Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: c4HH2hYixyG3OMkvt+FiVv28M4pxTwjOhcJkwUd/G4w=
Subject key identifier: DA:3F:05:33:98:E7:24:EA:2B:1E:6F:F2:9C:93:49:7A:B4:06:28:20
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019FACACD0A9B1731A6A24943F0E15C7A4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 0660
Signing time: Wed 29 Jul 2026 07:00:34 +0000
Manifest this update: Wed 29 Jul 2026 07:00:34 +0000
Manifest next update: Thu 30 Jul 2026 07:00:34 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: GzomutxQUJYfpzSn1/QzD2LRjy51hkdy6w+hQ//OfJ8=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:d0:a9:b1:73:1a:6a:24:94:3f:0e:15:c7:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Jul 29 07:00:34 2026 GMT
Not After : Jul 30 07:00:34 2026 GMT
Subject: CN=da3f053398e724ea2b1e6ff29c93497ab4062820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:22:92:1b:7c:d2:6b:2a:1b:ac:f8:cf:eb:
06:11:c9:9c:ef:e7:dd:ba:9c:25:fd:28:d3:f9:7e:
dd:85:28:f3:b7:b9:bc:c0:b7:a9:49:fd:c3:fc:48:
24:02:c7:90:67:86:3e:a5:7d:ef:d5:d3:90:df:63:
5d:4b:25:65:1e:ba:60:2b:6c:1f:76:c7:67:6f:9a:
6e:df:c8:6d:77:db:ab:c5:d5:7b:9b:b6:86:93:a8:
db:ce:78:41:0b:b6:cd:10:e5:43:95:b5:26:fd:6e:
7e:75:d7:d7:74:c1:35:42:6d:96:12:21:44:2e:04:
fd:6d:29:51:7d:11:fc:ab:46:96:fa:78:c7:52:7b:
b4:d2:19:91:5a:34:4b:37:72:e0:44:69:6a:37:83:
27:19:4f:2d:30:12:30:ae:d8:7b:11:19:ab:39:63:
60:5b:75:2e:a8:ba:89:6a:e7:e5:08:12:ae:7f:29:
87:6c:71:db:45:c3:1d:1e:27:ee:fb:5f:60:db:e7:
20:8d:15:e8:e4:1b:e0:5c:60:ac:a5:15:96:7e:3c:
f4:81:a3:31:2d:33:b0:27:f0:dd:8f:44:8d:c8:6e:
83:71:c6:5a:63:97:8f:54:4e:d1:07:f5:a2:95:a8:
94:ec:02:df:09:b6:36:33:49:5c:01:51:2a:73:f9:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:05:33:98:E7:24:EA:2B:1E:6F:F2:9C:93:49:7A:B4:06:28:20
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:3d:3a:00:da:e1:b4:14:28:fa:f6:1a:64:c5:f1:b7:d0:
44:f3:ce:29:bc:df:2b:0c:a3:3a:f6:1a:5e:85:72:85:82:b1:
5b:b6:59:bf:ca:f6:b9:14:97:b6:1b:af:c2:f3:a6:3b:e2:c2:
25:ae:b5:0e:7a:eb:99:ec:80:87:94:14:4d:d6:8a:01:3e:9a:
e0:13:c0:cf:eb:37:09:71:16:4a:da:e3:73:d2:82:fe:7e:89:
da:6c:35:83:77:85:ff:44:15:67:ae:1b:63:23:61:5a:31:b6:
31:f7:c4:61:42:3b:d3:57:a1:81:72:76:06:9d:f4:03:75:88:
2f:25:78:f7:ed:c0:12:c3:5c:1d:d7:82:f9:66:f2:98:ee:8e:
5f:9b:4a:ce:2a:d4:43:a9:65:29:76:74:75:bb:da:c1:fc:ec:
fc:97:ab:d9:55:c2:9f:9d:73:00:13:e0:b3:0d:aa:2d:c1:04:
5e:07:11:82:8a:33:85:f6:b6:3e:53:54:c4:fe:6f:78:8b:01:
32:8f:1f:26:9a:fc:ff:c5:41:ca:3b:e6:d9:0a:70:5b:9c:b4:
e9:c0:41:2c:56:c4:bd:b9:c2:3a:a9:5c:78:6e:72:27:28:ec:
c3:44:d8:96:80:d2:b1:f1:3a:a0:c4:35:b6:74:f7:6f:13:50:
12:6c:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:22:20 2026 by rpki-client