Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: TDgOrdJvYmLpi8dtciXrK21oJybhZ8GzW+1NoHgnFqk=
Subject key identifier: 76:D4:54:93:4B:79:75:0B:00:C2:17:46:F8:3C:23:F3:E6:F6:D8:0F
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 019FA9E2D5DF0CBC4576773020ABFAF0EA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 091C
Signing time: Tue 28 Jul 2026 18:00:43 +0000
Manifest this update: Tue 28 Jul 2026 18:00:43 +0000
Manifest next update: Wed 29 Jul 2026 18:00:43 +0000
Files and hashes: 1: 1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa (hash: WyH53JIWlzDtSzteiBRYQxZUpstzNJjn2NRysD5+PVY=)
2: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: xit6pkwBoxZgfyYdw3UlSKBHkz1rfhb4WKWRiCBAXHk=)
3: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (hash: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d5:df:0c:bc:45:76:77:30:20:ab:fa:f0:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Jul 28 18:00:43 2026 GMT
Not After : Jul 29 18:00:43 2026 GMT
Subject: CN=76d454934b79750b00c21746f83c23f3e6f6d80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:b3:c6:b7:4d:67:18:fb:96:53:69:16:b4:
e7:20:11:e3:37:92:0f:30:d3:19:f0:59:52:ed:b3:
ed:2d:2a:f4:83:22:1a:7e:df:77:55:89:8d:62:1d:
0c:af:d0:3e:cc:91:ff:da:ed:ab:27:22:bb:d7:90:
99:e8:a3:85:ad:fb:f1:44:f0:88:8b:9c:d4:98:30:
de:4e:07:b4:b1:21:25:56:07:e4:ae:eb:14:25:7d:
01:e6:a0:2c:35:17:18:17:19:0d:bd:c3:be:79:45:
de:c1:42:13:93:3d:66:47:6a:12:44:a4:88:50:89:
76:48:32:1c:24:0b:8a:54:6e:9d:53:55:7d:01:38:
df:d8:69:61:a7:1f:c3:af:5a:df:0c:7b:79:e4:a0:
26:88:13:7c:ec:7a:d2:c1:77:ae:4a:1e:9d:cf:43:
69:d8:c6:0d:af:94:af:8e:c9:e7:76:68:da:44:7d:
32:ca:94:46:51:df:b8:b5:d3:1c:62:3b:8a:a3:ca:
c3:fc:b7:91:ac:fd:10:2b:1c:4c:43:a8:76:d0:d8:
9a:61:c6:7c:f0:f6:5c:30:49:e7:70:d6:b3:c6:76:
06:b6:b7:ce:dd:59:1a:7f:f5:d7:de:f0:26:60:21:
59:0d:b7:ed:df:d7:55:fc:a6:00:41:20:9b:a3:9e:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:54:93:4B:79:75:0B:00:C2:17:46:F8:3C:23:F3:E6:F6:D8:0F
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1e:87:2e:f7:28:61:b2:61:d9:69:75:d4:9d:9e:c2:6f:2c:
5d:c6:67:7b:e0:dd:b1:90:a1:c2:36:f0:e2:44:e4:15:ea:1b:
32:2b:63:ef:76:c8:d0:61:98:05:c9:29:76:5c:ad:6d:71:e5:
88:13:57:76:71:e5:ff:a3:5f:d9:91:b8:00:0a:b0:41:54:73:
39:bc:b6:3d:c6:78:f0:02:d0:2e:b1:00:8c:8a:1e:40:2e:1c:
ba:97:6d:63:ce:c9:15:d5:4f:3b:ad:f6:48:1e:6e:00:d4:2f:
be:38:5d:e1:7f:80:5e:f1:54:75:58:1a:76:05:7a:14:6e:41:
9f:ce:03:92:23:68:55:36:4f:27:37:bc:22:64:8b:1a:8d:0c:
a5:fe:1a:2d:4e:b5:85:9e:37:2f:d3:fd:f3:58:58:f3:8c:6e:
78:6f:86:77:80:24:da:06:91:35:64:84:62:a4:ee:d1:75:78:
cd:37:44:34:e0:70:86:93:d9:88:fb:20:2f:a7:cd:0d:a9:5c:
f4:36:a0:f3:5e:93:35:60:37:7f:6d:96:8c:e5:33:2e:99:e7:
36:c2:03:34:c0:89:4c:62:23:24:e9:ff:6b:41:64:81:97:ee:
fc:b4:08:1a:89:ce:34:a2:0c:43:54:a4:22:d4:50:be:64:cc:
86:d5:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:24 2026 by rpki-client