Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: 1GDgX9fYq6rMqu97/wsnBE5T4/PVJaiUx6M6UFOCins=
Subject key identifier: E5:1B:0A:DD:93:96:95:89:F1:D1:78:4D:89:DB:0F:A9:26:36:E2:6E
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 019FA93E560C47FC931C040540A7F16703E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 15:01:02 +0000
Manifest this update: Tue 28 Jul 2026 15:01:02 +0000
Manifest next update: Wed 29 Jul 2026 15:01:02 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: W1grxcSyW7KkN8V5iA5z681L8x/sXQpBECoeHbw7Yyk=)
2: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (hash: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:56:0c:47:fc:93:1c:04:05:40:a7:f1:67:03:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Jul 28 15:01:02 2026 GMT
Not After : Jul 29 15:01:02 2026 GMT
Subject: CN=e51b0add93969589f1d1784d89db0fa92636e26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:27:56:c9:21:95:63:19:9e:ca:f6:cf:fb:
6a:b9:e2:29:fa:c2:3c:a6:ad:cd:d4:8a:eb:56:db:
a0:b9:0e:e0:5e:a9:24:04:a1:a5:2a:50:ff:11:5f:
5f:1e:6d:d8:4e:eb:4c:7e:97:fc:f4:53:92:ef:eb:
eb:00:a0:38:01:71:f5:ac:31:85:be:5b:8b:4c:cd:
9d:1e:f7:4c:57:25:8b:4f:4f:93:24:ec:70:02:c3:
46:72:0d:72:f8:ec:e4:3e:e9:a7:bd:bd:58:07:58:
8e:cf:2a:7c:58:cf:5c:a9:30:90:97:8a:32:a4:27:
03:93:23:43:ff:9a:49:d8:60:ff:d2:55:3a:29:91:
d2:77:ca:ec:6d:99:f3:5a:23:32:40:98:ee:95:3d:
5e:bd:eb:08:11:27:dc:92:f0:78:4f:83:f7:5a:fd:
0b:4d:b3:9b:1c:bc:41:48:91:44:67:65:51:7f:48:
b0:ca:81:cd:e5:3a:09:44:cd:63:93:9b:86:fa:9a:
27:75:9b:5b:b6:df:72:fb:7d:79:ed:89:4d:60:59:
49:95:aa:38:09:f8:c3:2d:93:49:93:be:64:94:0f:
ed:a0:6c:da:bd:36:0b:48:3c:4c:b8:68:ae:cc:d7:
a1:e2:1d:83:16:83:78:d2:d1:ba:5a:e2:88:f7:3c:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:0A:DD:93:96:95:89:F1:D1:78:4D:89:DB:0F:A9:26:36:E2:6E
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:71:9f:05:5d:a6:c7:56:93:eb:aa:ab:7f:cf:0a:49:90:
d8:ac:b2:28:67:38:af:27:0f:87:8d:ad:0f:c4:9c:8a:d5:39:
95:95:b8:b1:76:a1:7e:22:69:da:56:04:6e:82:aa:bd:38:f0:
d7:30:21:35:df:7e:c0:29:21:99:65:69:ee:cf:e3:3b:2c:f9:
5d:1c:e6:c8:8b:06:3d:ac:7b:6e:ec:32:6b:be:02:2a:2d:14:
5b:4b:ad:29:ff:76:8b:0e:0b:31:8e:54:1c:3d:d6:a2:12:24:
cc:8e:2a:86:9b:18:d1:c5:e7:d0:58:03:84:22:ac:bd:cc:ce:
2f:6e:a9:4c:74:a3:76:b3:b1:98:3a:22:aa:a1:64:ca:10:6d:
f5:79:76:7e:fe:82:4a:dd:48:57:53:f7:4b:df:d9:0c:c0:7a:
6b:0c:a5:2d:26:fe:9a:2a:a0:58:2d:31:8d:56:69:75:5c:dd:
99:13:8e:c5:dc:8e:5a:78:27:fe:b0:73:ee:aa:3e:53:42:9b:
11:97:60:fc:6b:5d:cd:ad:8d:1a:f5:0e:9f:c4:07:25:cc:8f:
7f:13:c9:6e:1f:8a:e5:4d:e3:b1:12:08:06:10:c1:0e:0c:c3:
5b:eb:35:42:e9:3d:0f:0c:91:4d:12:7a:3b:b4:15:97:e7:79:
1f:60:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:45 2026 by rpki-client