Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: eA0atk/iRlPXIEGCaOIb3+hRb7252TMe2EjHmxsFMak=
Subject key identifier: 7A:1A:0B:85:A1:15:AA:E4:E5:CC:B5:4B:78:D8:C2:39:26:03:A6:A2
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019FAA507A91248762D119C342D44DA2466F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 20:00:28 +0000
Manifest this update: Tue 28 Jul 2026 20:00:28 +0000
Manifest next update: Wed 29 Jul 2026 20:00:28 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: ykm1VBmnrkmwlAJe1KsrjBMS91xRaPZMaSP8L/BSFY8=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7a:91:24:87:62:d1:19:c3:42:d4:4d:a2:46:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Jul 28 20:00:28 2026 GMT
Not After : Jul 29 20:00:28 2026 GMT
Subject: CN=7a1a0b85a115aae4e5ccb54b78d8c2392603a6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:46:e1:5c:9a:3c:c5:96:98:63:70:02:d8:
6d:06:d6:25:ea:6d:9f:ad:ae:4b:da:94:af:1e:c3:
47:a1:a3:0a:60:bd:76:60:e4:2c:60:05:31:2b:a6:
dd:ff:a5:a9:cb:9c:86:79:cf:d3:7d:8f:b9:f2:e8:
c8:66:00:ed:a7:cd:2f:0d:87:e9:dc:99:bc:f6:a7:
ce:43:1f:5a:c5:fb:d3:87:4d:f7:02:0c:ac:9a:24:
c2:46:c9:6b:f6:fe:18:fa:44:ab:5e:68:e9:e9:c3:
52:e4:f7:28:6c:80:34:31:26:83:b7:41:21:e6:08:
ff:ed:40:a6:ad:c0:1b:23:c7:ae:ac:7c:1a:a4:4b:
66:7f:94:55:39:01:85:1f:3b:07:9d:51:2b:6f:5d:
29:b6:0b:85:c9:59:74:61:13:bb:58:64:bc:a4:86:
9b:1d:70:9e:a3:c9:87:df:2b:a5:1b:8e:22:cf:47:
1d:b8:ea:d7:5e:ee:2c:ec:3e:41:79:15:2c:45:26:
5c:fe:dc:15:31:b3:c3:61:da:62:02:be:7c:a9:6a:
93:e6:8f:6a:dc:e7:e3:38:8b:c2:ef:68:65:cb:a7:
07:f4:bc:b5:0b:87:a2:2d:51:66:6e:01:02:d0:67:
34:fc:a1:f5:77:4b:d6:fa:9b:96:b7:7b:d2:28:86:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:0B:85:A1:15:AA:E4:E5:CC:B5:4B:78:D8:C2:39:26:03:A6:A2
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ca:90:10:58:42:1a:ff:1b:81:ee:73:fe:d6:ce:3c:b5:bb:
96:5c:9a:7b:de:ba:f5:20:85:c2:04:bb:c9:a5:e4:9a:c1:80:
2e:6b:63:1c:4e:67:73:0d:70:50:41:24:f9:2e:7f:fa:8b:6d:
10:ff:8a:b6:c7:fe:fc:87:7f:63:fc:42:d5:1a:a0:47:be:c9:
86:7a:70:51:15:cf:30:09:93:f6:a8:5e:e3:77:6f:df:b2:76:
f3:52:b6:00:68:85:f1:4b:1e:fc:6e:09:61:d9:21:98:00:f0:
69:b0:24:8a:dd:56:08:68:36:16:a7:10:bf:e7:34:4a:f0:a2:
7c:fb:76:47:93:de:89:c3:25:ae:84:5e:d3:78:45:af:67:63:
e4:b1:f1:01:0b:e0:3e:2e:a5:f5:d9:ad:ad:6e:5c:94:77:e8:
15:d9:a7:e7:68:1e:1d:20:32:6d:cf:a2:41:fa:53:a0:48:47:
23:f8:f3:f6:dc:18:c7:a0:71:c3:c9:d8:3d:56:75:fe:30:6c:
c9:15:62:1f:7b:a0:00:17:0c:6a:54:08:b0:47:d6:3c:6d:6c:
ba:d0:c9:c6:a2:06:b5:26:66:fe:df:60:1f:a4:86:f5:ab:7f:
5f:9f:02:5f:62:05:4f:8c:65:cc:9c:88:4b:55:15:4e:af:42:
53:76:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:24:29 2026 by rpki-client