Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: v1AailVvXRtHTPMdUP0Lz9Y/YbLlxK+8SL14xoSJdTU=
Subject key identifier: E9:1A:E7:C1:23:A9:96:F8:BA:DB:14:61:08:93:1F:9E:3A:22:0E:32
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019FAC08FF87D20F7E62B3AE171528C1A916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 04:01:38 +0000
Manifest this update: Wed 29 Jul 2026 04:01:38 +0000
Manifest next update: Thu 30 Jul 2026 04:01:38 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: 00WQw2TUcGmxow+YUnU24eJKhcCiirxM0tjKRtSUKaM=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:ff:87:d2:0f:7e:62:b3:ae:17:15:28:c1:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jul 29 04:01:38 2026 GMT
Not After : Jul 30 04:01:38 2026 GMT
Subject: CN=e91ae7c123a996f8badb146108931f9e3a220e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:e0:94:a0:be:35:c7:d1:8a:fe:45:46:c3:
c2:5b:cf:36:0e:ff:87:48:fe:ca:4b:06:56:aa:28:
2c:51:b9:9d:88:4b:3d:ab:45:a0:28:00:9f:d8:a3:
78:5e:56:67:8e:3e:65:ad:34:2a:e8:bc:d3:f1:e6:
52:d8:ef:d0:88:fc:0e:7a:a7:e0:c6:de:11:b1:0f:
9b:fa:31:3e:7b:98:21:60:0b:71:87:16:d7:a6:64:
eb:fe:99:79:e0:a1:18:c2:d8:52:27:86:43:a1:56:
4a:fc:8c:e6:e7:87:eb:98:f6:6c:3b:94:65:93:d5:
e3:cb:aa:22:43:dc:57:d5:82:2e:d4:09:e9:ff:8e:
91:40:7e:85:8c:19:35:97:89:ab:7e:63:b0:d0:2b:
13:a4:64:48:e4:62:0f:59:02:08:24:62:d7:9f:ac:
87:c0:d8:5a:01:a4:a7:af:ba:a7:d2:3a:ba:78:27:
6f:22:85:91:44:9f:32:48:94:bb:1c:01:10:39:6d:
e0:12:e5:92:d7:bb:28:81:7d:4f:24:e6:72:9c:0c:
73:4a:ea:b8:85:c9:d8:e6:ee:f9:8f:bf:dc:59:36:
b6:04:0c:b0:3f:df:fa:6c:7d:0d:e3:58:30:3f:af:
9d:08:93:52:e0:ad:2c:21:dc:98:8d:a4:a2:2b:2b:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1A:E7:C1:23:A9:96:F8:BA:DB:14:61:08:93:1F:9E:3A:22:0E:32
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1e:7d:72:7d:53:fc:cf:90:1d:36:05:11:e1:57:b9:2f:69:
ff:b2:b8:fb:f5:dc:ec:93:e8:c6:cf:18:58:73:91:51:bf:60:
35:b9:11:66:08:c2:48:27:d7:50:5a:87:9e:2d:14:d1:7d:f3:
f9:d4:40:ae:40:e9:d3:6d:31:32:35:c1:c4:88:5a:b6:cb:a9:
83:3d:82:9e:7a:c9:4d:7d:bb:38:41:9e:e5:87:fe:bc:d4:cb:
7f:e1:18:f7:20:6e:3b:4b:da:40:4f:96:32:d1:06:b6:71:89:
c0:f9:44:3b:9c:1f:00:28:e7:f8:35:de:90:0f:16:48:54:b7:
0e:e6:2f:cb:65:7f:56:9a:8c:f0:f8:ef:0d:73:21:dd:84:84:
cc:f0:97:49:e6:fa:8a:e6:77:b7:5f:ef:98:a5:47:38:ec:b1:
3d:ae:6e:28:34:51:fb:4b:24:15:29:46:d8:bf:8a:17:eb:85:
fe:17:3e:da:a2:3b:30:a5:3c:8a:c5:2c:87:e6:7b:2b:33:b4:
f4:7c:fd:9b:f4:51:1a:e7:d1:5b:5c:aa:87:43:b8:93:ba:b4:
ac:ba:cf:00:a3:34:26:01:a2:30:e4:43:5b:9c:ef:57:f6:21:
7c:d9:d2:94:ac:7f:8e:03:31:3e:fa:3c:80:32:eb:43:2e:2a:
20:ea:4a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:09:48 2026 by rpki-client