Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: g8eSzXCGFwy4NKBFs8SQ4cvZ+eBbxCXiRaCg4/DYQCk=
Subject key identifier: DA:39:87:D0:D0:10:C0:38:B3:C4:E4:D6:06:B8:DA:80:C2:D7:47:F8
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019F9323A51476803CE5B60BCA98359943ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:14 +0000
Manifest this update: Fri 24 Jul 2026 08:00:14 +0000
Manifest next update: Sat 25 Jul 2026 08:00:14 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: hyc7dYTC/1/ALpQMoPXYyMqvzJc8LgpG31hiyhzaCJc=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:a5:14:76:80:3c:e5:b6:0b:ca:98:35:99:43:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jul 24 08:00:14 2026 GMT
Not After : Jul 25 08:00:14 2026 GMT
Subject: CN=da3987d0d010c038b3c4e4d606b8da80c2d747f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:b3:ad:93:7a:a5:fa:9c:f5:0f:a4:99:03:
7e:d3:1c:f0:57:7d:59:fb:bb:f4:06:f4:7f:ae:37:
1a:45:6c:bf:ed:35:fd:24:c1:65:09:82:10:3a:bb:
3f:73:34:62:e1:2f:de:56:6d:25:a5:ab:ed:72:fa:
eb:3a:13:33:51:1d:e0:0c:09:9a:da:bd:91:ee:cb:
ea:36:ea:2d:47:60:b1:a7:13:80:b1:50:c4:8f:a1:
b7:4d:0e:15:bd:d0:40:14:d9:3b:d0:a6:eb:16:76:
95:dd:de:d6:64:6d:61:8f:0d:4e:55:da:8c:b1:5d:
a5:20:f9:33:3c:c1:e1:ba:90:6a:d4:3d:59:74:4b:
14:d9:ce:ac:9f:5a:a7:7c:5d:ce:25:49:77:9f:64:
b5:44:50:91:8f:60:1e:c7:4d:11:2d:f5:20:d9:e7:
37:4a:3b:a2:b2:0c:ed:65:3b:97:5c:72:56:6f:2a:
f4:33:22:5b:12:8d:c5:f3:6b:a7:ec:8a:37:f1:32:
dc:8d:8f:a1:5f:df:ea:04:83:cd:17:0a:e9:d7:62:
90:e9:d8:b8:4d:52:0e:c5:68:b4:25:72:a8:e2:f7:
67:64:fd:fd:98:0f:04:67:9a:b5:37:fb:61:50:cf:
29:8d:80:82:0e:db:dc:05:2c:d1:03:ac:5b:17:81:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:87:D0:D0:10:C0:38:B3:C4:E4:D6:06:B8:DA:80:C2:D7:47:F8
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e1:9f:ca:67:24:cb:04:c1:29:9d:bd:d9:5f:65:db:d4:d6:
99:7f:30:4e:bc:8f:e7:35:0d:df:72:3a:ee:03:33:50:ad:08:
c8:51:b9:86:1e:ce:22:72:58:e3:45:68:53:fd:c2:34:d8:0e:
bc:86:00:9c:c0:d3:9d:b6:2e:a2:fa:90:92:35:19:3b:51:d7:
70:c2:b1:ed:71:93:3c:bc:8e:4d:fa:df:af:83:91:17:09:5b:
87:0d:75:c2:ad:89:be:54:46:ec:f9:9f:35:85:cf:4e:f5:65:
da:b0:17:9e:c7:d3:9d:f8:f1:ff:a4:7f:39:10:63:3b:fa:e1:
79:30:7a:96:a0:3c:94:ad:cd:1f:22:e5:41:6e:28:cb:e5:fa:
cb:f2:58:ec:c4:93:bd:41:b8:e5:18:f9:23:d2:1a:82:fb:4b:
f5:5d:79:30:1f:3b:b8:aa:68:31:4b:c4:dc:62:c5:ad:7b:f9:
5d:bd:2f:77:67:90:b4:6a:ad:a8:df:aa:85:fd:7f:b1:e4:19:
1b:0c:ea:aa:89:96:e4:d2:db:71:5e:5c:c0:54:ae:90:4b:f5:
cf:72:7d:ff:18:62:85:a1:94:4e:de:be:3f:93:5c:bd:1b:da:
1a:55:d2:9a:93:1e:69:a7:5c:7c:60:3a:69:03:be:59:5e:08:
a7:fc:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:16 2026 by rpki-client