Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: l55E5wNwLiBBAfoQ54muawMbFPE96AfRB7irARC+agA=
Subject key identifier: 73:D5:96:46:1C:22:CA:6E:7B:90:62:92:7D:F2:10:52:43:CD:55:AC
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019FA899652784DF4DA9C9B23D17088F6512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0803
Signing time: Tue 28 Jul 2026 12:00:52 +0000
Manifest this update: Tue 28 Jul 2026 12:00:52 +0000
Manifest next update: Wed 29 Jul 2026 12:00:52 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: PnqfyAZkPa7liLbgRx99j/id6+mFUSimmMBEAAJNX8c=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:65:27:84:df:4d:a9:c9:b2:3d:17:08:8f:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Jul 28 12:00:52 2026 GMT
Not After : Jul 29 12:00:52 2026 GMT
Subject: CN=73d596461c22ca6e7b9062927df2105243cd55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:c5:cc:7b:12:89:87:98:24:d5:df:42:6b:
37:f5:0e:8a:9c:78:99:d3:ad:ba:c5:e5:18:3a:93:
bf:20:fc:0b:7a:6f:22:40:1c:48:91:cc:92:d5:a8:
41:1f:3e:cf:04:95:c4:89:00:46:a6:f2:c7:b0:99:
78:d4:54:f7:89:46:d2:60:b5:e8:16:c5:ca:45:f0:
ca:f0:62:b5:a1:18:32:0a:96:0d:ad:76:14:f3:89:
38:21:c8:fa:25:0b:e6:ca:b3:ab:29:fc:43:8d:a6:
dc:d5:54:f6:88:e9:51:54:01:b2:a9:ad:ee:7e:a3:
94:32:c2:6a:01:22:e0:e5:b2:cb:f2:2a:7f:2b:2a:
cd:e7:1d:32:c1:3b:d1:4f:dc:74:e0:28:bf:df:82:
10:59:4e:72:f9:ed:92:28:72:36:06:ab:68:b0:0a:
f5:ad:9b:66:ba:e0:27:45:6e:5a:7d:82:03:ad:4e:
95:b6:17:64:a4:4a:f2:0e:2c:c7:59:cc:a6:1c:ba:
d0:f5:ad:79:d4:ba:3f:94:30:db:d9:14:38:31:91:
a7:71:42:7d:eb:b4:49:c3:06:e4:85:03:b7:84:90:
ae:21:22:ef:f4:e4:9c:e2:53:2b:24:e3:40:6d:db:
44:e1:55:02:4d:ba:41:5f:85:4c:ff:ba:d8:5d:16:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:96:46:1C:22:CA:6E:7B:90:62:92:7D:F2:10:52:43:CD:55:AC
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:65:7b:84:b5:dd:f9:dd:10:85:aa:23:31:8f:a2:32:d6:03:
c4:b1:4e:ad:92:e9:ee:81:ac:76:0e:2c:f6:1b:ab:9d:ca:0d:
a8:00:16:a4:65:51:9f:9e:4e:6a:0e:86:21:29:c7:43:1b:a7:
5b:df:01:64:6e:8c:9a:19:9c:de:ee:f0:a0:33:0a:2f:dd:4c:
fa:f7:dc:29:99:3e:de:c0:2d:7a:a1:51:36:90:d6:7e:dd:0b:
42:33:4d:5c:eb:d7:6e:99:31:87:e5:ac:d4:7c:6f:63:0a:7b:
4b:31:c1:65:bb:9d:7c:72:07:01:1f:44:17:2b:a2:13:fc:1f:
fb:11:5e:51:fb:2b:d1:aa:a5:f4:b4:07:f1:6f:b0:c0:54:00:
1a:9c:b0:8e:c9:ec:5f:82:32:56:0c:b8:69:72:99:5e:84:c2:
52:75:cf:92:e1:28:80:9a:3b:9f:9d:b3:e2:9d:c2:2f:da:be:
dc:89:6c:33:57:59:d7:98:25:34:e5:1c:f6:c3:d9:d1:35:92:
83:d4:ac:02:81:cc:0c:25:66:ac:b8:82:28:f8:57:36:9d:ce:
14:97:dd:7d:5f:4e:1b:22:7e:3e:0c:81:c6:10:8d:ae:5c:ad:
e9:a4:56:66:24:e3:58:02:a0:c1:55:93:a3:f3:9d:a0:9d:1c:
c7:98:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:50 2026 by rpki-client