Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: rQMX/4/BsWW1fP9GNT+zW1oEQHNivbDZeboY5PshTbM=
Subject key identifier: 1A:CF:D2:65:FD:88:E0:9D:04:94:D7:B5:BD:A7:EE:C7:48:62:BB:74
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019FA9AB98C19979A06DAE4F5C8DB3D3A24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1992
Signing time: Tue 28 Jul 2026 17:00:22 +0000
Manifest this update: Tue 28 Jul 2026 17:00:22 +0000
Manifest next update: Wed 29 Jul 2026 17:00:22 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: tHzCwR9tuR9ZHmDtnmEnorUYfSel+EaDPPNvF5H0Cmg=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:98:c1:99:79:a0:6d:ae:4f:5c:8d:b3:d3:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jul 28 17:00:22 2026 GMT
Not After : Jul 29 17:00:22 2026 GMT
Subject: CN=1acfd265fd88e09d0494d7b5bda7eec74862bb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:45:7d:9d:77:38:73:f9:a9:c4:2e:27:c3:
32:30:04:f7:cc:86:67:8e:0a:94:fd:f9:c6:1a:8a:
5e:89:6c:e6:9f:25:1c:66:9f:e1:28:83:bb:be:f5:
51:5d:b9:a8:27:9e:62:a2:1a:ae:c9:fe:78:e3:f9:
c0:c1:82:28:5d:69:4f:75:a8:8b:55:70:12:dd:12:
6f:3c:9a:33:64:03:e7:0e:24:11:a3:67:b8:ca:07:
fa:1c:a7:05:f1:18:8c:70:b5:cb:57:8b:05:61:5e:
dc:da:16:fd:e3:b1:00:5e:10:c1:81:b8:01:1a:05:
98:9a:85:1c:48:53:a9:ff:e6:9c:a7:a6:b3:6b:ab:
1e:11:4b:61:04:81:c5:1d:18:d5:b0:41:00:ac:b6:
7d:03:a7:e7:a2:6b:c1:0e:37:87:3c:dd:12:43:98:
35:ff:80:5d:b4:b9:0c:bb:84:5f:cc:89:32:da:38:
36:92:6e:cd:0a:62:4a:9f:62:ca:dd:54:53:2c:59:
b4:31:27:d9:7c:77:25:af:02:bf:22:ae:4b:58:ca:
d6:99:d0:9f:4c:ba:1c:63:f0:45:05:db:5e:07:65:
9e:79:bd:ee:59:8d:31:ff:4b:06:de:b7:14:ca:0b:
15:17:65:97:51:45:45:83:d4:d7:b1:67:70:69:0d:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:D2:65:FD:88:E0:9D:04:94:D7:B5:BD:A7:EE:C7:48:62:BB:74
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8f:78:8f:6b:43:89:e0:f2:6a:16:0c:ab:4b:03:a8:49:ad:
7e:dc:bd:08:2b:d7:cb:f7:4b:76:91:b0:a4:f6:e6:1e:94:d5:
db:75:e6:bd:67:bd:c7:b7:0d:8f:32:27:a7:16:14:db:ec:90:
86:8c:d2:46:b1:96:7c:78:62:fc:8e:d6:a0:93:de:19:28:d2:
ec:45:4d:84:b9:3e:71:00:d1:0d:85:6c:6d:f4:62:0f:d9:60:
73:40:2c:24:88:3a:18:d7:98:ad:41:9c:8e:dd:df:8b:9d:1e:
ca:4c:7e:7f:04:7f:c5:ca:93:07:d2:da:71:69:77:62:62:f1:
57:b5:6c:77:8e:6f:d3:38:b1:2d:c4:24:aa:37:f9:18:22:79:
6d:ea:cb:59:5a:7a:93:31:cc:f4:ee:c5:2c:35:17:1a:ae:08:
48:73:f9:a0:db:1c:da:1c:dd:49:80:9c:d8:b2:4f:18:c4:be:
ef:93:1c:92:0b:df:1c:24:88:22:14:1d:4b:14:a5:17:1f:35:
67:6c:21:4b:e3:bb:6e:89:68:7d:48:39:8c:c8:79:27:8a:02:
e5:3e:c5:73:aa:7f:59:f5:76:06:87:0c:0e:06:3e:31:11:b2:
63:14:e8:6f:ac:67:89:ef:85:da:90:7c:89:8b:46:08:35:12:
76:77:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:02 2026 by rpki-client