b:67:99:3b:6a:82:8c:ef:0b:db:9d:3c:30:2a:
6a:79:22:66:7f:2b:3e:f1:0d:ec:0a:11:66:65:8c:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:43:F7:5F:FB:4D:F8:3B:56:17:81:7B:C9:1B:C7:E1:E1:BC:1D:67
X509v3 Authority Key Identifier:
keyid:FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:07:26:b5:da:2d:10:5c:9a:bf:44:a7:98:77:bf:c6:02:b9:
ce:f3:fc:2b:60:80:17:1c:d9:48:49:78:6a:24:c7:85:78:06:
d9:4e:1f:d8:ea:40:a4:73:e1:70:20:b6:8f:ce:25:d4:68:05:
9a:0b:59:93:1e:14:6b:6f:aa:24:7c:f9:9c:b4:25:1a:7c:41:
94:45:a4:6f:e8:dd:e6:3b:ba:46:00:cb:59:63:32:e7:3f:74:
49:20:ed:0a:e2:99:77:7f:8d:be:a8:07:7f:7d:a2:19:ae:f1:
cb:b1:55:8d:27:df:ec:f9:d1:c9:ae:a2:0d:ce:dc:aa:d3:49:
64:32:39:2f:21:22:bd:27:1e:f5:b7:da:b3:da:a5:56:69:5d:
ec:d2:a1:b0:e1:c7:79:9e:df:38:c3:e6:62:b1:6b:17:88:3a:
73:fd:53:2d:ef:6f:a7:90:e1:3d:cb:25:e0:3f:1f:df:7c:60:
85:3d:58:db:9e:18:ef:1d:0b:9f:1f:47:2d:de:9a:dd:88:9b:
ec:bf:72:fa:1a:85:6a:0e:e2:31:b6:f7:01:2d:9c:52:9a:05:
d4:4e:3e:92:31:8d:f9:73:14:92:86:92:04:55:a9:dc:59:3e:
55:51:4a:ef:70:2d:b2:51:f8:81:ff:28:18:18:d2:f5:8a:b7:
02:0b:79:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+RbHXN/hkEfTwpedf+9qlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjJkYjU4ZWRhOWRjZGUyMzZhZWVjNzc5NTUwZWY2Yjhj
YjQ2OGMwHhcNMjYwNzI0MDAwMDMyWhcNMjYwNzI1MDAwMDMyWjAzMTEwLwYDVQQD
EyhlNTQzZjc1ZmZiNGRmODNiNTYxNzgxN2JjOTFiYzdlMWUxYmMxZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylgeeRHzlAEjT7bVKnMDere0pyCz
1w6zzIn4jYfD+B5fsaAKiOMVx9nXPorI+YKmfU3HqgOfah+SB2uG+dS70sp+7kQM
Lqi5CJQjUkbWYDKPg0nyyzJVGB9ls9Rj93zE+Cj0T1EnjXX1rMn0HlL0zs38CAyS
dq5bCyXOcjVAORpSPBN29ICQG2SOYiZhticFT5VX0xWJMX1LtgJwQlCTYAoycG2X
1iefQuTRdBBQqoVlhyY6M0RWCDtwK9DsRcX2S6hF9j8yevCBPrEk1R3zQqJFclYu
fk64pAsVsVKlqpl7K2eZO2qCjO8L2508MCpqeSJmfys+8Q3sChFmZYzSbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOVD91/7Tfg7VheBe8kbx+HhvB1nMB8GA1UdIwQY
MBaAFPvy21jtqdzeI2rux3lVDva4y0aMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fTGJXTzJwM040amF1N0hlVlVPOXJqTFJvdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMDk1YWM5LWMzZmEtNDY1ZC04MzFk
LTQ3Yzk1MDMzNmUyZi8xLzEtX0xiV08ycDNONGphdTdIZVZVTzlyakxSb3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzA5NWFjOS1jM2ZhLTQ2NWQtODMxZC00N2M5NTAzMzZl
MmYvMS8xLV9MYldPMnAzTjRqYXU3SGVWVU85cmpMUm93LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAcm
tdotEFyav0SnmHe/xgK5zvP8K2CAFxzZSEl4aiTHhXgG2U4f2OpApHPhcCC2j84l
1GgFmgtZkx4Ua2+qJHz5nLQlGnxBlEWkb+jd5ju6RgDLWWMy5z90SSDtCuKZd3+N
vqgHf32iGa7xy7FVjSff7PnRya6iDc7cqtNJZDI5LyEivSce9bfas9qlVmld7NKh
sOHHeZ7fOMPmYrFrF4g6c/1TLe9vp5DhPcsl4D8f33xghT1Y254Y7x0Lnx9HLd6a
3Yib7L9y+hqFag7iMbb3AS2cUpoF1E4+kjGN+XMUkoaSBFWp3Fk+VVFK73AtslH4
gf8oGBjS9Yq3Agt5ew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:33 2026 by rpki-client