Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: SNTBFkyA8ATuRFbPJEEBHM4L/MP/SFqVzuTrGfFsngk=
Subject key identifier: 21:9C:95:F8:D4:7D:6F:7D:9D:1E:F3:3A:78:30:4A:07:F7:D3:28:73
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 019FA899DB8D978B07E09FC688B676BB1278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 12:01:23 +0000
Manifest this update: Tue 28 Jul 2026 12:01:23 +0000
Manifest next update: Wed 29 Jul 2026 12:01:23 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: tLhWqpGLSnX2agGa3RSj0IrGFmssX77g2VHEEWZ/gzA=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:db:8d:97:8b:07:e0:9f:c6:88:b6:76:bb:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Jul 28 12:01:23 2026 GMT
Not After : Jul 29 12:01:23 2026 GMT
Subject: CN=219c95f8d47d6f7d9d1ef33a78304a07f7d32873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:01:05:d0:10:7b:10:31:c3:36:9c:ba:6f:
57:d2:9f:a8:6e:e7:ae:6d:a7:5b:ef:a3:13:b4:c9:
b9:ff:10:a4:d0:9a:ac:77:19:f1:be:78:f7:6c:80:
e6:e5:36:b2:bd:03:9a:0b:82:81:77:44:71:96:54:
f3:60:b0:fc:47:3b:57:88:ca:94:8b:11:62:a9:5e:
d2:ab:d1:5c:3a:73:22:e6:1e:9c:dc:c4:42:79:29:
03:7b:d6:3e:15:65:20:50:44:e6:93:ed:c5:0b:da:
ff:65:d2:37:78:83:5d:0e:60:c0:0d:63:62:94:91:
db:5e:c5:a8:46:13:72:b3:29:91:cc:c4:a9:79:9b:
f4:c1:f3:6e:41:8d:1d:00:58:44:d7:1e:a2:41:73:
55:61:fd:18:69:a8:d4:a6:ce:03:b9:32:10:1c:3a:
fb:28:c6:19:f9:75:8f:36:f8:32:b5:9e:09:f2:36:
7e:76:e7:5d:27:89:a9:00:5f:e5:bd:0c:f4:9e:38:
fb:c4:60:f7:96:f6:a3:02:a3:f4:ba:24:e9:0d:6a:
2d:fb:05:73:b3:f4:f4:fe:0d:ae:89:12:ae:b4:57:
02:cf:41:04:a0:7a:3e:3e:29:31:59:52:1a:7e:58:
4a:97:40:b6:a4:8b:31:db:22:58:8d:0a:17:24:55:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9C:95:F8:D4:7D:6F:7D:9D:1E:F3:3A:78:30:4A:07:F7:D3:28:73
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:98:5c:0b:42:d6:f3:9c:38:7d:81:95:ec:da:b4:d5:34:
ba:85:83:c5:2a:d1:26:86:a6:65:e3:e0:54:af:c7:5c:56:74:
35:ac:8c:62:f5:d2:eb:e0:78:80:c0:79:70:2d:9b:fa:d3:c9:
96:68:07:6b:2c:56:67:a0:e1:4e:c1:03:44:af:75:fa:75:23:
b3:cc:2c:c0:eb:66:55:3e:24:e6:c3:3e:a6:ee:45:4a:cd:86:
b1:23:4b:1e:e4:9b:19:10:0c:d7:7e:ba:83:26:ff:de:c5:ec:
1a:6c:2f:76:0b:06:25:69:99:e2:40:45:5b:68:7c:d3:24:11:
ad:cc:53:d5:4a:d6:f5:c4:71:41:9b:13:7f:47:9c:18:94:69:
28:ed:46:e1:5e:07:90:86:22:95:29:9f:e3:c1:ae:bb:45:10:
bf:7e:24:f7:f1:f4:95:be:93:0e:2c:28:5c:d5:29:20:00:59:
03:7a:a1:c7:59:a2:fb:b1:3d:20:d5:38:1f:f5:8f:eb:9c:f7:
95:81:fd:6d:3a:df:c4:28:92:fc:9d:6b:d5:77:89:c0:19:ab:
fd:c7:de:b9:81:67:ee:ed:4f:99:44:4e:f9:94:1f:38:78:e6:
2c:e1:97:0a:fa:87:b4:54:c9:3a:55:79:9d:9e:0e:0f:ec:1c:
5f:2b:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:32 2026 by rpki-client