Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: KV3DT3eY6RGdk9n2ojGVnqN7t17QIHfBjrnXUegxpOc=
Subject key identifier: A2:47:7F:1A:94:4E:3D:BB:20:6D:09:C9:3C:B4:88:23:FB:F8:69:32
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 019FA9E347CF43DBDBE3CD6FDD8349A60849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:01:12 +0000
Manifest this update: Tue 28 Jul 2026 18:01:12 +0000
Manifest next update: Wed 29 Jul 2026 18:01:12 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: +SReQb6jjAnhHF+Uxyn/7C3L4v8PJ1k4NAR1xg9FwYE=)
2: UjFwX21JbiqjDw7jVogurOY6vK0.roa (hash: StMP6W4VJaKc6UNnpuMnvzgEyfJwsKnjjavPWXE2/og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:47:cf:43:db:db:e3:cd:6f:dd:83:49:a6:08:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Jul 28 18:01:12 2026 GMT
Not After : Jul 29 18:01:12 2026 GMT
Subject: CN=a2477f1a944e3dbb206d09c93cb48823fbf86932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:c9:68:fd:65:e8:3f:30:b9:43:a0:0c:38:
7d:c0:e0:f2:0c:9e:bd:54:58:d3:e0:b8:00:7e:ec:
04:3f:ac:e5:8b:10:2d:25:ac:04:46:c2:b4:05:71:
20:46:04:f8:24:a7:5c:b3:78:24:d5:e8:87:31:8f:
31:2f:ef:90:ac:3f:8a:37:c8:b4:77:a3:1c:6f:ea:
66:cf:94:51:47:dd:b3:f2:7b:40:b6:8d:fb:bd:f7:
d3:e3:c5:d3:c0:da:88:97:19:73:08:e4:73:24:4b:
24:21:62:16:6a:b7:34:d8:c3:d6:11:90:f2:4a:da:
36:80:51:ad:2c:e4:19:35:35:0f:db:70:fc:72:d1:
42:97:24:24:9d:5a:73:e2:46:5f:38:a5:a9:83:a4:
0e:99:f3:ef:79:52:9e:a3:80:83:4a:b1:01:89:61:
b5:13:88:b0:f7:69:1f:aa:ce:c6:20:df:ff:32:ef:
f9:51:bf:2f:2f:ca:74:a5:d5:a1:b2:63:92:30:4d:
38:43:3f:48:c4:19:ae:37:0e:6b:7a:a7:0f:aa:b8:
1c:3c:2e:1c:ab:82:13:c5:b9:29:1f:81:5c:c4:d1:
75:f7:94:ff:75:92:ca:ba:f5:ab:aa:ff:c1:4d:4e:
35:2a:5c:b2:67:ac:ea:c7:b5:b1:5c:f8:a1:50:94:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:7F:1A:94:4E:3D:BB:20:6D:09:C9:3C:B4:88:23:FB:F8:69:32
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:90:ba:22:6c:bc:2a:64:88:6d:30:0e:b4:fb:3a:f8:57:78:
dd:c4:80:a7:4c:2d:e4:eb:47:ff:51:d9:c7:d4:56:03:b1:7d:
38:ad:de:88:23:0f:09:a3:3f:92:2f:42:95:6a:30:28:a9:ca:
79:cf:f0:0d:ea:b6:c7:dc:e0:92:1b:15:1e:60:60:bb:42:8f:
e9:9c:1c:51:e3:3a:83:d5:bf:7d:25:26:d0:45:1f:fe:38:c3:
3a:b6:b5:24:f8:31:c1:e3:49:c4:f8:6d:2b:d5:27:19:ae:f6:
77:32:dc:51:89:a0:79:4d:bf:ef:9d:10:08:21:17:cc:c0:e6:
dd:a1:73:54:9d:86:76:ec:03:0f:23:16:e3:38:78:7e:3b:5c:
a1:09:17:63:c3:ee:c2:af:30:35:1a:a3:e6:79:40:b3:43:1a:
b6:1e:9e:af:2c:47:14:72:7d:d4:49:21:a5:db:62:03:ba:a6:
55:01:67:60:1e:e2:c2:4a:74:ab:04:ae:58:7a:94:24:fd:03:
df:ca:40:08:63:aa:c9:f4:4c:2b:a1:81:9e:68:00:4a:dd:a0:
a2:27:38:03:c4:0a:df:8b:19:2c:e4:15:5e:de:21:09:1d:59:
c2:55:3e:bd:c1:7d:2a:de:e3:56:0c:05:82:64:ac:fb:d3:b8:
90:42:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:54 2026 by rpki-client