Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: 8afsPwKjoV81UGelQtRDZ12N+RoAuMx88lCo/KoDnaw=
Subject key identifier: A8:10:91:29:71:FE:8D:F7:A3:76:3C:75:AA:C4:A5:5B:4F:AD:5D:F2
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019FAA8893C8BEC9BAB823AE324F4FD74344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 11B5
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: lVHpFiUpVeLHOQdZshaf2PTDxdbKsaxA0zfjlktDyjk=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:93:c8:be:c9:ba:b8:23:ae:32:4f:4f:d7:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=a810912971fe8df7a3763c75aac4a55b4fad5df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:93:70:62:84:73:d1:a3:bf:94:4a:ab:dc:
28:87:ff:99:a3:0d:02:ae:4a:35:4a:b9:ea:f2:07:
2c:55:f5:50:a3:8d:56:cb:8e:93:e4:fc:1b:98:79:
60:72:ce:8c:b2:df:13:bf:2a:58:71:ed:77:23:b1:
3c:ad:f3:2a:df:f9:fc:fb:d1:3a:ce:88:47:e9:90:
7a:a8:83:6c:1e:2c:fd:72:ed:3a:bb:0b:a2:e4:e5:
37:cc:a5:ef:95:be:46:69:a2:f8:0c:b8:66:fa:a7:
cd:30:03:50:d7:fe:42:dd:d0:34:80:6c:e1:36:00:
7f:5a:46:78:8c:88:c4:8f:70:b3:43:ec:40:e3:18:
e8:86:fe:d3:bd:7f:67:b9:18:12:4b:92:42:14:bd:
b9:17:6b:43:58:45:41:3e:e4:1c:5d:1c:91:c2:f4:
6f:12:3e:20:4c:5a:31:c4:37:0c:11:b7:27:2f:27:
50:89:2d:00:86:02:e2:6a:89:03:65:76:c4:62:3e:
08:de:a3:d2:74:ad:8e:6f:b2:23:96:ed:f1:e7:8d:
04:6f:92:4a:08:ee:22:bb:f4:6d:37:71:49:13:9c:
d6:7e:47:e9:62:a1:d0:31:e0:07:57:85:06:ec:53:
41:5e:ad:8b:dc:62:7a:94:11:9f:41:56:54:c4:09:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:10:91:29:71:FE:8D:F7:A3:76:3C:75:AA:C4:A5:5B:4F:AD:5D:F2
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e5:da:bf:8a:56:f0:38:48:bc:33:e3:cc:47:40:5d:9c:04:
d0:a6:aa:ba:71:32:1c:72:4a:44:72:78:7e:90:69:06:af:d7:
64:3e:46:f4:56:9f:b9:06:c7:2e:5e:d6:3a:e9:7c:f8:a9:8a:
e8:f2:f6:5d:2c:75:a4:01:0a:e0:67:af:5f:db:05:e9:6f:88:
3e:ec:8c:f4:14:4c:67:58:3c:3c:b1:ab:e1:7e:41:ab:84:b2:
4c:c8:0d:d7:8a:7e:05:25:a8:22:d2:a5:04:35:25:73:45:58:
64:76:9d:9e:4c:93:8a:ab:e5:d6:f3:43:8d:c0:9b:55:f7:ed:
ba:22:d0:bb:74:3f:4f:a8:aa:91:33:aa:59:48:f8:4f:21:24:
0d:29:c8:d2:04:f3:25:5e:d8:01:63:64:b6:cc:00:ac:e8:f8:
be:17:2b:74:9a:b9:2f:1d:fe:59:74:75:b0:44:60:06:8e:dc:
e6:14:aa:78:0d:b7:d0:1a:55:7a:8b:0d:51:8c:01:30:ed:12:
33:fc:00:b8:82:2b:fb:56:67:4e:8c:b6:ec:fc:85:ff:4c:bb:
70:b5:3b:b1:8b:18:0e:6f:6f:57:23:ef:28:ef:86:dd:45:44:
28:0b:74:09:e7:9e:16:08:49:54:36:d0:ca:3b:db:44:e5:08:
ec:8d:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:31:43 2026 by rpki-client