Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: PZyi9TqnIR2DbbVQhkI86bNnhhS/Kv0ZJyONmRgIR3w=
Subject key identifier: 63:1A:59:4C:53:76:5B:37:38:67:2A:FF:D2:4F:EC:7E:D7:48:BE:C5
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 019FA82C08F6C9E20E35448D31154780C839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 10:01:25 +0000
Manifest this update: Tue 28 Jul 2026 10:01:25 +0000
Manifest next update: Wed 29 Jul 2026 10:01:25 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: skabfJMoWn6NJKGqwVLYc7Zggcnptb90TVp3QWm1tuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:08:f6:c9:e2:0e:35:44:8d:31:15:47:80:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Jul 28 10:01:25 2026 GMT
Not After : Jul 29 10:01:25 2026 GMT
Subject: CN=631a594c53765b3738672affd24fec7ed748bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:54:cb:45:31:02:f3:79:d7:fa:dd:07:3b:
33:f7:6a:52:60:9f:6b:d1:3b:3a:c2:b3:e2:03:1e:
7c:17:8e:c0:e7:f7:ed:de:9b:13:7f:96:4f:ba:69:
09:8d:29:07:61:95:0b:c4:c4:32:7f:1f:cf:16:cc:
86:19:47:33:48:ca:86:3d:aa:5a:04:20:c9:6f:0e:
27:c6:13:10:57:91:61:6f:fc:be:3b:04:9d:59:62:
8e:04:4e:fc:3d:46:55:c8:9a:0c:64:e5:71:6a:90:
32:8b:89:dd:69:74:2a:03:b9:fb:a2:e2:50:56:ac:
72:39:ec:41:e9:58:a4:d5:f2:57:aa:c0:77:bb:31:
38:bf:b7:74:f7:99:c9:79:90:e0:ba:0d:06:3d:d6:
b8:7d:76:00:34:c5:a2:af:bd:aa:14:0b:77:fa:9e:
b7:4d:27:56:b4:e2:01:29:82:d9:95:0a:1d:ec:87:
10:38:35:7a:0e:90:71:1c:9f:be:ef:a9:02:67:3f:
8e:c4:a7:30:6a:b2:90:2e:ea:72:14:b2:0f:c7:41:
c3:4e:07:4b:25:c1:9b:2c:79:1e:b5:0f:a6:db:c3:
27:96:e4:4e:38:6c:f8:73:b4:be:74:bc:5e:a6:e9:
08:ae:e0:7e:62:38:9e:17:66:09:bd:f0:0a:5d:db:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:59:4C:53:76:5B:37:38:67:2A:FF:D2:4F:EC:7E:D7:48:BE:C5
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a7:16:a6:6e:8d:5c:fd:e5:d2:df:96:22:53:a0:9b:02:98:
dc:21:e9:19:d5:c4:86:a6:6e:81:4f:e7:03:9a:5d:53:d7:a6:
c9:3a:62:62:69:2c:f0:68:93:40:6a:8c:52:65:a8:d7:9c:b7:
59:f0:c6:77:3f:4d:8b:52:67:35:88:4a:0f:6c:80:f7:b7:1b:
d0:14:8d:77:0f:62:f3:08:1d:f7:66:28:49:0b:d9:2b:64:b1:
04:65:4e:c1:3f:2a:be:4c:97:28:c8:40:bb:3a:4b:a8:01:0b:
d1:94:b5:6b:52:58:be:37:6a:8f:39:c8:98:fc:7b:03:8a:f3:
dd:3a:69:ae:2b:7d:85:7d:f8:fe:ce:38:51:d6:c0:8c:07:34:
a0:b5:ce:84:03:90:da:2a:6b:88:14:a4:64:9f:a8:de:5c:17:
10:75:a6:d4:22:f4:eb:b3:6c:d4:1c:94:d0:23:23:88:f0:de:
c5:99:29:d7:83:84:6f:e0:ba:86:3d:40:ca:53:f9:a3:42:4e:
1e:55:03:c8:70:b9:02:62:22:df:e0:6f:4c:04:29:63:3e:3e:
24:64:c0:78:f6:f3:38:c7:32:bc:5b:75:88:81:eb:98:ae:0b:
fc:d6:35:bf:f0:05:c0:d4:4a:4d:41:41:33:45:c5:92:d6:00:
69:01:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:17 2026 by rpki-client