Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: x8SN68RikTWSxf5ypm3dRwdAfA0957P+8FCxPSnfSUE=
Subject key identifier: 55:52:8B:76:20:26:36:C3:8C:FD:E0:F7:65:3C:02:8F:A7:53:E7:D6
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019FA6E1D51FD0D350607AB83F0016F38B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 19E6
Signing time: Tue 28 Jul 2026 04:00:45 +0000
Manifest this update: Tue 28 Jul 2026 04:00:45 +0000
Manifest next update: Wed 29 Jul 2026 04:00:45 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: l1aaHgXSII735iSN+P6eNyMnlZackd/9Kzfgn6CWYv8=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:e1:d5:1f:d0:d3:50:60:7a:b8:3f:00:16:f3:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Jul 28 04:00:45 2026 GMT
Not After : Jul 29 04:00:45 2026 GMT
Subject: CN=55528b76202636c38cfde0f7653c028fa753e7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:52:4f:b5:e7:7d:89:28:13:b5:04:89:7f:
1f:4e:4b:d8:1a:27:a4:8e:2a:fe:90:48:9b:e7:b6:
96:2d:51:5a:bb:01:96:24:68:eb:d0:76:dc:d2:d3:
40:cb:da:ae:55:44:21:b5:81:12:e3:23:9d:0d:de:
a2:f6:a6:df:53:6a:6e:3c:38:03:c1:95:c8:00:88:
86:88:fb:fb:98:ca:f7:f6:d5:3b:f0:26:8d:a2:87:
97:f8:e4:e2:8e:9c:38:5d:98:14:36:df:66:36:a0:
c4:7a:18:6d:61:73:f0:a1:81:83:e5:b4:3f:cf:21:
30:de:c0:58:97:57:1c:7f:dd:8e:7f:d6:b4:1d:f1:
75:21:85:a7:59:54:02:fe:07:34:1a:42:30:e6:b8:
fa:72:9b:9b:94:5b:c9:ae:95:06:52:97:60:25:31:
8e:91:0f:8e:aa:8d:f4:15:6c:be:e6:9b:8f:43:d0:
1d:4a:ef:01:fc:11:68:5f:36:be:d2:fa:e3:a6:e7:
54:8a:fe:7b:d7:d4:72:8d:a1:97:a2:49:c0:f4:2a:
48:2a:a4:6c:9c:0d:a9:1d:55:66:d9:8f:b2:28:b9:
b1:9e:5d:74:a7:55:e1:f7:97:8d:2b:e7:c9:95:e1:
ce:e6:72:21:af:05:91:ed:53:70:99:d5:d8:e5:23:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:8B:76:20:26:36:C3:8C:FD:E0:F7:65:3C:02:8F:A7:53:E7:D6
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e8:ff:06:ef:71:a3:92:3b:d9:a6:1a:38:81:4f:f6:9d:14:
af:70:91:d5:32:72:72:a5:ff:7b:35:3d:f9:29:42:72:b5:02:
41:88:f9:4e:b9:ed:a2:4b:39:ba:b8:c4:16:58:56:46:3e:2a:
7f:44:a7:eb:59:d1:1d:1d:2d:f3:a2:10:69:b8:6d:88:b4:16:
e6:8a:15:1b:da:be:6b:bb:ea:07:86:d4:1f:2c:5d:e1:e9:19:
a4:37:d2:f9:32:b6:3e:86:d5:34:2b:6b:b6:4e:d3:ab:37:f3:
01:46:21:2a:de:5b:a5:0f:15:4f:73:08:a8:9c:84:51:41:47:
52:03:82:67:60:ff:ff:54:bb:ee:ca:52:70:92:2c:11:fe:fa:
2f:67:96:03:07:21:5e:62:0d:bd:da:32:3f:e8:ac:38:a4:6e:
a3:87:8a:3a:11:e3:8d:23:7e:7c:b0:4d:3a:10:c4:39:86:44:
51:b8:4d:2e:25:5e:5e:a3:46:e3:80:be:74:a0:8a:f3:92:69:
30:09:33:d7:ee:8d:8e:85:f8:66:94:c9:78:7c:22:8f:39:fa:
85:61:9a:f9:bd:3b:f6:ff:4d:0d:77:04:b8:06:a3:38:bc:ba:
c0:e5:5d:ac:e7:dc:8e:e1:93:fa:c2:f0:a4:83:9a:2f:0d:17:
f9:0f:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:55 2026 by rpki-client