Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: 3ntx5+2G8FyMnq0DWyYpPSIw68H07MQDeDf2+KiUb1I=
Subject key identifier: AB:B1:8D:59:49:60:C9:D9:6A:C6:FF:B5:C1:EE:6F:FC:F8:DE:C1:03
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019FABD0F087F3EFE2326611BD90365D8EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 19E0
Signing time: Wed 29 Jul 2026 03:00:24 +0000
Manifest this update: Wed 29 Jul 2026 03:00:24 +0000
Manifest next update: Thu 30 Jul 2026 03:00:24 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: ARYTqNZW0dipu7AHwWG+hkqb1T12mfauW6nnNHM7U20=)
2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
4: 7OXas1BE939lVr3MLLkFfgwwLME.roa (hash: FALGOD2pTrLC0LwxjWMNOoQIcuSrSVg8619SA2u9eio=)
5: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
6: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
7: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
8: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:f0:87:f3:ef:e2:32:66:11:bd:90:36:5d:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jul 29 03:00:24 2026 GMT
Not After : Jul 30 03:00:24 2026 GMT
Subject: CN=abb18d594960c9d96ac6ffb5c1ee6ffcf8dec103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:3e:91:4c:8e:ed:1e:a9:6b:6a:5b:d9:77:
5e:b0:07:85:ae:34:31:7e:26:14:1f:52:76:a3:2e:
84:f8:6d:f3:29:34:a7:e0:1d:67:7f:da:73:f0:1c:
1b:f6:17:77:13:72:5d:5b:26:be:ce:40:a4:f6:bc:
80:e9:f1:41:2e:76:55:ae:40:ad:4f:32:9a:0a:70:
d1:e4:65:fc:9e:71:06:d1:ed:99:70:10:cd:f7:9a:
9c:75:98:e0:64:4a:cb:88:a1:99:52:8c:7a:07:f4:
9c:43:09:6d:9c:0e:8f:d8:13:df:67:0e:62:47:30:
de:e7:3e:87:6e:3c:1f:6a:1c:f8:9c:a4:d2:83:63:
96:93:f2:45:c3:33:12:38:a5:4c:61:05:e9:94:03:
15:0c:a2:ad:0d:69:16:be:0c:14:92:b8:b2:f6:6e:
7d:74:1c:28:4f:b8:3f:ed:c9:cc:60:1e:96:ec:87:
c6:16:9e:1c:9d:9e:1e:b1:8e:33:48:a6:e9:06:4e:
1c:62:3c:75:93:27:1f:d0:4a:29:85:45:26:fd:cd:
df:e8:21:fa:cc:2d:d7:91:9f:36:e6:76:07:56:bb:
a1:22:3d:8a:bc:dd:c0:a1:5e:46:53:aa:2d:62:60:
55:03:fd:7b:ca:ea:ab:fe:c9:7f:aa:b0:cb:75:61:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B1:8D:59:49:60:C9:D9:6A:C6:FF:B5:C1:EE:6F:FC:F8:DE:C1:03
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:6a:c2:87:29:da:09:c0:33:94:0e:8a:e5:76:7f:e0:ce:
99:50:09:0c:cb:74:cd:02:77:c2:4a:6e:cc:f1:7e:a9:27:19:
73:58:b0:de:46:fa:0f:7a:74:a0:3d:82:2a:85:4e:aa:71:7a:
d2:54:da:1e:c9:32:b6:a6:a1:ff:51:92:47:d4:48:35:d7:89:
d6:5a:ee:ff:0d:72:d2:ae:40:e1:1b:b3:c3:1e:39:1e:42:eb:
ca:0a:38:d4:04:fb:43:81:51:70:bc:0c:ec:0b:54:ec:15:84:
70:82:48:75:b5:bf:4c:80:8f:98:1d:2f:fe:7b:e8:9e:2c:88:
de:55:47:c0:f2:18:3b:ae:f6:db:61:a3:6f:b2:8d:6d:bb:93:
e3:71:32:6f:91:df:14:78:21:d8:4f:da:55:e7:6e:6b:3e:44:
9a:a8:ec:7d:96:79:1a:de:99:e8:6e:89:1c:0e:a9:c6:5b:47:
d1:61:4f:14:38:53:8e:42:b8:9a:ce:04:6a:06:03:28:56:f6:
c2:d3:5e:09:6f:97:a9:90:95:86:ab:10:f5:88:59:aa:1d:12:
78:4a:85:45:69:8f:1d:f5:dc:8b:41:1f:b3:ff:99:03:d9:8e:
2a:b3:77:ea:d7:fb:a5:8e:e3:ad:e5:4b:e7:dd:99:92:52:62:
0a:f3:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:33:57 2026 by rpki-client