Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: PcJIEFjdfkeDBv6J/b4CYEsXOeE8RkyJMxVHRT/fUEQ=
Subject key identifier: CB:86:A2:90:C4:CF:88:54:39:B4:04:34:C7:25:0E:F5:A1:C0:92:C6
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019FABD13D5AFC86FFBB70051A451CD0DC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 03:00:44 +0000
Manifest this update: Wed 29 Jul 2026 03:00:44 +0000
Manifest next update: Thu 30 Jul 2026 03:00:44 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: cGhouDl4+hyaoBn3cT4xIuWl159KCcZ4jaEVPfokqxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:3d:5a:fc:86:ff:bb:70:05:1a:45:1c:d0:dc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jul 29 03:00:44 2026 GMT
Not After : Jul 30 03:00:44 2026 GMT
Subject: CN=cb86a290c4cf885439b40434c7250ef5a1c092c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:1b:59:0f:9c:20:b3:46:10:54:a5:11:17:
6e:76:66:2c:66:bf:29:10:b3:78:10:97:e7:57:10:
ca:bf:9e:05:81:a2:3d:0b:6a:dd:6b:b6:52:07:23:
aa:a1:a8:b0:7f:9b:06:cb:16:b0:8e:39:3c:e4:3f:
97:b7:64:08:e8:35:e7:e5:f0:43:fd:4c:26:59:46:
b0:b4:19:f8:d2:f5:a0:93:89:22:66:b1:48:df:76:
a6:f4:c9:12:fe:36:cc:01:f4:67:36:51:d0:36:09:
a2:11:82:3c:7a:a3:84:8b:ca:33:b4:90:c5:c8:d3:
c5:c6:89:a6:4a:34:ff:d5:81:fa:02:81:fa:9c:91:
5d:6e:51:8f:d3:fc:11:5f:43:0b:df:b4:2c:50:a8:
0d:fe:2e:a3:fc:ff:48:4a:95:c9:cd:0f:c9:30:55:
90:42:41:4e:09:57:9f:2c:3c:9d:8f:a6:56:a5:0a:
93:6f:40:3f:02:dd:04:a2:40:af:a7:4d:2f:a3:fc:
e6:7e:85:20:7c:8f:2c:df:8b:28:2f:3d:e5:0b:fe:
e3:1b:67:b4:83:73:48:3d:a7:e7:d9:56:b8:3d:c2:
47:c6:8d:96:4b:82:54:c4:78:ef:57:46:a3:9b:14:
4f:d5:80:e7:6a:11:00:c9:53:aa:e1:f1:5f:40:35:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:86:A2:90:C4:CF:88:54:39:B4:04:34:C7:25:0E:F5:A1:C0:92:C6
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:a8:22:76:1b:77:06:2f:88:b0:8d:6c:64:db:d1:aa:cd:
f4:41:13:df:e4:c2:c4:87:ef:cb:c5:41:4d:78:1e:50:a9:03:
2a:de:8a:07:78:05:37:cb:4d:d4:bb:d6:5b:5c:31:d1:f7:b5:
76:19:fb:a9:f4:69:c7:50:73:8c:5a:3f:67:ff:4c:b9:07:11:
20:d1:7d:b6:67:9b:eb:6b:58:4c:8a:39:08:8a:3f:f7:5b:c8:
94:ae:2a:5b:93:27:cc:6b:21:84:26:88:18:aa:d4:a5:53:43:
24:2f:f9:57:5f:e0:ee:24:70:08:7f:95:12:2c:7b:1c:59:2f:
f4:55:2a:e6:60:24:10:a5:59:19:5b:fc:a9:80:0b:a3:b1:4c:
6b:15:af:30:91:4b:72:f6:81:75:d2:45:37:c7:c9:bb:ef:4a:
6a:12:2f:c9:b2:99:09:1b:81:2c:a0:d7:32:95:17:7d:53:29:
96:f0:7f:7a:8e:5e:2b:32:ba:2a:51:6d:5d:6b:6a:64:07:04:
8e:f3:07:d8:46:c5:cf:ea:0c:86:52:7e:d3:9b:09:c7:83:df:
4a:15:58:b0:4d:98:bc:b1:49:61:ef:da:1c:f3:46:6b:54:1e:
26:38:4b:2f:7a:8b:c9:7a:e3:35:af:b5:b0:c1:9c:9a:20:5b:
ac:4e:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:09 2026 by rpki-client