Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: YQLni9mqOv3GhT+2JtM2AgrqA6tj/f3PJwgmS9n2Jt8=
Subject key identifier: 4E:82:9F:97:20:7D:62:0D:A2:A8:84:E2:51:E0:A6:AE:77:91:C4:E0
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019FA9E277F16CD502ECFEA770AEAE985D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:00:18 +0000
Manifest this update: Tue 28 Jul 2026 18:00:18 +0000
Manifest next update: Wed 29 Jul 2026 18:00:18 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: P0ICujBAcjLvedU6atfzyi3HmHkJ+YUqtAWZctXIUok=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:77:f1:6c:d5:02:ec:fe:a7:70:ae:ae:98:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jul 28 18:00:18 2026 GMT
Not After : Jul 29 18:00:18 2026 GMT
Subject: CN=4e829f97207d620da2a884e251e0a6ae7791c4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:e6:95:df:6f:75:e3:10:19:b6:05:60:a1:
1d:58:94:48:81:bb:44:1c:dc:68:15:d0:7c:85:00:
3b:a2:a6:21:33:0c:07:42:f2:05:c6:df:bb:03:0a:
7a:5a:41:69:f1:96:76:1a:30:4d:69:9a:41:9a:5f:
54:65:23:40:ac:8f:1f:3d:2b:28:02:c7:15:3c:13:
10:d8:6d:f6:d1:f8:12:9f:1d:65:52:87:04:c7:95:
4f:49:83:74:63:7b:f6:22:7d:0d:b1:01:f4:61:f2:
5f:2a:29:5f:51:f7:24:97:8a:7f:d7:21:18:b6:ed:
b3:f5:bb:9f:9f:0e:67:17:48:bc:e8:ce:d7:c1:6e:
df:e5:f2:9d:93:17:63:8b:f4:d5:69:37:d6:8a:f5:
47:98:e8:4f:02:d4:b0:dd:d7:74:8e:1c:c0:ff:ac:
13:ab:85:43:2b:eb:c9:99:4d:8c:c0:51:37:6e:21:
5d:23:eb:12:db:b3:3c:20:3d:a9:62:f8:7e:d8:03:
aa:ab:e1:41:d5:cd:99:11:04:70:15:d8:d2:25:66:
1b:7c:33:23:71:c9:b7:ef:66:f2:c9:69:fb:1f:8c:
be:71:07:59:2d:d2:ef:0e:71:7b:bb:18:05:bb:b6:
ad:79:40:8f:ac:23:5a:c9:ac:25:2a:36:07:4e:a2:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:82:9F:97:20:7D:62:0D:A2:A8:84:E2:51:E0:A6:AE:77:91:C4:E0
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:00:d8:ac:80:65:cc:ce:ec:fd:0d:36:e9:57:cd:08:ab:3a:
57:8c:60:5a:61:c0:b5:2c:ea:45:76:e2:c4:4d:84:c9:9f:04:
e0:3e:57:d3:67:29:bd:1e:5e:86:f0:49:a7:e0:28:a3:bc:53:
10:bd:b8:34:d3:dd:30:4b:b3:db:91:b5:72:6a:e8:ae:06:ac:
b1:f7:8d:0f:d2:8a:69:a5:b7:3e:76:07:54:74:a0:9b:20:18:
3e:bb:82:98:a0:a8:db:d3:d7:a4:8e:d7:e6:26:9c:67:bb:e6:
76:a9:d1:8e:aa:17:81:dc:f7:0e:25:e0:32:2e:36:8e:a5:35:
3c:93:49:8b:65:0c:bc:8f:2a:f9:fd:92:bb:28:c3:99:37:53:
8f:af:68:fe:51:ae:0e:18:42:77:b8:eb:72:04:a0:b6:26:63:
90:14:5e:12:58:fd:a1:6f:a8:a9:df:d2:71:42:44:12:1e:f3:
55:65:b1:81:65:82:b0:fa:f9:ee:92:2d:88:30:70:37:21:dc:
15:b2:8b:fc:bc:ce:99:e8:ef:1a:4c:90:b9:65:50:17:17:53:
b1:f7:a7:0c:be:be:6a:5f:70:99:e1:9a:ec:e1:df:29:22:8e:
5b:83:4a:23:8d:c0:85:27:90:ff:56:c6:22:54:6a:7f:be:98:
97:d7:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:33 2026 by rpki-client