Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: U51B6JSBAOe2Sz43D5J2EPcZptRrIrO+dSDD8oQ3vmc=
Subject key identifier: A3:BC:3A:3A:E5:C4:36:BD:DE:E1:4C:DF:1C:BB:CD:3C:42:3B:97:20
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 019FA9075563173F4F783B9F7E8B26F79AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 14:00:57 +0000
Manifest this update: Tue 28 Jul 2026 14:00:57 +0000
Manifest next update: Wed 29 Jul 2026 14:00:57 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: EdqmkSlEJFk3hz6e51Hn03tEv/81rLszn1fHZyEvqy0=)
2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:55:63:17:3f:4f:78:3b:9f:7e:8b:26:f7:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Jul 28 14:00:57 2026 GMT
Not After : Jul 29 14:00:57 2026 GMT
Subject: CN=a3bc3a3ae5c436bddee14cdf1cbbcd3c423b9720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:13:d0:7e:ca:d9:66:b5:92:58:fd:1b:70:
73:b0:5e:89:2c:d4:e7:00:15:b4:2e:d5:c8:c7:60:
05:64:6e:cf:c5:2d:aa:46:df:65:79:a1:7a:c5:46:
3b:62:79:02:53:4e:b3:41:f7:6a:57:1a:f8:84:eb:
2e:f9:b9:87:96:b4:c0:23:9b:f1:f7:94:3e:42:f6:
c0:c4:1b:c4:01:51:ab:0c:19:58:13:f9:fa:9e:7f:
2e:00:d9:e6:05:98:95:47:55:28:78:ac:c7:b1:6e:
10:01:27:f5:10:9d:5a:c9:ee:1b:39:95:de:f5:6d:
c9:21:a3:2e:8e:b1:aa:2e:70:7a:3a:87:11:09:e3:
e0:08:ae:e9:a3:3b:df:78:b6:7d:14:84:db:a0:42:
a2:0c:da:04:99:b1:32:68:e9:84:01:56:fa:d1:93:
a0:34:69:ab:7d:67:93:b5:25:eb:60:c2:6f:7d:e6:
06:a1:8f:3e:2b:76:5d:84:1e:f6:f2:3c:06:51:f4:
5e:09:41:44:b0:c2:28:d3:75:25:37:d5:39:ca:1c:
23:0f:b0:73:d7:ef:4c:eb:1e:9a:fc:db:07:4f:9f:
1f:77:cb:fb:c4:fd:68:7c:f7:9e:d9:96:ca:12:f8:
92:fe:03:f6:62:6f:79:94:78:bf:fe:fc:37:8c:45:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:3A:3A:E5:C4:36:BD:DE:E1:4C:DF:1C:BB:CD:3C:42:3B:97:20
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:50:d5:c5:28:0f:c9:91:19:f3:64:75:55:f1:39:80:fd:
85:29:08:e5:90:e7:4d:f4:ee:69:34:0f:be:aa:6c:12:dc:63:
ab:45:c1:89:85:bf:42:db:d4:91:c0:49:ec:72:87:16:c8:fc:
5d:e4:b8:b4:a3:47:8e:02:05:7d:0e:82:46:74:cd:f7:f0:bd:
95:7f:41:c1:45:07:ba:27:e3:0d:e5:ff:cd:5e:a2:bb:67:e5:
9f:68:37:3f:48:1c:3f:2d:a4:1d:9e:89:78:7d:bf:11:6b:10:
5d:39:c3:03:32:bb:73:2f:9e:6c:2e:50:cc:b1:0e:de:ad:66:
b2:74:56:c8:c2:03:10:9b:fe:10:a5:5c:ec:91:38:60:67:d9:
cb:69:aa:13:6a:31:b0:80:b8:96:0e:a5:0a:82:d1:d0:92:0c:
e1:a6:f6:8b:05:08:2b:cb:fc:10:ff:4f:91:31:dc:1e:0d:44:
83:f5:44:c1:9e:67:b0:ef:1c:80:c4:7e:4b:da:76:c6:70:33:
a5:f2:db:2c:ef:17:85:8e:a2:3d:96:28:14:97:ec:a0:ca:33:
75:4b:fe:b6:bc:b4:46:6d:63:4e:2f:58:3a:a6:09:f1:4e:fa:
b3:cd:ad:ea:ad:36:a9:4a:58:d2:ca:c3:d0:86:6c:03:6a:9f:
44:2f:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:55 2026 by rpki-client