Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: sQKw9bzd1iPWZ6YOwAEYIQA9ZY2G7q4m+VTmTpXnhe4=
Subject key identifier: 8C:C7:C0:C7:31:D1:49:2F:99:93:E4:64:B2:65:EA:54:72:70:A0:E5
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019FA82C37A8D6530FB37F5D3D49884A401A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 10:01:37 +0000
Manifest this update: Tue 28 Jul 2026 10:01:37 +0000
Manifest next update: Wed 29 Jul 2026 10:01:37 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: uRsa64VquER0FJXg1Hjmo9e/7wJPhcCM0IIP3mHeYik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:37:a8:d6:53:0f:b3:7f:5d:3d:49:88:4a:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jul 28 10:01:37 2026 GMT
Not After : Jul 29 10:01:37 2026 GMT
Subject: CN=8cc7c0c731d1492f9993e464b265ea547270a0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:32:a7:2d:d0:e2:9d:9d:42:26:8f:82:36:
bb:2f:a4:bb:a2:e7:ee:93:e2:7e:a8:46:ba:78:99:
1f:bd:14:11:fc:fe:ef:45:51:38:c5:ac:18:f6:53:
35:ef:4f:c7:08:aa:1f:24:2c:6f:a3:ba:5f:33:07:
72:af:f3:6d:b1:40:f5:60:b0:73:d9:60:df:36:aa:
2f:54:b2:96:a5:c0:ba:8e:e7:c6:99:cc:a8:62:70:
02:fd:16:b7:76:9c:dd:88:2e:a1:59:1b:43:90:0d:
79:59:0e:22:dd:7c:02:90:8e:51:81:50:96:9a:44:
02:8b:5b:db:4f:14:60:68:4e:82:f2:2f:09:d8:04:
fb:58:e5:25:e3:cd:52:09:33:f5:d9:b3:07:38:d4:
19:dc:af:7d:bc:6d:33:d3:29:07:61:a1:c7:ca:01:
cc:45:2a:c5:ad:c6:3a:c7:43:28:74:1d:b3:1d:64:
3c:48:e4:ef:b5:4c:0c:62:f1:e4:78:9b:86:39:b9:
b1:6b:9f:32:6b:b7:58:f5:69:fa:81:68:23:73:a1:
8c:5a:50:90:8d:d2:03:94:99:c9:78:8b:e2:92:77:
55:28:69:ba:ee:ce:f1:b4:9c:e3:89:d0:dc:6c:44:
5a:8d:85:04:0b:6e:e2:e8:02:e1:93:bd:84:31:81:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:C0:C7:31:D1:49:2F:99:93:E4:64:B2:65:EA:54:72:70:A0:E5
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d3:84:e6:6a:00:f0:1d:25:51:a0:e5:ff:b3:cc:45:65:7d:
a9:01:2e:2e:11:67:50:32:8e:16:09:95:88:c6:47:95:ab:3f:
8c:26:5e:7a:75:26:79:e7:b2:73:a9:da:8a:c7:6b:be:08:1a:
d1:1e:af:94:28:73:35:6f:6c:7a:69:4d:2a:7b:07:4a:b3:e2:
4c:6f:52:07:77:2c:9b:50:87:c7:a7:7c:e2:8a:e4:e6:16:2e:
69:cd:c9:54:76:cd:cd:85:bf:87:3b:4c:84:3f:5b:3a:15:0d:
02:53:1e:8a:14:fa:06:43:5b:4d:7e:e0:f1:a8:9d:c1:c9:65:
4c:e2:46:c5:76:d0:84:fb:e5:05:15:fd:57:56:12:14:39:cb:
54:9e:bf:cd:3b:3f:53:c4:af:dd:9c:dd:28:5d:d1:04:91:e1:
7c:59:65:23:d1:0a:5a:78:a4:0e:85:e4:40:4c:51:52:07:a8:
95:43:40:13:d6:84:dc:d9:9b:1e:00:27:d8:6a:69:40:cc:f7:
10:23:ae:3a:4d:6b:96:ae:22:3d:56:d5:37:d3:7a:c3:57:cf:
fc:70:f8:8b:4f:d2:14:c8:7d:69:2e:5f:8e:9a:4e:64:63:76:
05:9d:e0:c2:6a:b8:ff:c1:dc:df:5e:e7:7a:00:55:a7:cb:be:
ea:4b:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:09 2026 by rpki-client