Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: GGdmWH1+LYnbiyOU45oM84IRuzK9C33LmiaxtzDXIic=
Subject key identifier: 28:08:28:79:61:34:BB:C0:01:AF:35:BB:1A:5A:FE:97:26:30:2D:90
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019FAA8778297331FAB0C4F03E35740875BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 043C
Signing time: Tue 28 Jul 2026 21:00:32 +0000
Manifest this update: Tue 28 Jul 2026 21:00:32 +0000
Manifest next update: Wed 29 Jul 2026 21:00:32 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: dm2mbY/JSzGQyck02K9vao6JLMz/y4cGIPcCxfYFS0g=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:78:29:73:31:fa:b0:c4:f0:3e:35:74:08:75:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Jul 28 21:00:32 2026 GMT
Not After : Jul 29 21:00:32 2026 GMT
Subject: CN=280828796134bbc001af35bb1a5afe9726302d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:66:b1:6c:30:09:4d:ef:e9:27:e9:fb:d2:
79:09:00:04:36:8d:0b:ee:1f:ff:2e:cb:2e:a4:74:
50:71:a9:33:7a:48:55:64:11:9f:e1:8d:32:ed:c3:
7b:e5:61:e6:3a:d4:4b:a2:77:a6:14:c6:c0:67:3d:
cd:2c:6d:6d:26:c5:ef:68:cd:45:c0:6d:75:de:85:
97:82:6d:19:4a:d3:b1:31:25:a3:30:5d:be:db:08:
5d:f3:75:28:3f:f0:8d:4f:82:24:bd:4f:50:ca:ed:
67:34:b3:e4:c8:dd:3d:40:95:89:73:66:20:aa:20:
2e:93:e7:54:c6:44:1d:73:15:a8:e2:66:f8:b8:3b:
56:4e:b7:b2:d6:fc:c2:b1:af:df:a1:ee:4b:9d:0a:
05:71:57:10:56:ef:c1:7d:2d:5a:88:fe:16:c7:7b:
20:ce:72:4c:47:f6:d2:0a:ca:20:10:47:88:4a:25:
85:13:0e:07:1f:b9:fe:93:c7:e1:ce:55:87:bb:cc:
96:4e:f1:80:48:e5:b2:31:4e:15:aa:7e:a9:80:0c:
75:f4:64:73:5c:16:ed:f3:75:f3:aa:f5:f0:a9:ec:
97:8b:b0:f5:16:fb:c2:b4:19:59:7a:27:2f:49:92:
4b:1c:62:ae:86:27:3f:29:f4:11:53:6e:3a:99:71:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:28:79:61:34:BB:C0:01:AF:35:BB:1A:5A:FE:97:26:30:2D:90
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f4:ac:a7:4b:c5:a1:06:7c:6e:40:73:ea:49:79:60:9e:b4:
6b:7f:e3:d0:34:c0:4d:b4:8b:a9:07:0b:e2:ca:be:4c:1b:b7:
85:94:f4:fe:d1:33:2d:cb:53:af:65:1e:1c:63:2d:48:bb:3f:
48:22:c6:71:c6:f6:45:b6:21:5d:44:fe:19:55:83:0e:0d:c5:
1e:0c:41:7d:76:e0:cf:00:29:08:04:28:b2:78:20:b8:62:17:
39:84:34:16:40:73:94:c9:4a:3a:6b:2c:1b:6f:31:cc:9b:fc:
70:fd:8d:d1:28:89:52:52:7b:2a:14:e2:67:9c:46:77:97:dd:
9d:d1:40:95:74:66:c2:6b:20:87:14:2f:0e:c8:40:c2:17:ef:
39:c6:79:7f:a1:20:27:4a:18:77:08:0d:ae:49:71:ee:b3:a6:
c1:28:38:c5:0c:f0:ac:20:45:7a:ab:96:2c:52:dc:90:64:4e:
4c:5a:93:34:b8:7a:5e:1e:57:de:45:25:c1:41:25:2e:9a:91:
c6:6a:1d:ee:ab:7c:ba:fb:23:1c:5f:a9:95:f7:b0:6b:a0:f7:
d9:ae:6d:e1:d7:8b:1b:0e:26:40:7f:79:94:f2:40:aa:84:3f:
31:8a:5f:7c:b1:13:42:26:9a:7d:6f:bd:15:cc:76:40:50:9e:
d7:c2:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:59 2026 by rpki-client