Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: kJuphzpThsYPTelNxkhEKC4mHJV8ncIhCmo2NaUQs2g=
Subject key identifier: B5:84:1B:A4:98:84:78:6B:38:B6:86:9A:47:5E:32:F4:C7:81:FD:CE
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019FAA88596A6DC7FA1C55F1153EA09AA09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 21:01:30 +0000
Manifest this update: Tue 28 Jul 2026 21:01:30 +0000
Manifest next update: Wed 29 Jul 2026 21:01:30 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: JPHLoycWxJeKepqjIv1kR+lJZwelj6glenOaz4vd9Hs=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:59:6a:6d:c7:fa:1c:55:f1:15:3e:a0:9a:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jul 28 21:01:30 2026 GMT
Not After : Jul 29 21:01:30 2026 GMT
Subject: CN=b5841ba49884786b38b6869a475e32f4c781fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:21:91:f3:2d:da:9a:62:cb:f2:6a:72:ba:
e0:36:73:c8:c6:91:c3:6c:75:71:fb:79:0a:a4:47:
ae:0e:c9:52:bb:8c:73:32:a0:3f:c7:62:39:27:2d:
cb:b8:07:ae:ac:38:6c:54:43:5b:e3:e5:0c:ea:06:
08:9e:49:83:41:4c:fe:59:09:59:97:c1:20:b8:ff:
be:49:a1:88:37:da:6d:15:ee:d7:4b:d9:f8:64:88:
2c:43:d7:d4:83:fb:f0:f3:ba:63:be:f8:12:02:80:
5e:ea:f1:f8:5d:5d:1f:19:3d:d2:a8:b3:07:56:85:
23:95:83:37:a3:3d:44:a7:ce:c3:73:ea:68:4d:c8:
43:38:1d:62:26:f0:40:06:4a:44:f9:81:50:df:16:
aa:b3:e4:fc:c0:d0:24:2a:90:e6:95:a8:36:8e:ea:
b6:d7:ed:c1:43:5d:31:88:67:94:fd:ea:f6:b2:de:
c9:c1:ea:21:c7:3c:45:0c:77:11:6e:cf:eb:9e:36:
84:d2:4b:7b:93:7c:4d:2f:29:27:40:46:76:32:85:
f7:bf:e3:17:c4:57:40:8f:95:e9:2e:38:10:dd:d5:
8f:cc:9a:fa:00:3c:98:91:95:89:19:d6:ad:78:6c:
17:fd:47:50:0b:8a:8b:a0:37:7d:c0:18:5f:ff:27:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:1B:A4:98:84:78:6B:38:B6:86:9A:47:5E:32:F4:C7:81:FD:CE
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1d:bf:03:66:ab:e8:8a:a7:e5:64:fd:5a:cf:e5:f0:4a:67:
70:3c:a6:a7:98:3c:83:b3:bb:39:38:90:cc:33:9c:97:90:72:
63:45:c0:63:d9:4a:a8:8b:42:2e:98:df:dc:b3:a3:46:c9:86:
49:b0:9a:cf:76:7d:de:d8:1f:8d:bf:4c:17:4e:5d:ff:88:cb:
0a:37:06:e1:94:f7:a2:2d:67:7f:8a:0d:27:36:de:a3:fe:41:
1b:c8:66:58:2a:a4:a1:4a:84:d3:3c:ad:2d:66:06:37:5a:a2:
91:9d:77:b3:4c:ee:6a:7b:94:27:57:94:41:97:16:e7:d1:0c:
02:29:3f:3e:e6:5d:d6:65:88:cf:fb:d9:67:18:c4:dd:76:d8:
41:00:28:e7:ac:24:af:0d:a2:8f:bc:22:a5:64:c4:46:33:42:
85:9c:ca:d9:94:86:ed:7d:fc:08:51:06:ef:b9:b5:3e:ed:fc:
ea:85:3e:d2:39:dd:b2:e3:74:2b:f1:80:6e:32:33:05:b0:00:
5d:fb:ca:a5:fa:a4:36:ba:8e:09:ca:ec:55:9f:6d:07:52:b6:
19:1b:9d:3b:68:79:e3:da:1e:2d:80:36:f4:bc:ec:22:9b:74:
23:3d:f7:41:85:b6:a5:ae:da:ea:00:a9:e9:5a:df:15:e1:df:
c1:29:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:25 2026 by rpki-client