Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: e/vSdWDqqRCHvWmittcYN3u1ilZ0tfMH0OCoq51vqEM=
Subject key identifier: 49:02:CA:77:6B:EC:4B:71:98:6B:CA:8A:82:24:3A:EF:78:87:2A:A3
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019FA82C2BC66262B0A2E56ACF033F5FD96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 10:01:34 +0000
Manifest this update: Tue 28 Jul 2026 10:01:34 +0000
Manifest next update: Wed 29 Jul 2026 10:01:34 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: 5RqreTP6ERybdcagSj6zRw3Ghj2Ef8yN7whSidfWREo=)
2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:2b:c6:62:62:b0:a2:e5:6a:cf:03:3f:5f:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jul 28 10:01:34 2026 GMT
Not After : Jul 29 10:01:34 2026 GMT
Subject: CN=4902ca776bec4b71986bca8a82243aef78872aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:ec:b5:db:56:de:a1:cb:dd:ae:2f:e2:fb:
df:3a:4e:99:d3:36:b5:f6:ce:0f:06:b7:7d:3b:7c:
17:a5:a2:50:d4:9d:96:f8:58:3b:5d:7a:a5:01:a1:
34:be:82:0c:a1:ae:98:31:d7:93:e2:ff:47:96:13:
45:9a:50:1c:dc:93:35:3a:13:55:af:ee:ee:45:2e:
6b:22:28:38:7b:77:fc:7b:af:93:46:c1:d2:64:a3:
f4:e4:95:7b:7c:24:2e:eb:09:ca:05:b0:61:7d:ce:
8f:33:bc:6d:22:30:10:04:f5:9d:1a:de:e5:5c:5a:
84:a9:94:27:d1:d5:58:20:af:4c:00:f9:7b:87:3b:
77:e4:3f:aa:e0:de:aa:cb:0d:c9:2e:14:d5:1d:4b:
e2:f2:80:b2:ae:98:9e:ee:86:d7:53:e6:36:64:ac:
0d:50:19:0c:1b:13:9f:22:05:29:27:09:96:0b:29:
30:b7:17:f6:4b:53:36:ab:a1:cc:ec:b5:6f:fd:2b:
15:2d:51:31:94:09:e6:e2:53:76:67:e1:a8:d7:04:
86:e2:a4:d3:e6:98:b4:c4:7b:52:84:78:ec:49:3f:
ec:6e:2f:04:12:00:9e:e5:9c:05:7b:ba:02:4e:28:
a9:62:5b:d4:80:55:bf:29:b2:9e:12:91:3f:06:2f:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:CA:77:6B:EC:4B:71:98:6B:CA:8A:82:24:3A:EF:78:87:2A:A3
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:02:28:21:7f:cf:43:76:85:db:52:c5:11:a0:b6:15:18:ee:
e3:97:5c:7a:d6:b7:15:a4:3f:18:f4:0f:8a:77:9c:3b:4d:de:
78:6f:de:8b:62:18:ab:89:dc:48:90:94:42:d0:bd:2b:7c:c9:
c0:20:b0:92:51:67:78:a2:e2:aa:73:6f:ab:d3:cf:70:21:ca:
0e:55:37:ca:5a:fb:a0:0e:de:0c:03:47:76:b0:37:59:c5:98:
2d:be:91:0f:14:f0:4d:f9:6d:f5:13:f2:80:25:8b:d0:ae:a3:
95:37:21:97:1f:b4:92:90:62:a2:d3:f6:15:18:fa:e8:51:ff:
a1:f8:8d:87:ed:52:31:a8:ce:d4:65:9b:94:c3:6a:b7:bf:41:
3e:b3:05:46:fc:4e:01:ba:c2:d4:f1:77:76:94:08:81:08:b9:
c0:8a:36:1c:d2:3b:e9:fc:24:7c:c2:50:5e:b7:1b:4b:e6:36:
de:51:3f:f5:00:fe:b0:1c:1e:07:3f:81:9b:de:bd:d2:65:37:
dc:6a:f0:bd:d2:cd:8e:19:b0:15:a7:b2:08:0e:64:ca:d6:35:
d3:b7:2e:d7:72:f4:65:e9:d8:f8:57:62:18:ef:d6:2d:b6:d3:
38:a8:85:15:ff:3e:a1:99:1c:2a:d1:bd:ad:0e:71:bb:4d:20:
77:7a:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:28 2026 by rpki-client