Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: mIAZVQJh4PGIACvPJDVIol4nDggYzyIfuK+dT/sKs5k=
Subject key identifier: 4F:D5:82:0F:88:50:7A:20:AC:7B:C8:85:C6:3F:D8:5F:B4:C4:47:F4
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019FA974A8DEAF09B03C23F601219E6D1940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1666
Signing time: Tue 28 Jul 2026 16:00:22 +0000
Manifest this update: Tue 28 Jul 2026 16:00:22 +0000
Manifest next update: Wed 29 Jul 2026 16:00:22 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: ghLQr42tHveBDjPrbyhJ2TB48p+Bqn8L8k7af1VodoE=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a8:de:af:09:b0:3c:23:f6:01:21:9e:6d:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Jul 28 16:00:22 2026 GMT
Not After : Jul 29 16:00:22 2026 GMT
Subject: CN=4fd5820f88507a20ac7bc885c63fd85fb4c447f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:da:8f:f8:b4:38:14:7b:ec:3a:3d:4a:91:
7f:91:74:86:95:f8:8f:97:84:83:14:b4:7e:5f:60:
6e:d5:f7:12:e7:ba:36:a2:d2:fd:6f:3d:a1:ab:1d:
2d:73:1d:af:48:cc:e0:d5:ba:fa:09:ce:99:15:d9:
bb:c5:0e:73:a6:b7:42:3f:4f:90:ac:b0:d8:f0:91:
07:1a:8b:f6:27:c6:61:49:d9:89:64:6d:55:4b:bb:
46:c8:9d:07:f5:f8:0d:b4:f4:34:79:62:ae:3e:2d:
79:6b:b9:e0:9b:5e:b2:27:b2:a4:92:87:3f:cf:de:
8e:d0:e5:7b:44:66:38:ea:4f:46:64:fc:2d:c3:fd:
a1:e7:c1:1b:39:33:4c:16:4f:78:f5:3e:be:ed:a7:
0f:24:9c:22:fd:bc:ff:a3:eb:4a:44:75:9a:c2:9d:
9c:ed:ad:ab:30:72:81:c3:ff:6b:91:b4:5b:2d:73:
af:2e:11:f4:47:4e:70:53:10:4d:34:e8:29:6b:ec:
4d:28:93:27:88:f1:1f:5d:f7:08:92:6a:20:db:eb:
6f:52:93:d5:55:64:ea:fb:e4:fa:4a:97:1b:dc:0c:
98:20:01:cf:ea:c0:69:54:e9:1a:8f:54:65:47:d9:
f6:d6:c2:49:a3:1e:79:68:0a:d6:c5:54:1a:66:0b:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:82:0F:88:50:7A:20:AC:7B:C8:85:C6:3F:D8:5F:B4:C4:47:F4
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a0:5e:5f:4d:25:a2:9a:a0:4a:cf:90:fe:75:52:fb:47:5e:
03:6c:4f:a7:be:9e:55:9e:8e:87:64:b3:a0:5d:ec:57:68:e0:
92:d9:b7:b9:92:6e:95:df:a9:47:ad:80:69:ed:30:a8:25:5e:
19:a7:a5:5d:84:48:c7:91:3c:98:3e:d9:06:a5:28:a5:aa:f8:
ed:1e:bc:03:0b:1a:62:42:32:12:a6:ad:d0:63:53:c3:82:19:
81:86:ea:72:b3:d8:d5:f0:6d:4d:86:ff:a3:5d:0c:2c:14:be:
da:34:ef:68:b8:25:99:ab:eb:65:e1:b1:c9:13:ab:07:46:0b:
9e:fa:d6:21:fe:e6:e7:f1:8a:06:7a:76:5d:91:ba:9a:80:bb:
37:de:f0:03:28:95:b3:18:ba:be:ef:44:49:6c:36:b1:65:70:
9a:75:bd:a2:57:9f:fe:45:74:f2:ee:14:5e:02:ee:08:77:56:
8f:91:9d:ab:36:58:1e:63:e0:79:99:ae:e6:69:31:dc:b6:25:
3e:f0:b1:e3:6f:49:04:ce:0d:16:e0:52:d6:17:b5:c9:13:a4:
63:8d:2f:a8:96:6d:1a:b1:b7:2e:ac:25:6d:4c:40:a1:1d:c9:
f2:95:b5:b4:14:41:5f:b7:9a:4f:ec:19:f3:02:2a:9f:fa:4f:
b7:07:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:19 2026 by rpki-client