Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: I284CuB8wn7ItVB+sm8GsXDIlJAnwpBddt9RagFl1AI=
Subject key identifier: 1A:FF:73:85:78:C8:AC:63:76:44:33:E0:C3:4B:19:45:E4:37:36:01
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019FAA50C9C0AA7C3DF7E4FC64446554B738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: nLEf1yvs5xxNPYd9t9yNexcZCq0Meh5YJ2IjVXoBaiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c9:c0:aa:7c:3d:f7:e4:fc:64:44:65:54:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=1aff738578c8ac63764433e0c34b1945e4373601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c6:0d:e3:19:70:79:4e:52:00:92:01:e0:07:
3e:78:42:3b:13:40:09:e4:c4:0d:1c:ce:ac:95:00:
d7:7f:cc:46:d2:5a:b7:54:01:47:92:99:b9:56:a5:
ce:16:5d:df:f4:08:e7:a4:e5:a7:8c:bc:2d:6c:27:
dc:7e:2b:70:e1:e7:a3:e0:01:11:46:5d:e2:04:b1:
f0:68:78:fe:9a:f8:4f:10:19:30:a4:8a:a0:4d:8e:
fd:4a:30:f4:90:b5:52:e7:69:3c:2f:aa:dc:4c:ba:
4f:33:e5:87:48:82:0a:67:c0:f2:7f:02:5c:5c:bb:
7b:a8:0b:89:c0:cd:e7:1b:60:45:7c:b0:de:6d:6a:
09:3e:92:f4:b3:82:2f:30:cc:e7:c3:d5:c0:6b:3f:
11:75:27:7a:87:f2:75:8c:86:a1:4e:4b:f6:63:88:
52:8b:5f:3a:d4:f5:38:2a:c9:15:95:e6:92:03:19:
c8:76:2c:7b:28:73:d1:f8:cc:90:97:0f:45:0d:8a:
1c:71:13:6a:1a:f2:f8:23:c3:51:b6:df:a6:75:85:
ca:3a:0c:7e:11:01:9b:b4:31:5a:90:4a:46:51:43:
46:1f:21:87:f3:b1:48:6b:e8:bf:05:3f:77:ef:37:
87:cd:51:49:83:84:2f:59:c6:2d:aa:50:bf:59:6d:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:73:85:78:C8:AC:63:76:44:33:E0:C3:4B:19:45:E4:37:36:01
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fb:fc:ed:37:dc:ea:9b:0d:93:d6:8c:fc:c6:2f:15:01:ed:
2e:bd:6c:9c:86:20:3e:30:6e:36:52:d3:d8:bf:cc:bb:20:c1:
24:a6:94:89:97:71:26:bb:12:da:f1:0f:f5:01:b2:a2:8a:c0:
98:e2:43:e2:16:d4:67:97:14:4d:53:05:58:ba:40:b5:06:2b:
db:e5:d1:57:17:98:da:67:bd:97:b4:f7:ee:d3:b5:44:07:89:
f4:bb:f9:03:b9:f7:27:32:68:37:6c:10:44:b3:62:c0:ca:b9:
5d:37:f6:c1:df:21:91:11:af:ee:a6:9a:20:8b:71:b2:af:57:
29:17:31:86:bb:6d:ee:de:2a:e6:0a:20:6d:7b:a9:5c:53:76:
d9:32:93:71:a8:29:9d:a6:15:50:67:77:9c:17:8f:c5:5d:ea:
99:ec:51:7e:38:c9:1e:d7:b2:21:de:df:9d:6d:2e:18:41:cd:
81:e8:27:c3:61:c9:67:f2:bd:6f:1a:49:62:46:92:09:71:ef:
0e:d6:3b:88:dd:ca:81:88:e1:73:c8:4a:a0:9c:1e:c9:69:23:
7b:4d:a6:8b:02:b3:5f:44:aa:00:3b:e4:d8:2c:86:15:aa:5d:
a5:81:98:0b:26:22:ec:ee:bf:e9:6f:25:ce:6c:de:5c:1c:15:
8f:76:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:14 2026 by rpki-client