Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: 7fV75IeE2S8h3Q2nhwToSoH8ab/yXAv6g0Km0qgqQHE=
Subject key identifier: 3A:54:E4:EE:6D:A0:CB:61:44:C5:0D:F6:E0:45:1A:B9:46:88:0A:7D
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 019FA9E27F117DD3BF1D7E70D2938E21E2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 18:00:20 +0000
Manifest this update: Tue 28 Jul 2026 18:00:20 +0000
Manifest next update: Wed 29 Jul 2026 18:00:20 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: IE6WOaHXg57qZrDtrNEGDvSgPjB4862PMPvXxccmlH4=)
2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:7f:11:7d:d3:bf:1d:7e:70:d2:93:8e:21:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Jul 28 18:00:20 2026 GMT
Not After : Jul 29 18:00:20 2026 GMT
Subject: CN=3a54e4ee6da0cb6144c50df6e0451ab946880a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:3b:14:89:d6:77:e2:87:61:5d:ce:c0:c8:
45:46:a5:e7:fc:b0:08:a4:fc:e3:8f:9d:55:80:64:
51:ca:2a:0e:87:20:63:5f:31:f2:10:c5:d4:d9:e8:
75:3f:b2:66:12:52:5f:2f:28:00:d6:0c:20:56:6b:
8a:3a:60:d6:34:f9:83:83:cc:ab:30:d5:fc:24:24:
22:7a:10:79:f3:17:c6:33:c5:a2:ea:55:9d:49:14:
0e:aa:61:55:7c:ec:aa:27:37:7b:a9:f9:e6:26:69:
5d:e5:3f:64:94:61:78:d2:af:60:c7:eb:63:54:ba:
28:92:1e:bb:2d:c2:5d:c3:c8:e8:f7:54:f5:aa:2f:
a2:cb:fa:7d:61:42:9c:50:6e:97:ce:fc:56:5f:58:
0d:01:d0:1e:ea:56:a8:8f:33:d2:1e:2a:4b:2f:f1:
0e:31:6c:69:23:a9:aa:a2:52:94:15:11:88:17:3c:
39:6c:13:7f:b9:08:3e:3a:85:79:d3:f7:c5:e2:b5:
04:97:8c:0e:58:b7:19:a4:62:27:43:0f:4b:d4:44:
d9:03:07:69:24:0f:93:15:b9:b1:9a:ff:f0:b8:bb:
73:16:22:ac:78:65:d1:6d:75:e7:e7:2a:46:f0:05:
d4:52:85:57:a2:69:11:de:03:23:96:bb:5e:3b:72:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:E4:EE:6D:A0:CB:61:44:C5:0D:F6:E0:45:1A:B9:46:88:0A:7D
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6e:50:75:1e:8f:d2:94:71:82:3f:aa:74:f4:34:19:ca:b0:
8e:22:e1:b6:ff:f9:8c:6f:7a:56:96:11:f9:c3:6a:5c:1e:7e:
0a:1e:8d:43:64:ef:28:61:30:ed:66:15:ce:04:11:0d:ce:e8:
3b:82:3e:a4:af:87:17:a3:6a:3f:02:63:7f:18:50:20:2d:2b:
84:8a:91:a2:49:5f:c0:26:b8:6f:3e:ca:dd:03:f9:4f:8a:08:
8c:6c:e8:ae:22:7c:26:26:7d:11:79:70:0f:4f:e7:8e:d2:27:
cb:e8:48:cd:e4:3a:38:2d:18:1d:3d:b9:28:3c:19:21:23:4a:
fd:0a:f6:f9:1f:fd:08:e5:2d:e4:f0:01:4a:53:40:01:62:b4:
cc:60:72:25:82:21:66:9a:f3:13:2d:36:0b:ba:f9:ab:8e:4d:
ef:40:ad:9f:56:39:21:18:84:88:b6:f2:ed:5e:3b:76:39:b8:
d4:ac:81:a7:81:c7:50:ee:b2:c2:4f:ac:7c:fd:dc:2c:a6:43:
e0:b0:54:ce:40:1f:35:fa:3b:ff:a7:29:4e:0f:1f:68:f3:59:
d5:0d:f3:f6:91:e3:75:dd:82:04:1a:70:d3:d0:0a:fd:e1:02:
f0:c8:93:5e:17:6a:90:40:da:b0:2e:0e:d9:4d:24:68:cc:4d:
3c:7f:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:16:51 2026 by rpki-client