Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: Uh+evzci83OgwZyDrbJ5YWrpp0p29r/Ck1Cgukwl5hA=
Subject key identifier: EF:AB:72:95:8F:A8:09:40:FB:39:91:A8:0F:42:FA:37:7E:77:59:D9
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 019F90C7AD232EAC6454300FCE0337862A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 21:00:32 +0000
Manifest this update: Thu 23 Jul 2026 21:00:32 +0000
Manifest next update: Fri 24 Jul 2026 21:00:32 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: bu7xu47NAwodn7EOh4xIW49fPA0oCrzy/1/dICVHkMc=)
2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ad:23:2e:ac:64:54:30:0f:ce:03:37:86:2a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Jul 23 21:00:32 2026 GMT
Not After : Jul 24 21:00:32 2026 GMT
Subject: CN=efab72958fa80940fb3991a80f42fa377e7759d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:dc:27:4f:08:f4:3a:7d:04:73:3c:b4:94:
9d:b4:16:d9:57:89:c3:6f:71:67:64:c4:5b:e4:0e:
92:11:e5:60:bc:00:e7:4c:ab:3d:da:03:b0:7f:da:
66:89:01:fa:99:37:14:0a:85:b4:f1:8a:20:b5:1d:
f1:03:4c:1d:2c:8a:15:3e:e7:5a:3c:39:86:bc:a9:
c9:1a:84:46:d3:2f:ed:66:14:c2:4d:2e:0a:34:a5:
84:70:d1:b6:d8:c1:3d:65:76:6c:da:15:7b:b2:77:
ba:e0:b2:39:cc:cf:31:cc:07:9b:f9:55:d4:f7:4f:
ee:b7:78:8e:c7:b5:d9:95:a6:12:28:93:3c:b1:f6:
7f:7c:cf:4d:4c:e4:68:6e:b2:2b:f5:aa:fd:b7:79:
b3:d9:ce:98:fa:2e:63:e7:61:1c:8f:e7:98:39:90:
c2:59:69:50:d0:06:c2:80:c6:b1:20:ee:fe:0e:bf:
bf:3f:04:c9:69:ca:71:1a:75:15:32:3f:51:2d:e6:
ba:4f:83:9f:a3:a5:7a:c3:d3:61:da:3f:48:2a:15:
ef:82:1a:b5:64:79:bb:f8:02:88:15:4a:06:73:79:
2a:3e:12:33:df:63:17:a8:4e:c3:ef:d5:9b:bf:c8:
7a:45:1e:49:d9:18:b7:9d:cf:33:a1:01:52:a7:ea:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:72:95:8F:A8:09:40:FB:39:91:A8:0F:42:FA:37:7E:77:59:D9
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:96:b2:ce:da:0a:da:fe:f5:ff:00:a8:36:fd:a1:76:02:
89:e6:c4:3c:e9:b8:61:4a:a2:92:67:98:91:60:30:3d:3e:1e:
24:24:f7:8d:09:22:42:65:24:1b:9e:d4:0e:39:e2:40:9b:16:
f0:31:ae:21:38:b5:ab:d3:ed:df:ec:88:90:2d:6b:7e:88:ff:
bb:16:0f:a0:d9:d8:4d:cb:86:c3:5e:d4:63:bc:f0:8f:b8:56:
c6:2e:75:ee:47:19:8f:4b:98:3f:3d:5d:aa:20:fd:d7:4f:52:
e5:48:fe:1e:0d:90:0b:02:54:16:e1:f8:e7:89:b0:3d:6b:9d:
b8:e0:69:bf:18:97:2e:05:5e:dd:80:3a:60:fa:fe:4e:d0:a3:
da:98:2d:5c:c3:b9:6e:6d:fd:c9:5a:8f:7e:96:8e:98:4a:38:
40:b9:37:39:68:c0:5b:21:60:16:28:95:91:c6:8b:1c:c8:01:
31:21:2f:49:d3:6e:2c:32:e6:47:bd:36:dd:40:c2:c3:c3:af:
e6:f9:d0:6a:c5:39:26:9f:28:41:f4:82:99:67:55:18:a1:a6:
43:1b:a5:65:a1:fb:3c:31:a0:a9:73:02:31:c4:0c:7e:69:b6:
f3:e0:76:13:a7:10:93:d3:76:65:76:03:6c:82:c5:0f:ea:a5:
bb:c3:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:34 2026 by rpki-client