Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: WItPWjKQEGBt+QuGGQlMBXa5ilUq7cONBmLBvaI99uI=
Subject key identifier: 52:72:D0:CF:1B:DB:86:C1:55:75:64:56:7C:F3:EF:99:DF:6C:42:CA
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019F9059925754AAC2901DB612960DA0EBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 191F
Signing time: Thu 23 Jul 2026 19:00:16 +0000
Manifest this update: Thu 23 Jul 2026 19:00:16 +0000
Manifest next update: Fri 24 Jul 2026 19:00:16 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: /dieqvC83DTgKlnFK4/VsNTmBkwUWu2oX2joIW3yArk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:92:57:54:aa:c2:90:1d:b6:12:96:0d:a0:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Jul 23 19:00:16 2026 GMT
Not After : Jul 24 19:00:16 2026 GMT
Subject: CN=5272d0cf1bdb86c1557564567cf3ef99df6c42ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:6e:8a:35:dc:82:d1:61:71:29:ad:66:4b:
fd:8b:93:7f:2a:5d:31:bb:1c:93:a6:70:25:68:ae:
a8:af:ae:90:b8:a4:dc:cd:6d:1a:cf:3d:f7:fd:3f:
c9:a5:ab:6e:6f:07:3f:dd:9f:ff:45:27:00:6b:84:
ff:3e:49:16:fd:07:ac:7f:b5:db:e9:1b:c3:6c:c6:
b8:7e:5f:23:4e:e4:b3:87:db:a9:42:38:38:fa:f6:
ae:e5:c7:bf:1e:46:c7:f9:82:ec:d6:54:a6:9a:41:
a1:37:fe:d0:a2:2d:3c:cd:e9:74:92:ac:44:d3:c1:
45:11:73:66:b0:14:2d:fb:fc:7e:e9:ce:d4:05:0b:
32:cc:8c:d1:bc:a6:1c:09:3f:54:f3:af:10:5e:1f:
76:5c:56:22:c5:c7:7c:77:8c:75:8b:cd:c7:bd:02:
29:e4:62:cc:f4:40:95:e3:86:e2:60:41:59:76:2f:
80:07:e8:c4:81:0b:4f:53:d1:53:f2:56:74:e3:6c:
e6:6c:bf:9c:a4:0b:7d:d2:d8:ec:7e:2e:de:e4:a7:
34:22:66:a9:8a:22:3c:56:e4:11:d3:8a:e0:f7:7c:
f7:fc:ba:41:04:e7:6e:d0:1a:46:40:48:c3:6e:8d:
97:3e:67:c7:43:e3:37:e7:b5:85:6b:cb:12:a9:59:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:D0:CF:1B:DB:86:C1:55:75:64:56:7C:F3:EF:99:DF:6C:42:CA
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:7a:11:d5:0c:8b:c2:44:1d:1b:d6:54:e7:29:96:b9:13:
dd:72:b3:eb:d5:24:6c:30:1f:bc:37:0e:3a:d0:38:b3:e1:f8:
ec:e7:0c:5b:be:88:9e:d4:3c:1d:f0:19:eb:ba:de:e1:00:22:
bb:82:de:07:5c:62:d1:45:4a:19:1a:f0:51:2e:ef:d4:c0:66:
d5:b0:aa:2e:66:fc:df:c7:5b:0a:79:00:c0:52:40:0d:53:97:
7f:2c:d6:8d:6c:86:16:a7:a1:96:fa:c0:e5:5b:ca:3e:4f:bc:
6a:ec:7d:96:4f:8c:7a:34:a5:87:be:46:0d:ef:13:a8:94:52:
08:86:07:5f:7c:23:64:45:25:7c:f8:5b:9a:7c:63:38:07:16:
73:b4:0d:b4:9c:b3:24:f0:6b:96:9a:b5:48:8b:4c:de:7c:33:
e5:1e:7c:7f:94:f7:11:32:53:e5:2d:0c:73:53:b8:00:fc:07:
6b:f9:a4:14:d7:52:ca:6d:aa:69:af:69:a3:3b:96:98:0e:5f:
f0:eb:ba:03:28:25:b4:c5:d0:c9:80:d3:bf:62:90:83:20:e0:
a8:fd:84:bd:ce:76:7e:4b:dd:bc:35:dd:5c:c3:53:c7:3e:91:
96:3e:5f:10:cd:65:aa:b6:66:47:88:a8:81:96:5a:87:a9:1c:
71:15:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:46 2026 by rpki-client