
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: 7hIeHAYyfckpLJUCnXEmUAuTyNEJDtxkJbDM/hpQgPg=
Subject key identifier: AF:CB:20:1B:6F:3D:33:E7:8E:CA:EF:B1:1A:F9:A4:95:B2:90:7E:0B
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019FAB9A7127B72B3997809A576D6D541669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 18B2
Signing time: Wed 29 Jul 2026 02:00:53 +0000
Manifest this update: Wed 29 Jul 2026 02:00:53 +0000
Manifest next update: Thu 30 Jul 2026 02:00:53 +0000
Files and hashes: 1: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: 5lWIIcH1BB8F/RxiVy7Q0gOmOLN95vt+RGAWWS0VyQ0=)
2: _1uT-dJdB4zjdJrrsneMD7wKcvI.roa (hash: ZF972oLTFfsetFH5TGdur7PAWOAqIPiOxk86Q4SVB40=)
3: lj_OVhtyzOOGAl8O2ZX2b9-uYP4.roa (hash: /IN+PkswpcNIMIACvoERnunbvdFhIwO4BCUWqEEWkVE=)
4: r6UENQfHPYPsytR3ZmZk92OeJYw.roa (hash: cC+pFefGw9rN2/Aqknuk+KBy4ay7V4pHstE2Pj94BJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:71:27:b7:2b:39:97:80:9a:57:6d:6d:54:16:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jul 29 02:00:53 2026 GMT
Not After : Jul 30 02:00:53 2026 GMT
Subject: CN=afcb201b6f3d33e78ecaefb11af9a495b2907e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:d9:12:fc:6a:cb:d4:00:12:ae:5c:a9:c0:
d7:ac:37:df:79:7f:74:b4:2e:0f:ca:10:31:b3:7a:
a6:15:2f:16:a3:b3:2b:98:8a:9d:6a:3b:2a:20:aa:
9b:83:5c:3d:33:9e:81:17:73:bb:ae:0f:f1:94:e8:
89:58:8d:3d:89:26:8c:50:aa:4e:ae:2b:75:e5:14:
6d:b8:1b:96:de:44:05:67:1e:5c:c1:20:7a:5c:b6:
57:84:3f:3e:67:df:b2:b1:39:9f:54:be:57:f3:e4:
9b:5c:05:5d:bb:2c:31:e1:21:f4:30:ad:32:e5:59:
87:ac:75:db:da:a0:12:12:07:af:de:73:cf:ed:08:
6e:01:fb:6a:20:e6:68:9d:3a:95:4d:52:63:18:0b:
38:17:ae:00:5c:32:e7:20:67:8d:7e:49:76:c9:e5:
b8:85:67:a3:71:d6:a5:7f:7b:fd:3e:5f:04:17:a9:
de:13:34:05:d1:c2:af:bc:e5:7f:c3:9f:a2:5f:58:
0e:87:a5:a5:8f:50:2e:ff:cc:37:fb:78:ad:17:be:
b3:71:0b:a5:8e:25:73:3b:47:95:84:fb:0d:4b:4b:
11:06:37:0d:6e:27:df:d0:ec:1d:73:ac:cd:fd:4c:
96:ec:c3:ac:08:12:6f:65:ab:1e:52:3c:48:9d:fa:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:20:1B:6F:3D:33:E7:8E:CA:EF:B1:1A:F9:A4:95:B2:90:7E:0B
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4e:bd:66:72:b7:7c:93:86:40:de:c8:5e:05:88:ff:f0:a9:
67:ac:91:a2:51:09:ac:ad:be:a0:05:73:20:1a:a5:3c:a0:ce:
ee:c8:ae:8f:e2:8b:ce:fa:03:8c:cf:4b:7b:c6:a3:ca:5d:d5:
d1:d7:22:0b:81:a9:fb:7e:32:5a:a1:47:20:01:86:f5:f4:58:
8a:1c:f4:de:c4:13:d0:0e:b9:a4:80:33:45:7a:2e:54:34:be:
70:f0:51:2c:37:24:a3:b0:3e:4f:5e:96:b1:10:4a:0e:a7:e6:
f7:2b:09:10:fe:71:9c:03:e6:53:36:48:57:c5:ff:8c:04:b7:
c7:6d:d7:51:fe:bb:a7:95:33:97:9e:e3:78:a5:a8:34:b6:73:
ad:59:c0:40:53:27:93:9d:a9:63:31:35:5a:30:c9:2e:3e:ed:
dd:86:87:3e:d0:76:05:fa:43:c9:ae:4d:fe:99:a4:dc:3c:58:
34:0a:f7:51:54:ab:0a:3e:93:15:79:b3:2d:52:c8:dc:88:50:
05:7f:29:4e:66:2a:90:e1:02:dd:f6:36:0d:02:85:b2:80:c9:
16:78:b5:63:50:e8:3d:5b:7e:da:b1:8c:2c:f2:0c:ce:21:dc:
43:13:59:75:ae:fe:6a:67:8e:93:3a:4d:73:43:31:62:79:fc:
a4:24:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:32 2026 by rpki-client