Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: kVxqt1nBnK/wK1zUQdQbJdkLUJ25nh6NVPDa+Ep9++8=
Subject key identifier: 3F:FA:59:C0:82:60:5C:C5:3C:25:09:06:E9:5A:FF:4F:CA:1D:9A:4C
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019F90C868A7D9D1AFFC1AA77B4B92B64EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 19EA
Signing time: Thu 23 Jul 2026 21:01:20 +0000
Manifest this update: Thu 23 Jul 2026 21:01:20 +0000
Manifest next update: Fri 24 Jul 2026 21:01:20 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: nZkhH+H83BELjTytneTD8vJE2oKcZsJ8MykQ02BRbE8=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:68:a7:d9:d1:af:fc:1a:a7:7b:4b:92:b6:4e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jul 23 21:01:20 2026 GMT
Not After : Jul 24 21:01:20 2026 GMT
Subject: CN=3ffa59c082605cc53c250906e95aff4fca1d9a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:00:64:bb:aa:5b:b3:f8:26:a8:e3:a7:61:
ab:c3:73:01:ae:34:83:ea:40:1e:d6:ad:47:69:0e:
3f:47:4d:09:ec:f2:0a:87:71:85:09:d8:12:c6:43:
f5:87:a4:8f:d2:54:58:a6:e7:82:14:cc:8f:43:cf:
41:32:99:b4:29:1f:e4:cf:ca:a4:e9:f2:9a:8f:1e:
f9:ac:2a:59:4e:7f:c8:e5:2a:a5:ac:d2:db:0e:2a:
2f:c4:2e:52:ca:39:63:46:be:40:77:13:d1:7d:ac:
77:03:23:e4:88:14:76:20:e2:ef:30:53:c7:10:ee:
6f:29:3a:f4:35:59:09:e5:5f:e6:02:bf:20:05:a5:
97:e8:9f:cf:0f:16:eb:2d:96:14:90:03:61:6d:7e:
a8:58:cc:dc:73:26:b0:c8:f2:5e:9b:dd:60:ee:b9:
3d:0b:3e:00:ec:e7:58:44:32:c0:92:01:43:6a:65:
73:11:cc:27:68:61:6c:20:96:99:5c:ea:a3:75:df:
13:f5:85:c4:36:d1:bc:65:6c:3a:d9:94:27:da:e8:
76:b6:4d:70:96:8a:6e:46:9c:56:b6:5b:01:ec:78:
08:33:9a:81:10:d8:df:71:ca:a8:d9:4e:e2:5c:58:
65:c4:7d:09:3f:61:92:a6:e4:2f:92:2b:57:b5:4d:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:59:C0:82:60:5C:C5:3C:25:09:06:E9:5A:FF:4F:CA:1D:9A:4C
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:90:83:b9:af:ef:6c:aa:95:cc:e0:b1:4a:e2:51:69:73:
2b:67:1f:c3:83:16:d0:bc:bc:97:b9:82:a1:1b:83:1f:4e:6e:
5a:9f:8c:7e:5a:5d:f8:34:cb:4a:4c:88:be:0d:8f:7e:a3:ca:
60:e3:48:fe:89:ff:f1:d0:ce:28:49:4c:35:4b:a4:e8:7c:e7:
36:52:2d:5d:94:0d:d5:d4:93:43:94:a6:84:7a:9f:a6:8e:f4:
f7:36:9f:60:fa:23:61:a6:39:f6:c2:7e:83:63:8e:14:94:7a:
a5:bd:d8:61:18:fb:ce:e9:e2:3d:ab:c7:8f:49:2e:33:72:42:
0c:99:46:24:fe:cc:d7:04:22:d5:6b:66:db:de:40:f9:68:30:
70:11:01:09:ac:f6:20:71:46:75:1a:50:a9:85:3a:c1:65:0c:
4a:82:9a:88:04:e2:fc:c1:1f:be:2e:78:60:58:9f:83:71:f1:
2c:89:2a:ce:f6:49:a3:ec:e2:7b:cc:68:98:f7:96:43:0b:ad:
98:5a:71:01:e9:53:4e:f9:a9:7a:36:c1:bc:ac:60:4e:f5:f3:
07:e7:ca:c2:05:3a:26:4c:be:71:52:b3:42:db:1b:e2:82:11:
2b:04:83:c1:c1:be:3c:b8:91:07:10:ef:8c:5e:1b:b5:ac:17:
6e:90:13:25
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+QyGin2dGv/Bqne0uStk7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjYwNzIzMjEwMTIwWhcNMjYwNzI0MjEwMTIwWjAzMTEwLwYDVQQD
EygzZmZhNTljMDgyNjA1Y2M1M2MyNTA5MDZlOTVhZmY0ZmNhMWQ5YTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfoAZLuqW7P4Jqjjp2Grw3MBrjSD
6kAe1q1HaQ4/R00J7PIKh3GFCdgSxkP1h6SP0lRYpueCFMyPQ89BMpm0KR/kz8qk
6fKajx75rCpZTn/I5SqlrNLbDiovxC5SyjljRr5AdxPRfax3AyPkiBR2IOLvMFPH
EO5vKTr0NVkJ5V/mAr8gBaWX6J/PDxbrLZYUkANhbX6oWMzccyawyPJem91g7rk9
Cz4A7OdYRDLAkgFDamVzEcwnaGFsIJaZXOqjdd8T9YXENtG8ZWw62ZQn2uh2tk1w
lopuRpxWtlsB7HgIM5qBENjfccqo2U7iXFhlxH0JP2GSpuQvkitXtU205wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD/6WcCCYFzFPCUJBula/0/KHZpMMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YzL2EzMjk0Yi1kNDc4LTRkYmQtYWFlNS1mZDE2N2FkOTJh
OWQvMS8xLXdZYU9mQ2dONUl4RTlhNHU1dGIycld5OUdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwmQ
g7mv72yqlczgsUriUWlzK2cfw4MW0Ly8l7mCoRuDH05uWp+Mflpd+DTLSkyIvg2P
fqPKYONI/on/8dDOKElMNUuk6HznNlItXZQN1dSTQ5SmhHqfpo709zafYPojYaY5
9sJ+g2OOFJR6pb3YYRj7zuniPavHj0kuM3JCDJlGJP7M1wQi1Wtm295A+WgwcBEB
Caz2IHFGdRpQqYU6wWUMSoKaiATi/MEfvi54YFifg3HxLIkqzvZJo+zie8xomPeW
QwutmFpxAelTTvmpejbBvKxgTvXzB+fKwgU6Jky+cVKzQtsb4oIRKwSDwcG+PLiR
BxDvjF4btawXbpATJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:11 2026 by rpki-client