Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: EH6MZ5t1f+dI5x49fzjfj4zz9QLWwg3alAE13gw6H/w=
Subject key identifier: 29:79:E4:B2:B0:D4:B9:C0:1E:07:0E:83:DC:51:B3:3E:98:3C:28:38
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019F9135A9C11A6847F24136592D2FE866E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 0660
Signing time: Thu 23 Jul 2026 23:00:40 +0000
Manifest this update: Thu 23 Jul 2026 23:00:40 +0000
Manifest next update: Fri 24 Jul 2026 23:00:40 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: IiPaW8BHZu2w9pCRG32FE+i17xCfa1xA1wEkYfIz/ag=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:a9:c1:1a:68:47:f2:41:36:59:2d:2f:e8:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Jul 23 23:00:40 2026 GMT
Not After : Jul 24 23:00:40 2026 GMT
Subject: CN=2979e4b2b0d4b9c01e070e83dc51b33e983c2838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:06:45:62:3a:59:fa:e0:07:4f:1e:60:bb:
d8:9f:ef:27:7b:40:05:51:b5:fd:22:0b:45:93:88:
ee:28:c0:90:be:2a:ce:ad:79:70:91:bb:79:5f:2c:
1d:3f:01:6a:3a:2c:d5:d0:4f:c4:b0:13:c5:c3:89:
90:03:1a:cd:6a:50:fa:c0:eb:0c:42:4e:ef:32:58:
25:99:d3:7a:d6:8e:d2:0a:e0:96:b7:76:d0:3e:6e:
08:34:f3:ae:99:76:98:dc:93:e3:2a:83:65:ec:6a:
55:8b:aa:ad:37:a2:33:aa:e3:a4:d9:8b:0a:07:6b:
c8:dd:a4:3d:67:a6:a9:60:b9:4d:70:37:59:e7:0d:
a5:45:c1:d1:3a:56:ac:cd:63:b0:29:3a:54:44:d8:
79:1f:60:79:29:84:a2:dc:23:8a:96:de:20:05:8b:
87:69:1b:7b:e2:b3:88:82:38:e9:67:3f:33:a0:24:
74:3c:ec:a8:6b:dc:cb:36:d9:c2:be:77:2c:47:44:
5b:f1:81:42:08:a3:43:c4:d7:8e:c2:18:03:a1:c9:
83:4d:d6:dc:cb:28:3e:2d:fa:70:67:91:cf:7e:77:
70:00:a3:e2:6b:3f:3a:fa:e0:78:88:d2:73:f6:08:
e4:11:a2:ac:86:f6:8e:8a:79:9e:08:7a:20:c9:9f:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:E4:B2:B0:D4:B9:C0:1E:07:0E:83:DC:51:B3:3E:98:3C:28:38
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fb:28:db:20:b4:24:22:2f:4d:85:12:56:fd:f5:b5:a0:ab:
98:3e:8d:fd:ba:c2:c5:39:66:8a:2f:de:d7:34:a3:da:87:01:
1e:a5:15:fb:e1:ff:f4:f7:1e:b8:a6:1e:e0:9e:7d:2f:a4:de:
b2:f8:4f:bb:66:3c:f1:fc:b0:b7:23:4c:df:f4:32:29:cc:d8:
98:20:70:7a:bb:f8:d0:7f:7e:87:3e:cc:fe:13:12:82:2f:4d:
19:54:cd:c5:95:71:79:c0:72:12:86:00:70:a0:7f:52:12:50:
83:9b:e5:e5:90:30:09:b3:73:19:d3:96:57:e2:d8:9c:c2:a5:
b4:c6:cd:7b:d1:a7:21:d9:a6:b4:23:f6:b7:81:65:7e:26:4c:
57:84:b5:5a:46:58:3a:4a:f1:49:74:35:b2:44:bc:4d:af:c9:
7b:34:b3:47:f9:cf:18:51:77:54:73:57:3c:72:cb:f0:2a:9b:
20:a1:b0:84:5b:c4:44:e1:94:d0:76:05:9e:a2:13:0a:eb:f1:
7a:49:38:74:53:ba:f2:6b:9b:ab:4e:d4:ec:d7:b1:b5:24:ab:
f5:30:02:d3:71:0b:96:57:c7:b9:29:68:9d:47:a9:5b:65:1d:
25:6a:e5:f6:be:d8:91:21:63:2b:a5:dc:77:20:63:cc:ae:4f:
8f:0f:8d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNanBGmhH8kE2WS0v6GbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MWIwODFjMGRmOTk0MGEyYjAyMGE0ZWJlOGE5NzQ5Y2Jm
ZWFkNTUwHhcNMjYwNzIzMjMwMDQwWhcNMjYwNzI0MjMwMDQwWjAzMTEwLwYDVQQD
EygyOTc5ZTRiMmIwZDRiOWMwMWUwNzBlODNkYzUxYjMzZTk4M2MyODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJgGRWI6WfrgB08eYLvYn+8ne0AF
UbX9IgtFk4juKMCQvirOrXlwkbt5XywdPwFqOizV0E/EsBPFw4mQAxrNalD6wOsM
Qk7vMlglmdN61o7SCuCWt3bQPm4INPOumXaY3JPjKoNl7GpVi6qtN6IzquOk2YsK
B2vI3aQ9Z6apYLlNcDdZ5w2lRcHROlaszWOwKTpURNh5H2B5KYSi3COKlt4gBYuH
aRt74rOIgjjpZz8zoCR0POyoa9zLNtnCvncsR0Rb8YFCCKNDxNeOwhgDocmDTdbc
yyg+LfpwZ5HPfndwAKPiaz86+uB4iNJz9gjkEaKshvaOinmeCHogyZ9dMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl55LKw1LnAHgcOg9xRsz6YPCg4MB8GA1UdIwQY
MBaAFNQbCBwN+ZQKKwIKTr6Kl0nL/q1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNzg3YTItZDI4Yy00MzZkLTg1ZTkt
NWNlYjM0NTY0ZjA5LzEvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNzg3YTItZDI4Yy00MzZkLTg1ZTktNWNlYjM0NTY0ZjA5
LzEvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfso2yC0
JCIvTYUSVv31taCrmD6N/brCxTlmii/e1zSj2ocBHqUV++H/9PceuKYe4J59L6Te
svhPu2Y88fywtyNM3/QyKczYmCBwerv40H9+hz7M/hMSgi9NGVTNxZVxecByEoYA
cKB/UhJQg5vl5ZAwCbNzGdOWV+LYnMKltMbNe9GnIdmmtCP2t4FlfiZMV4S1WkZY
OkrxSXQ1skS8Ta/JezSzR/nPGFF3VHNXPHLL8CqbIKGwhFvEROGU0HYFnqITCuvx
ekk4dFO68mubq07U7NextSSr9TAC03ELllfHuSlonUepW2UdJWrl9r7YkSFjK6Xc
dyBjzK5Pjw+N3g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:53 2026 by rpki-client