Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: ss8JaG/Pe5KLGDpDks59KiOed8vA8SSwz2fQ6yAGrSY=
Subject key identifier: BB:11:EB:42:36:23:11:26:56:53:2C:F0:55:88:3A:0B:51:77:09:E9
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019F916C4446B2C7D19BB9217199E417EA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:00:19 +0000
Manifest this update: Fri 24 Jul 2026 00:00:19 +0000
Manifest next update: Sat 25 Jul 2026 00:00:19 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 1+/o+oa81qteECszSUxnFc7Si6cvNVCkUwd7iqcuDHY=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:44:46:b2:c7:d1:9b:b9:21:71:99:e4:17:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Jul 24 00:00:19 2026 GMT
Not After : Jul 25 00:00:19 2026 GMT
Subject: CN=bb11eb423623112656532cf055883a0b517709e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:a1:cd:02:e7:ae:13:0b:81:95:e9:fe:34:
ed:c4:00:d7:6b:01:1b:77:bd:0a:05:64:86:ac:c7:
e6:3c:30:29:68:8f:31:00:08:10:22:87:39:c8:8d:
e4:9e:81:16:77:ca:05:f8:8b:84:97:09:fc:25:8a:
bb:4d:2a:76:52:28:9c:b1:fe:f4:92:22:80:f1:50:
91:6c:21:0e:91:68:2b:9b:8c:ee:9d:72:08:2b:fd:
96:b2:3c:e8:06:f5:4e:d7:8d:6e:49:53:b7:f8:f1:
10:1c:cb:b4:5d:48:c7:15:45:88:d4:0a:e0:f0:ff:
df:2e:cb:ff:2d:e0:12:7e:0c:60:0b:bb:ae:b9:93:
eb:27:d9:fc:b0:94:74:4b:86:40:36:7f:ad:55:8d:
30:9b:c8:37:90:cf:c3:e8:12:91:21:ad:c7:64:18:
a7:13:e5:e3:7a:4e:a2:e3:47:f5:65:fd:08:6e:f1:
dd:2f:23:ea:cf:9e:69:a3:68:ea:d5:8c:28:f9:aa:
58:08:c1:fb:d6:92:d0:1b:f1:0a:c1:7a:56:2d:59:
ca:d2:c8:a1:0c:1c:8a:b1:69:69:b1:68:22:4d:1d:
ea:a4:2b:4f:2a:7f:d9:d6:3c:f9:74:83:f7:c4:76:
61:49:b0:a4:b9:85:b5:94:31:84:0f:80:94:6a:32:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:11:EB:42:36:23:11:26:56:53:2C:F0:55:88:3A:0B:51:77:09:E9
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:23:46:00:44:56:2e:cc:b9:c6:7d:31:89:04:b0:b6:39:41:
05:e6:13:ff:a4:67:4a:51:c3:2b:90:14:ee:28:36:9a:05:e3:
7f:75:13:73:dd:73:a9:8d:29:1b:b2:85:2e:23:7b:ba:f8:69:
27:3a:a1:e8:2f:38:99:48:a9:14:8a:ee:c0:60:3b:b1:14:6b:
e9:78:8b:a3:5e:25:17:c9:7b:8f:d0:05:f8:9f:6c:e7:34:b5:
75:6f:f1:4f:15:6b:6f:1b:e1:4d:1c:d1:a5:dc:74:48:a5:9c:
ef:df:fe:33:79:4b:ad:89:00:16:3a:b5:9e:ab:b0:b8:f4:a2:
d2:fb:64:93:c8:7f:46:a4:24:1f:ba:49:ef:f0:bc:a9:ec:e8:
c7:36:9e:c5:1c:22:82:17:25:ed:08:c6:53:1e:bc:aa:9c:7e:
00:54:86:00:45:8e:dc:c5:a9:eb:62:17:cd:21:e8:44:f1:68:
93:72:5e:e3:1e:65:9c:fa:cd:99:c2:66:a6:d6:30:73:47:60:
8c:e4:74:09:92:f3:9f:0e:bd:18:29:37:3d:00:2a:a9:17:da:
f6:5d:ab:09:43:fb:c4:b3:c2:14:2d:ae:0e:b9:e5:fa:72:25:
0a:2f:be:59:14:4b:6a:e4:ad:58:a1:a1:8d:48:1a:32:f7:c0:
bc:84:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:41 2026 by rpki-client