Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: aT2FlNdfMZa/bR8TlS2AhXzX74953FJeiuNuT5qLAVU=
Subject key identifier: C1:27:55:FD:ED:DD:46:95:4A:B1:5B:32:D2:22:0D:16:1C:50:46:A7
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 019F916C39A96D8AE2A6B35752791E5D9AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:00:16 +0000
Manifest this update: Fri 24 Jul 2026 00:00:16 +0000
Manifest next update: Sat 25 Jul 2026 00:00:16 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: UtHusPrEi719JMFtXAXmS6MZb/xHpsZ2IaG/Qc3zdX4=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:39:a9:6d:8a:e2:a6:b3:57:52:79:1e:5d:9a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Jul 24 00:00:16 2026 GMT
Not After : Jul 25 00:00:16 2026 GMT
Subject: CN=c12755fdeddd46954ab15b32d2220d161c5046a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:d8:c7:11:fa:48:28:fe:42:72:11:aa:91:
b8:f4:b7:85:ff:a1:f2:28:e5:3e:a7:e0:07:08:67:
cc:3f:ab:eb:48:32:a9:d6:8a:3c:b9:10:b8:d3:72:
84:a2:7d:f2:45:25:a5:c0:a1:e2:ed:e4:3f:d7:0f:
b0:2b:50:d8:24:d2:17:7d:df:02:d5:ec:30:c1:df:
d5:af:b4:08:40:c5:1f:8d:2e:3f:19:62:4e:90:c1:
0a:71:58:5d:a1:b2:03:10:3f:fc:02:20:9b:fd:ec:
d3:19:a6:c5:e3:f3:b8:4a:ca:e1:a1:70:52:a0:b8:
f6:b4:10:57:18:5d:bf:55:2b:45:41:9a:14:8d:cc:
67:3d:ae:e9:cc:06:a4:5c:e8:42:0d:e2:b7:6c:be:
fa:0c:6e:18:5a:aa:55:51:49:a7:ff:0c:fc:2c:7a:
51:eb:9e:07:f2:cb:01:2a:01:41:8c:ee:17:44:4b:
63:73:1e:3e:f4:46:77:4c:9b:db:bf:e7:e3:23:b4:
a6:b6:ca:09:d7:d5:d2:14:11:e2:26:24:d2:b7:69:
c1:71:c3:95:84:2e:c8:21:04:2b:57:df:86:6b:5c:
a0:dc:46:5c:17:51:64:6c:a1:32:5d:31:00:3d:e2:
56:bf:e0:54:98:80:8f:d9:ff:42:71:d2:48:75:5c:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:55:FD:ED:DD:46:95:4A:B1:5B:32:D2:22:0D:16:1C:50:46:A7
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:2b:9e:47:c1:4a:8d:52:4e:1f:3b:ff:62:87:f7:05:3b:
1a:1c:2f:f3:c3:26:7e:f2:36:91:0a:9a:f7:2c:c8:6c:34:12:
74:64:76:88:50:6a:a7:25:b3:b6:1d:5e:b7:0d:74:b0:98:78:
fa:63:ec:eb:f6:9b:90:7e:03:ec:8f:9b:71:42:47:45:ac:90:
f4:16:e8:09:69:cd:f0:86:c6:fa:4b:1c:f3:14:31:a0:b8:2e:
12:e0:25:eb:36:b1:e6:3f:10:db:e0:2b:2d:e0:3a:10:db:d4:
e1:a8:f7:66:c1:5a:0e:44:3a:0c:85:61:9e:3a:84:1b:e2:01:
64:ee:28:54:01:4b:be:bb:ae:4b:01:ce:6c:f2:aa:b4:0a:5f:
38:ef:54:0a:45:3b:72:04:04:7b:cb:76:a1:23:4e:8e:43:8e:
b8:10:28:5a:d3:17:0f:a6:ef:23:0f:52:6e:3b:7e:b1:ae:2f:
05:00:ee:71:fa:14:08:e9:a7:e7:be:7d:4b:6e:b3:6f:ba:0e:
30:4e:19:42:30:29:70:6d:ce:e5:32:4e:d6:6e:c6:44:27:bc:
11:c0:e8:23:ba:a3:da:e1:8d:43:cc:e0:71:75:a9:b0:f6:c8:
b2:cc:0d:b4:d4:db:74:a2:2e:0e:be:66:35:0f:3a:cf:e6:6e:
a7:0a:9d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbDmpbYriprNXUnkeXZqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODViNmU5ZDg5ZmIwMTAzNjk5NzFlZDg4ODU3MjA1OTg1
ZDQ5MTgwHhcNMjYwNzI0MDAwMDE2WhcNMjYwNzI1MDAwMDE2WjAzMTEwLwYDVQQD
EyhjMTI3NTVmZGVkZGQ0Njk1NGFiMTViMzJkMjIyMGQxNjFjNTA0NmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlHYxxH6SCj+QnIRqpG49LeF/6Hy
KOU+p+AHCGfMP6vrSDKp1oo8uRC403KEon3yRSWlwKHi7eQ/1w+wK1DYJNIXfd8C
1ewwwd/Vr7QIQMUfjS4/GWJOkMEKcVhdobIDED/8AiCb/ezTGabF4/O4SsrhoXBS
oLj2tBBXGF2/VStFQZoUjcxnPa7pzAakXOhCDeK3bL76DG4YWqpVUUmn/wz8LHpR
654H8ssBKgFBjO4XREtjcx4+9EZ3TJvbv+fjI7SmtsoJ19XSFBHiJiTSt2nBccOV
hC7IIQQrV9+Ga1yg3EZcF1FkbKEyXTEAPeJWv+BUmICP2f9CcdJIdVxZQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEnVf3t3UaVSrFbMtIiDRYcUEanMB8GA1UdIwQY
MBaAFNSFtunYn7AQNplx7YiFcgWYXUkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMt
N2FjNjgwZWQ1ZGQ3LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMtN2FjNjgwZWQ1ZGQ3
LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTQrnkfB
So1STh87/2KH9wU7Ghwv88MmfvI2kQqa9yzIbDQSdGR2iFBqpyWzth1etw10sJh4
+mPs6/abkH4D7I+bcUJHRayQ9BboCWnN8IbG+ksc8xQxoLguEuAl6zax5j8Q2+Ar
LeA6ENvU4aj3ZsFaDkQ6DIVhnjqEG+IBZO4oVAFLvruuSwHObPKqtApfOO9UCkU7
cgQEe8t2oSNOjkOOuBAoWtMXD6bvIw9Sbjt+sa4vBQDucfoUCOmn5759S26zb7oO
ME4ZQjApcG3O5TJO1m7GRCe8EcDoI7qj2uGNQ8zgcXWpsPbIsswNtNTbdKIuDr5m
NQ86z+ZupwqdiQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:11 2026 by rpki-client