
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: sEj0GmdoKLCHosuzVN95TUQdNg5m7yO6oCv8v4+Mo/A=
Subject key identifier: C1:62:83:A7:34:70:7B:BF:60:67:5C:21:93:5F:78:88:91:0C:85:A4
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 019F8FB5B554DDCD762A997BF67BD67216C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 138E
Signing time: Thu 23 Jul 2026 16:01:18 +0000
Manifest this update: Thu 23 Jul 2026 16:01:18 +0000
Manifest next update: Fri 24 Jul 2026 16:01:18 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: AUpIq0kACuJMb+MElXEnZRTDRGFiIu6vG6mYw1b87NI=)
2: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (hash: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:b5:54:dd:cd:76:2a:99:7b:f6:7b:d6:72:16:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Jul 23 16:01:18 2026 GMT
Not After : Jul 24 16:01:18 2026 GMT
Subject: CN=c16283a734707bbf60675c21935f7888910c85a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:d5:c2:dc:74:bc:75:de:a9:af:f1:a5:67:
a8:b5:c5:ce:45:a8:2f:15:e1:c3:48:7f:cb:7b:35:
e8:69:ab:71:ea:f4:6e:0d:4b:20:49:68:f7:a7:be:
2d:9d:7c:28:a2:65:47:9c:03:91:03:27:de:eb:bf:
da:32:98:55:c1:36:b7:33:91:6f:05:c7:76:96:ce:
b7:9c:fb:07:eb:c2:9a:f7:ab:9d:75:76:08:aa:21:
90:17:52:08:58:e1:cf:d7:78:18:89:6a:78:82:87:
be:59:61:1e:ce:67:33:83:76:6d:33:6d:9d:76:98:
86:31:b4:93:12:bf:72:5f:10:c7:49:a7:d5:91:87:
04:b1:2e:5a:4c:ce:e4:91:f0:b1:ae:b5:67:d6:05:
8b:4f:41:de:1b:09:89:a6:c2:67:b9:ec:b3:17:58:
12:53:a6:4b:0a:42:c5:68:bf:f4:fa:0c:18:7d:a1:
09:60:3e:84:72:44:75:3d:28:28:7b:78:bb:e4:fe:
21:7a:b0:d3:8f:98:06:ae:7b:13:e8:0b:f3:2c:95:
bc:29:4c:48:d3:bf:36:93:26:07:1a:b2:5f:8d:71:
1d:68:b5:aa:09:57:b3:37:d9:7f:9c:e9:4d:0e:7b:
17:25:de:18:84:db:3f:5f:b6:57:2f:73:84:1f:7c:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:83:A7:34:70:7B:BF:60:67:5C:21:93:5F:78:88:91:0C:85:A4
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2d:4d:0b:62:74:b6:c1:71:b3:ef:dc:55:e6:ae:3b:bd:86:
6f:6e:98:f5:14:67:ef:2e:4d:32:c1:17:e2:a0:8c:91:ef:33:
9a:af:4b:4f:a8:5a:9f:52:fd:b6:70:d0:e4:ae:22:3a:6d:c5:
f1:e5:53:b3:76:b1:71:06:93:4c:e0:44:01:58:cb:b9:a5:08:
9f:d6:8b:ed:38:ec:f7:04:1a:b3:35:ef:4b:81:e5:55:2f:a2:
4a:1f:91:d5:ea:47:03:21:dc:05:34:d5:d6:ef:a9:30:0c:f4:
01:f0:77:e3:5a:48:5d:9f:69:d1:c6:07:1e:23:02:a3:5a:13:
6a:28:11:f4:f3:18:ec:70:5a:0f:9a:ad:88:0a:6b:69:9a:27:
75:03:3d:87:25:45:38:7a:c1:91:c5:11:09:f3:ac:5a:a9:8c:
e4:b5:ce:24:9f:2b:56:61:08:1e:0d:99:8b:00:a8:b3:3b:2e:
b0:96:7e:77:59:93:b0:cb:65:ff:14:2d:a0:c1:9f:ae:de:9c:
1e:85:7e:15:44:a0:89:e9:c5:92:bf:ec:1f:0a:69:56:28:f4:
19:db:22:23:db:0d:3c:1d:1a:15:f3:e7:fb:17:df:d5:01:c8:
fe:ab:54:d7:1f:02:63:83:89:a9:0d:ea:fc:90:87:ba:fa:52:
d5:98:03:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtbVU3c12Kpl79nvWchbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm
MmRhZDAwHhcNMjYwNzIzMTYwMTE4WhcNMjYwNzI0MTYwMTE4WjAzMTEwLwYDVQQD
EyhjMTYyODNhNzM0NzA3YmJmNjA2NzVjMjE5MzVmNzg4ODkxMGM4NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiPVwtx0vHXeqa/xpWeotcXORagv
FeHDSH/LezXoaatx6vRuDUsgSWj3p74tnXwoomVHnAORAyfe67/aMphVwTa3M5Fv
Bcd2ls63nPsH68Ka96uddXYIqiGQF1IIWOHP13gYiWp4goe+WWEezmczg3ZtM22d
dpiGMbSTEr9yXxDHSafVkYcEsS5aTM7kkfCxrrVn1gWLT0HeGwmJpsJnueyzF1gS
U6ZLCkLFaL/0+gwYfaEJYD6EckR1PSgoe3i75P4herDTj5gGrnsT6AvzLJW8KUxI
0782kyYHGrJfjXEdaLWqCVezN9l/nOlNDnsXJd4YhNs/X7ZXL3OEH3x76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFig6c0cHu/YGdcIZNfeIiRDIWkMB8GA1UdIwQY
MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt
Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj
LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVC1NC2J0
tsFxs+/cVeauO72Gb26Y9RRn7y5NMsEX4qCMke8zmq9LT6han1L9tnDQ5K4iOm3F
8eVTs3axcQaTTOBEAVjLuaUIn9aL7Tjs9wQaszXvS4HlVS+iSh+R1epHAyHcBTTV
1u+pMAz0AfB341pIXZ9p0cYHHiMCo1oTaigR9PMY7HBaD5qtiApraZondQM9hyVF
OHrBkcURCfOsWqmM5LXOJJ8rVmEIHg2ZiwCoszsusJZ+d1mTsMtl/xQtoMGfrt6c
HoV+FUSgienFkr/sHwppVij0GdsiI9sNPB0aFfPn+xff1QHI/qtU1x8CY4OJqQ3q
/JCHuvpS1ZgDOg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:50 2026 by rpki-client