Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: UQMHNM8yVEL8wGCWvKk9T5V4U6Ip1JKVfQRtiFfi8+4=
Subject key identifier: FA:9A:79:E0:58:F7:D7:35:0C:32:A0:7E:8D:1D:19:63:A4:E8:2F:28
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019F8F7F9AA07AEB0A690744BDD2A711C74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 19C1
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: GBVwJadkor4EDK8T9I9yQsNNc/bWnwcGnhhuW6bIOVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9a:a0:7a:eb:0a:69:07:44:bd:d2:a7:11:c7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=fa9a79e058f7d7350c32a07e8d1d1963a4e82f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:e6:5f:68:59:96:82:88:33:00:7e:07:d7:
a1:5b:bc:bb:a9:e9:dc:ed:25:ae:b6:ce:9c:7b:99:
b9:6f:f5:ba:17:32:6f:d2:17:42:5e:3f:59:5a:71:
7f:97:e9:9d:22:ac:14:98:ef:e7:6d:d8:02:0a:39:
53:90:38:ad:1c:4d:1a:41:f8:71:f9:5d:0c:11:0c:
39:0d:b4:d4:5e:99:6b:33:7f:eb:54:ab:34:4a:eb:
ab:95:dc:d3:b1:27:77:ea:f1:b3:b9:98:9e:c8:6c:
05:4c:98:8c:05:eb:c8:cc:6c:cd:8d:d6:99:8a:5f:
02:96:99:8b:b3:e6:8f:09:44:da:c4:39:39:13:c9:
51:5b:7b:c1:02:d7:c2:8d:81:fb:55:0d:21:06:34:
1b:4a:68:8e:74:9a:24:d0:00:c3:63:8a:12:41:84:
b5:ea:11:83:57:e0:c1:2a:3a:7d:b7:0e:f0:4b:ab:
ce:0e:a2:32:f0:46:49:e1:c4:b7:6f:3a:08:fc:77:
21:93:04:40:db:aa:42:cf:2d:96:bb:73:3a:6f:95:
a1:60:68:03:3a:67:de:7f:dd:32:fc:5e:b5:1e:2d:
5f:15:52:bb:d7:5c:d2:27:80:1a:2b:d7:ed:26:b3:
ae:45:8c:1c:8c:12:db:41:08:4d:5c:d7:28:27:d0:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:79:E0:58:F7:D7:35:0C:32:A0:7E:8D:1D:19:63:A4:E8:2F:28
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:ae:c5:5f:2b:ff:fe:a1:ff:54:cc:9e:bd:e0:1f:70:97:
8a:be:bf:77:7d:d5:df:98:a9:72:f6:1c:14:76:7b:44:69:25:
6c:ca:d9:aa:64:e6:66:c3:0d:4f:51:3f:1c:92:d0:e2:ea:7f:
f6:bf:5c:64:c7:46:95:55:89:98:72:2b:d6:63:ee:db:87:a7:
e2:c6:68:fa:e7:d6:52:2e:ef:18:b8:3a:61:bb:b2:24:d9:f4:
23:f5:50:2d:9c:6a:80:ae:b7:84:18:55:60:14:6f:ab:1e:4a:
73:a3:46:c6:84:36:03:50:b4:2c:b8:15:94:b7:fe:09:88:da:
53:e0:11:68:48:f4:ca:31:2c:82:c5:97:70:64:30:30:1b:39:
b8:1c:87:9e:22:92:e2:93:d3:4d:62:a3:42:9b:ad:18:75:bf:
bb:df:7b:df:a9:cd:59:a7:0a:3e:fe:37:71:c2:cc:1a:a8:07:
4e:cf:b7:11:08:6b:fb:f4:12:9a:e0:7e:c0:8c:84:61:8d:84:
d3:1c:ac:b0:5b:8e:31:59:54:00:64:4c:4d:89:db:1b:d3:bf:
d6:f3:80:26:5c:e0:ae:36:6e:93:25:47:73:27:63:f9:47:c5:
de:21:9e:41:1d:b0:94:9e:64:94:88:2c:55:d0:f4:b4:b7:f1:
32:a7:f4:b4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Pf5qgeusKaQdEvdKnEcdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjU0OWMxYzA5YzExMDkzYTM3MzNiODMwOGFlMDQ1MmNl
NjI0YmEwHhcNMjYwNzIzMTUwMjEyWhcNMjYwNzI0MTUwMjEyWjAzMTEwLwYDVQQD
EyhmYTlhNzllMDU4ZjdkNzM1MGMzMmEwN2U4ZDFkMTk2M2E0ZTgyZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m3mX2hZloKIMwB+B9ehW7y7qenc
7SWuts6ce5m5b/W6FzJv0hdCXj9ZWnF/l+mdIqwUmO/nbdgCCjlTkDitHE0aQfhx
+V0MEQw5DbTUXplrM3/rVKs0SuurldzTsSd36vGzuZieyGwFTJiMBevIzGzNjdaZ
il8ClpmLs+aPCUTaxDk5E8lRW3vBAtfCjYH7VQ0hBjQbSmiOdJok0ADDY4oSQYS1
6hGDV+DBKjp9tw7wS6vODqIy8EZJ4cS3bzoI/HchkwRA26pCzy2Wu3M6b5WhYGgD
Omfef90y/F61Hi1fFVK711zSJ4AaK9ftJrOuRYwcjBLbQQhNXNcoJ9AcOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPqaeeBY99c1DDKgfo0dGWOk6C8oMB8GA1UdIwQY
MBaAFPr1ScHAnBEJOjczuDCK4EUs5iS6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12Vkp3Y0NjRVFrNk56TzRNSXJnUlN6bUpMby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvN2RhNWI0LTRiOWItNGMyOC04NmM4
LWZlNTQxNzBkZWVhMS8xLzEtdlZKd2NDY0VRazZOek80TUlyZ1JTem1KTG8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VjLzdkYTViNC00YjliLTRjMjgtODZjOC1mZTU0MTcwZGVl
YTEvMS8xLXZWSndjQ2NFUWs2TnpPNE1JcmdSU3ptSkxvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5+u
xV8r//6h/1TMnr3gH3CXir6/d33V35ipcvYcFHZ7RGklbMrZqmTmZsMNT1E/HJLQ
4up/9r9cZMdGlVWJmHIr1mPu24en4sZo+ufWUi7vGLg6YbuyJNn0I/VQLZxqgK63
hBhVYBRvqx5Kc6NGxoQ2A1C0LLgVlLf+CYjaU+ARaEj0yjEsgsWXcGQwMBs5uByH
niKS4pPTTWKjQputGHW/u99736nNWacKPv43ccLMGqgHTs+3EQhr+/QSmuB+wIyE
YY2E0xyssFuOMVlUAGRMTYnbG9O/1vOAJlzgrjZukyVHcydj+UfF3iGeQR2wlJ5k
lIgsVdD0tLfxMqf0tA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:03 2026 by rpki-client