Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: 3CnssZivNzrxbc9k2iwR7le15f94Yi8gLgaPiAI24Nw=
Subject key identifier: 2E:F0:17:DF:D9:76:53:FF:C3:61:73:4A:BC:7B:C3:0E:57:F2:37:AC
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019F8F7F80C08B852EACF2D5C2860AE3F0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 15:02:05 +0000
Manifest this update: Thu 23 Jul 2026 15:02:05 +0000
Manifest next update: Fri 24 Jul 2026 15:02:05 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: oZCLMSH30yQp5bOJVvqK6NBMSHUcAWab7CHnsxcr1w4=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:80:c0:8b:85:2e:ac:f2:d5:c2:86:0a:e3:f0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jul 23 15:02:05 2026 GMT
Not After : Jul 24 15:02:05 2026 GMT
Subject: CN=2ef017dfd97653ffc361734abc7bc30e57f237ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:68:5d:fe:80:0a:bc:68:fe:fc:53:d6:83:
cf:70:cd:9b:0f:6f:23:f8:3e:a7:64:5e:52:30:6e:
95:3d:29:30:5f:2d:3c:8f:51:c5:4b:d9:3e:15:4d:
20:6a:f5:ee:eb:09:54:13:7e:54:a5:8f:5c:76:12:
bf:34:04:4b:d8:bb:db:21:17:a2:ba:c1:1c:82:37:
7e:79:c6:d3:8a:25:6a:d2:65:8c:41:e2:f2:27:25:
e9:37:5c:1d:9c:79:9b:e2:da:19:59:22:9f:2d:64:
68:bb:78:8d:b2:14:07:4c:ae:55:09:f9:84:2d:63:
86:ea:e2:c0:55:20:bc:ce:94:01:84:bb:8a:49:e6:
e2:9e:bf:23:bf:b1:2a:9b:db:4e:30:53:5b:55:83:
65:46:f6:81:a7:58:11:b1:95:2a:56:d3:a5:ee:ba:
d2:ec:96:fc:5c:d0:ba:6c:cf:5f:c9:c3:13:90:99:
cd:06:83:38:cc:ab:89:bd:01:e0:7a:57:18:79:13:
d5:5b:ae:3a:9c:a1:cf:37:cf:a0:89:34:72:15:3c:
64:92:6f:c0:34:4b:0b:f1:28:4e:5b:f4:2a:21:9f:
dd:79:50:44:b5:9b:e3:ee:68:30:7b:e7:59:55:b6:
40:d6:d2:3f:6f:fe:40:fb:1e:a0:0a:cd:47:ca:61:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:17:DF:D9:76:53:FF:C3:61:73:4A:BC:7B:C3:0E:57:F2:37:AC
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ff:68:6e:ae:37:c2:c8:16:b9:35:92:70:d2:f2:78:f9:87:
67:b7:61:e2:a1:20:df:73:0c:f5:8b:1a:25:90:c9:e9:a5:22:
78:fb:01:77:41:cd:5a:2f:e2:57:26:e8:65:fa:f0:c5:c5:1e:
5b:d5:8d:10:41:5a:a3:db:4c:0e:6d:99:a5:ec:85:1b:23:be:
a7:57:20:44:34:fa:24:5f:99:4d:8d:4c:69:7b:10:6f:fa:0d:
27:4a:32:48:25:9c:5a:d2:9a:ed:f9:6d:d7:70:dd:73:14:f1:
5d:6c:43:3c:05:5b:3b:8d:dc:48:d8:2f:5c:68:85:47:50:29:
c0:9e:55:12:49:fd:75:7c:89:5a:5c:ef:77:dd:f5:76:94:dc:
48:1a:a9:10:6d:05:c0:b3:8e:78:3b:cc:e6:04:8a:bb:30:32:
3f:7f:11:ac:d3:40:ff:a5:10:02:04:9e:a9:20:9a:67:f2:ca:
9f:d9:32:64:70:25:bb:da:c2:cb:c1:7b:8e:73:55:f2:24:e7:
4f:ba:b4:ed:f4:0c:2d:67:ea:fb:cd:5b:4f:3b:94:ea:da:2b:
89:75:4c:ff:79:df:9e:51:78:9c:29:98:57:60:62:9b:2a:2b:
57:e5:29:04:27:5d:1a:89:75:be:8a:d8:9a:f3:8b:31:84:54:
c3:27:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:21 2026 by rpki-client