Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: 1yqYoUVML9uIh/DQWNHKNQUsO933El2gyrB+Kwr3oig=
Subject key identifier: 91:D3:BA:26:52:C8:69:89:F7:47:CA:F7:FF:62:23:51:71:30:E9:E5
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019FAAF5AE8F79FD6DEBCFBD0073A5C2BC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 23:00:55 +0000
Manifest this update: Tue 28 Jul 2026 23:00:55 +0000
Manifest next update: Wed 29 Jul 2026 23:00:55 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: xxsRrluojBHqHAsECF3j+5vOcUNBv318pFLF0WEVVx4=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ae:8f:79:fd:6d:eb:cf:bd:00:73:a5:c2:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Jul 28 23:00:55 2026 GMT
Not After : Jul 29 23:00:55 2026 GMT
Subject: CN=91d3ba2652c86989f747caf7ff6223517130e9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:54:c3:e7:31:6a:15:1f:c4:ca:0a:52:9b:
78:d7:44:59:94:91:70:14:fb:23:38:74:0a:a2:17:
3c:30:4c:61:5f:22:0f:ac:1f:79:ae:b3:1f:fa:ed:
2c:24:29:4a:dd:54:0e:a1:18:31:0a:4e:15:8b:0f:
0f:fd:dc:f4:32:9b:62:93:73:61:8b:70:8d:4b:df:
91:42:4b:e6:19:2c:bb:77:88:8b:1f:74:50:f5:de:
f3:8a:32:bf:a4:c5:5c:10:e9:c2:10:cb:00:8d:4b:
e4:57:0e:17:10:c3:2c:ba:96:05:83:10:15:60:39:
a1:d3:e8:03:83:ff:fc:99:44:5c:9a:86:08:10:66:
65:ae:2c:22:1e:24:64:45:15:35:57:6b:eb:a4:1a:
c4:fc:fa:e9:bd:d1:b3:df:29:5b:b8:3d:ae:e3:f9:
10:95:bf:43:e5:93:42:6c:86:f1:72:49:3a:b9:5a:
d2:38:a1:5f:c9:bf:b8:54:78:ad:3c:71:2f:de:17:
97:c4:18:ee:5d:64:fe:b0:3e:6e:7b:48:8d:3a:a9:
bc:f2:62:60:16:a0:0f:b5:1d:1d:5d:70:b7:d7:9b:
db:35:1c:ef:1a:e5:fa:0c:69:aa:de:8b:39:78:03:
32:67:4c:ef:0b:38:3d:30:e0:b1:99:5d:8d:3d:e5:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:BA:26:52:C8:69:89:F7:47:CA:F7:FF:62:23:51:71:30:E9:E5
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1c:f6:91:a1:a8:cf:26:6e:6e:cc:b9:38:ac:a3:67:96:79:
7e:8e:4b:cb:71:3a:18:88:28:e7:e1:4c:d0:c5:f1:85:81:40:
86:46:43:19:16:f8:27:e6:1d:72:da:2b:18:62:b1:6b:f4:96:
60:1a:25:11:ae:79:54:cc:69:bd:2b:c6:55:14:82:ef:af:e9:
e5:06:2c:41:87:b9:e4:5d:db:91:51:8f:28:ed:ac:16:2d:70:
1b:2b:f6:bb:40:01:a8:d1:71:cd:65:62:74:aa:45:02:1e:52:
79:5c:d6:0b:22:d3:40:b0:a4:e6:2d:00:76:de:7c:eb:3c:30:
9d:64:3e:1e:72:da:a7:6b:c7:4d:c1:60:a6:0e:cb:e3:f7:8e:
f4:cd:8f:aa:da:96:0e:a7:a3:49:52:d7:9d:6d:cc:c9:13:56:
39:b2:dc:bd:1e:f2:72:69:b9:dd:d3:85:c4:33:e3:8f:37:38:
67:99:54:67:20:b6:1e:be:25:47:44:b2:07:b1:65:f6:41:a8:
88:31:3e:2d:d0:7d:62:40:68:45:8c:7c:64:27:f5:b5:de:83:
ad:5b:c0:e9:aa:83:20:f9:26:60:cb:2b:c1:68:23:af:d4:4a:
e6:bd:c4:4d:14:3b:dd:53:11:f8:a9:5d:69:e8:0c:24:21:d4:
43:73:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:32 2026 by rpki-client