Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: sHK3va1cXvdgdQ47BfJMmBVYa8uVN6wYH8E6d8y+Kzw=
Subject key identifier: 60:84:77:86:FF:F6:CB:D3:B8:A5:BD:40:C1:09:28:A5:EE:4A:75:2F
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019FA862059A1119A3999A304253F9A40936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 17A1
Signing time: Tue 28 Jul 2026 11:00:23 +0000
Manifest this update: Tue 28 Jul 2026 11:00:23 +0000
Manifest next update: Wed 29 Jul 2026 11:00:23 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: F79fC4JztnQbu0ZSwsAL1gaZNCHudZ36GU0P81PGHKQ=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:05:9a:11:19:a3:99:9a:30:42:53:f9:a4:09:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jul 28 11:00:23 2026 GMT
Not After : Jul 29 11:00:23 2026 GMT
Subject: CN=60847786fff6cbd3b8a5bd40c10928a5ee4a752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:16:fe:a9:2b:7f:12:ca:f4:38:f8:a6:4c:
9a:e6:83:4e:44:5f:ec:06:7c:4f:ea:45:3c:24:0f:
78:29:83:88:08:fb:09:dc:0a:88:ac:23:e4:b8:9b:
96:54:77:78:c6:04:17:ca:ae:01:8d:ff:3c:53:17:
60:54:7b:5a:a4:f1:60:a9:03:a3:a4:85:72:12:b6:
22:bd:bf:5b:b5:d5:de:2d:24:2e:9e:4c:68:b7:9b:
41:a3:fc:ef:1a:2b:13:f1:a6:59:cd:94:09:cb:6c:
6c:4e:69:9c:29:8e:45:ea:d3:09:61:39:34:b3:65:
66:f4:3b:3c:a0:e9:e2:ad:98:43:63:26:c5:8c:e9:
eb:17:c7:fb:83:5c:60:30:3c:1a:c0:0d:1e:3e:87:
d8:fd:d2:82:0c:92:b0:26:85:48:79:3d:1b:a0:18:
67:71:a7:84:c7:ff:f4:af:cd:71:a7:de:80:e6:23:
03:df:f5:f5:8f:8f:57:7c:ad:8d:4a:3f:fd:90:e7:
af:9b:24:0d:02:bc:b5:f3:d0:f2:b8:0b:ce:e5:f7:
65:06:bf:cf:8f:b4:38:35:80:96:c2:1e:96:b6:26:
e0:16:18:fa:f0:37:ac:a2:ee:d1:0e:20:83:82:0e:
78:23:c0:ef:4f:01:d4:28:38:82:36:27:fb:8a:bd:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:84:77:86:FF:F6:CB:D3:B8:A5:BD:40:C1:09:28:A5:EE:4A:75:2F
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7d:dd:24:f6:06:c7:2f:7a:62:c0:1d:e5:2c:e0:4c:f1:6a:
20:66:e9:40:6b:1f:c4:30:c5:1b:38:91:64:b3:92:66:5f:09:
57:25:9b:5c:1f:22:45:06:96:77:ba:f3:21:85:27:61:fc:85:
ff:9c:0e:b2:69:4b:af:8d:b9:0c:38:74:cf:3a:b0:b5:9e:65:
ab:72:c8:3d:50:61:f6:c5:41:15:6d:80:93:a7:3c:3f:e7:a5:
97:3d:7f:5e:26:5b:69:59:af:70:03:6d:27:a6:f6:7f:68:45:
b2:e6:1b:32:b9:a9:89:aa:d1:c6:36:77:93:1e:2b:e2:3e:e1:
76:da:f2:b8:71:7b:00:2d:46:19:0d:e8:05:1c:5f:aa:e7:6b:
2d:b5:3e:96:70:f9:7a:53:40:a8:cf:5e:5e:cc:7c:8e:f1:38:
49:75:09:3e:18:89:71:57:a0:3a:e7:cf:54:36:24:7b:1f:de:
c4:88:1a:f3:9d:26:b8:fa:4d:59:59:89:9e:8e:93:b5:49:64:
10:59:61:0f:54:95:80:c2:d0:e0:ee:6b:09:ff:ad:38:ae:6f:
31:66:72:d4:46:c2:71:1d:b1:c9:c4:24:12:1f:3f:8d:4e:c8:
57:4a:e2:d3:d1:47:94:e3:de:7a:b3:e3:5b:d9:79:8b:12:f6:
96:6d:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:02 2026 by rpki-client