Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: vWHQzxUvPgbEPj2ni8lCd/ZUaOpjM/zw/mgI8iB0qC4=
Subject key identifier: 41:AE:AE:6E:4D:BF:1C:99:49:C7:BA:71:3F:69:EA:4B:37:46:3E:AE
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019FAA1A346F2348619BC2C8EF2DBF68CFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 19:01:11 +0000
Manifest this update: Tue 28 Jul 2026 19:01:11 +0000
Manifest next update: Wed 29 Jul 2026 19:01:11 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: yCL4atCNg8F1xhTVKyTMbPMk5Nckh3y9wFuo6LWfDCo=)
2: _WoEsqjGda06FNvYzNcE2_IEZYM.roa (hash: goW3pvaXPQUMEleV0Ier3m35JeMofiuKmtRcD80IT5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:34:6f:23:48:61:9b:c2:c8:ef:2d:bf:68:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Jul 28 19:01:11 2026 GMT
Not After : Jul 29 19:01:11 2026 GMT
Subject: CN=41aeae6e4dbf1c9949c7ba713f69ea4b37463eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:a4:59:e6:e6:dc:81:aa:c1:6c:9a:4b:4a:
50:51:b3:d5:a9:52:e0:d9:fb:dc:44:6e:44:02:97:
12:28:f4:b8:f1:8a:e1:1a:42:5c:5b:fd:65:60:dc:
8d:b1:4b:14:10:e3:62:84:b8:8d:25:7e:4c:63:9f:
2c:c1:e4:a5:67:28:cb:03:76:1f:c0:7e:b6:57:26:
fd:32:df:a4:a5:c7:c3:70:61:7a:2b:18:a5:a5:7c:
e2:36:12:8e:60:72:dc:59:82:ff:d6:be:90:b1:a8:
98:64:5a:87:d9:10:f1:07:f3:c1:e3:25:41:aa:98:
e8:a7:67:65:7f:7d:3f:8f:66:ed:89:6c:7f:35:6c:
d7:ae:c8:d2:98:e5:fe:74:cf:3e:82:72:0b:02:c4:
4d:aa:af:7c:10:52:21:54:bf:32:e1:7e:8f:36:98:
ec:3f:e2:91:7d:63:7f:07:02:fe:16:45:01:11:d8:
e4:4b:5b:76:22:4f:f5:2e:b8:49:65:e5:b5:bb:81:
15:fb:0b:57:cf:2d:7f:d1:72:a4:08:93:28:98:6d:
54:55:91:82:ce:38:63:02:a4:c9:f2:6a:38:e1:2a:
dc:82:f7:ee:88:f5:d1:d5:c4:45:84:aa:6d:74:d2:
33:1c:53:20:56:46:9a:26:be:0e:b3:82:74:bf:01:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:AE:6E:4D:BF:1C:99:49:C7:BA:71:3F:69:EA:4B:37:46:3E:AE
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d7:49:16:b5:29:8e:6a:6e:3d:2e:10:5f:ab:d5:0c:16:42:
55:57:24:e5:c3:b3:14:0e:5b:cd:68:aa:b5:a6:2f:e7:81:fb:
33:c8:01:07:1c:16:e5:17:73:a4:9c:00:a2:b7:9a:b8:6b:ac:
b3:93:1a:e0:06:36:89:05:85:95:78:76:27:b5:63:2f:97:34:
42:55:b3:53:11:31:03:da:6b:fe:ae:06:cc:70:6b:85:2b:40:
f5:fb:9b:05:dd:6e:01:37:6d:1d:9b:9a:44:96:ea:96:9a:e8:
88:42:e9:85:a7:81:eb:89:56:e1:6c:55:4e:45:95:40:54:3b:
6b:03:14:98:c0:3c:3e:eb:3d:bb:d9:c1:f5:75:a5:a4:97:e9:
08:28:d0:0f:a5:e5:98:50:e8:6c:3c:92:2e:ef:2e:33:59:c0:
46:c1:14:10:58:fe:20:df:b1:3f:54:98:4e:bd:02:9c:1e:b9:
d4:56:07:d3:a3:00:ee:04:fc:88:41:c5:39:ed:64:c1:55:4c:
22:fe:78:50:d5:26:f4:55:4a:6e:af:78:2b:1f:ac:9d:63:ca:
f8:23:91:9c:ec:03:14:68:33:00:08:cc:de:7c:fb:3d:57:c3:
87:9c:6a:af:d6:04:78:a2:47:22:a2:d1:f2:7c:75:65:b8:52:
72:7c:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:00:37 2026 by rpki-client