Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: x9Cls6ape6PKqMc4IleXubGfgy/fGZ8InqO72R7ujLs=
Subject key identifier: 1B:80:7E:E4:AF:A3:12:B6:C2:67:10:96:F5:2E:B0:51:67:90:B2:2B
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019FA9E34B6413F6B12BD0A3A6B8BD32DEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 18:01:13 +0000
Manifest this update: Tue 28 Jul 2026 18:01:13 +0000
Manifest next update: Wed 29 Jul 2026 18:01:13 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: QH/TrWLQXUUyvWSDKysObwK9TyCwbP9M0gdu4fddWbg=)
2: 6sTBdAYOdsPVCJ7oIkKrll3rRVI.roa (hash: yTR0IA9nFjjo1Ldxk+L5OOie2llv02FCoCgvYWgevjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:4b:64:13:f6:b1:2b:d0:a3:a6:b8:bd:32:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jul 28 18:01:13 2026 GMT
Not After : Jul 29 18:01:13 2026 GMT
Subject: CN=1b807ee4afa312b6c2671096f52eb0516790b22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:70:47:53:0c:80:53:e0:7f:ec:72:11:f2:
42:8e:52:7b:00:24:17:df:74:8f:e5:cf:ae:dc:68:
fc:26:a0:80:3f:e7:59:e4:34:3b:c7:60:a4:9e:38:
be:08:d3:81:45:ad:a7:03:91:24:26:73:06:39:b7:
3a:43:1d:d7:1e:7b:41:e9:d3:9d:94:4a:c0:1e:11:
2b:14:20:dd:4f:f1:54:9f:8b:ca:bb:49:d7:63:b2:
0e:9f:12:9a:69:5f:43:da:7f:e3:74:6f:64:7b:ad:
b9:71:26:a7:8a:5a:9a:f0:35:6a:f2:ca:10:d0:91:
d3:f0:d4:88:15:bb:16:87:06:5f:7d:97:07:ca:46:
c6:a9:af:e9:97:cd:27:a6:00:df:f0:86:8c:c8:72:
0d:ee:06:e9:99:3d:39:b9:df:e8:17:4b:4c:22:33:
72:ee:ca:80:7e:7c:c9:e1:91:4b:43:17:76:6e:41:
ac:53:37:7a:65:5a:75:3a:c9:f9:fc:3f:76:0c:19:
c6:67:56:a9:d7:ec:4e:f6:28:fe:df:d8:56:be:45:
a3:30:2d:d3:de:28:d1:c7:34:90:13:c5:09:c9:f7:
f4:28:5f:f4:60:d4:8f:4b:aa:76:a2:38:18:b9:23:
01:77:22:a9:61:76:5c:24:68:a0:d2:e6:d7:f7:aa:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:7E:E4:AF:A3:12:B6:C2:67:10:96:F5:2E:B0:51:67:90:B2:2B
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c6:70:03:4f:1c:f1:63:c6:36:0e:2b:c4:5c:b4:5f:a3:b3:
a4:fb:d8:83:7f:41:93:5d:f3:dc:6a:30:6a:9b:36:a6:1c:39:
3e:4e:49:d7:83:a3:7b:cb:59:b5:d7:4b:a4:d4:2e:9c:d2:5d:
ad:11:22:d8:aa:b2:a3:a0:64:62:e2:7b:cb:29:4b:a4:ba:07:
29:25:d2:5e:2d:86:4a:65:a6:2a:8a:af:db:95:8d:9f:47:37:
f4:42:b2:d7:c3:d2:9f:f4:23:ef:b2:6f:3d:33:56:32:8d:86:
dc:a6:c6:63:4b:73:a4:71:8d:2e:de:3f:1b:8d:ef:ae:aa:bd:
e8:4a:9b:e3:27:c7:76:80:10:cf:74:28:3c:ea:4b:cb:93:b7:
1a:7d:fe:68:33:8c:96:d3:d1:de:97:bd:da:54:3d:4a:d4:f4:
a0:61:11:37:51:d4:64:08:c3:98:f1:d1:6f:b0:e6:b6:a2:47:
0a:e6:b1:e4:b5:06:63:21:c0:e7:ce:7c:d4:d9:52:0a:36:31:
59:a7:28:1d:78:67:bc:84:8b:13:09:08:7d:09:9a:8f:93:aa:
fe:6e:98:65:8f:13:59:0b:8a:6b:2d:52:c8:b2:67:aa:60:02:
10:c8:ee:50:cf:d2:49:19:96:89:da:0a:a2:3c:80:a0:c0:cd:
b9:8f:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:03 2026 by rpki-client