Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: jpQY0VcwsoNeaRHbM6RARhpKQPbOtpgxQ4nrYR1lIwo=
Subject key identifier: E5:2E:7E:DA:03:84:D5:8C:04:E4:13:0A:31:59:4E:77:98:2F:E5:4B
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 019F9023209A117CE249172A5B4140913E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 18:00:48 +0000
Manifest this update: Thu 23 Jul 2026 18:00:48 +0000
Manifest next update: Fri 24 Jul 2026 18:00:48 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: T1lOo8cOdENO8DjeL/jkIkXDJuDqyMkrZUiWrg5pC6c=)
2: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (hash: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:20:9a:11:7c:e2:49:17:2a:5b:41:40:91:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Jul 23 18:00:48 2026 GMT
Not After : Jul 24 18:00:48 2026 GMT
Subject: CN=e52e7eda0384d58c04e4130a31594e77982fe54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:13:71:3d:ab:de:82:e7:6e:72:9b:65:59:
b0:2d:e3:63:16:de:30:c8:50:2c:59:82:54:9d:4b:
8d:76:a9:c3:9c:87:32:9e:8a:e3:c7:b8:1c:b3:3e:
c9:9f:76:db:e4:5e:07:a4:d2:7f:5d:58:10:03:bd:
58:38:f9:69:46:68:d1:44:b2:04:8c:a0:9f:fa:a0:
81:52:48:ca:45:34:58:b9:8d:45:05:cb:6e:8f:ee:
b6:13:22:45:70:be:3f:1c:ed:4c:36:e8:d7:69:4e:
f9:13:37:ab:8a:eb:40:04:d4:0e:d2:72:d3:23:4c:
f6:55:83:99:ec:07:48:19:cc:d3:f3:2a:cb:a6:f1:
b5:d0:85:3f:22:67:29:79:b8:33:63:5f:7e:ff:a0:
e4:51:74:d8:67:55:14:b6:b6:33:26:93:8a:5b:8e:
0c:cd:e7:5e:b9:27:f8:ff:f1:a6:17:3b:0a:e3:b0:
d3:e5:22:d7:34:e9:d5:11:52:58:40:75:9e:f1:61:
1c:ee:0b:e9:05:b7:12:ac:bc:64:13:d9:3a:e8:c4:
25:f4:dc:e7:21:ca:95:0d:25:4f:83:39:91:c7:03:
e7:46:41:22:e3:ee:93:4f:0d:56:37:f7:f5:ac:4e:
5e:8d:0a:dc:a1:0b:2b:0d:e8:fd:6d:fe:6d:89:b6:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2E:7E:DA:03:84:D5:8C:04:E4:13:0A:31:59:4E:77:98:2F:E5:4B
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:16:77:2d:61:c4:4a:a2:59:11:ee:3d:ed:95:1e:f8:a4:
05:1b:00:af:41:ed:be:b0:fa:57:ff:01:e4:64:a5:71:d0:ef:
8c:20:a8:67:0d:6b:1c:2c:33:f3:cd:41:d0:d0:74:9c:bb:b1:
63:83:ca:e3:e2:d0:d4:86:64:88:3f:88:ee:e7:c3:b8:59:70:
e4:73:32:c9:6c:f0:7d:1c:71:36:6a:09:32:8c:27:e1:3f:67:
42:0e:89:af:54:c9:b7:d4:99:12:c7:ad:35:ca:e5:fe:36:3a:
ba:c6:17:bb:dc:a1:84:c2:68:7e:cc:e4:f1:2a:d6:f8:0f:e5:
a7:57:31:b0:68:48:4a:50:b2:43:34:33:00:a8:00:a7:7b:3f:
50:bb:04:65:a6:ae:92:93:9f:6e:21:f5:16:1d:a5:f4:4a:ff:
75:1c:02:39:a8:af:33:86:20:32:b5:80:ce:00:87:ff:71:17:
23:e6:1e:79:4e:25:44:a6:a7:08:4f:de:33:27:15:61:b7:ce:
5a:20:12:15:d8:6b:9a:bd:9d:c2:ad:60:fb:78:93:b5:e6:97:
f6:54:e2:95:65:21:47:28:74:cb:37:2a:ef:2f:47:b2:dd:96:
1f:f7:e7:22:da:7d:b9:68:d0:3e:a4:fa:fd:b7:e7:68:c9:d4:
9a:26:a0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:51 2026 by rpki-client