Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: ZrqJrrUwvd9MDHfDwEhaXfsG8HNvC8vv+17PA9ll0jM=
Subject key identifier: 61:E0:EB:E6:F7:CA:06:55:85:2F:AD:9F:D1:B1:9C:4A:EF:AF:27:2C
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019F916CEBE8A3419EF032B1159DD73C175B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 19DC
Signing time: Fri 24 Jul 2026 00:01:02 +0000
Manifest this update: Fri 24 Jul 2026 00:01:02 +0000
Manifest next update: Sat 25 Jul 2026 00:01:02 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: ZmVfp/003Q0FlMuo/isi1uVP4wfOdRE0EJ711xJh2CY=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:eb:e8:a3:41:9e:f0:32:b1:15:9d:d7:3c:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jul 24 00:01:02 2026 GMT
Not After : Jul 25 00:01:02 2026 GMT
Subject: CN=61e0ebe6f7ca0655852fad9fd1b19c4aefaf272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:bd:e8:e0:8a:08:92:e5:51:b6:43:94:85:
d2:ce:5b:ee:f5:4c:2b:ee:2e:07:23:e6:40:b1:4c:
ec:ff:b7:fd:8b:67:0d:49:61:40:50:c4:cd:22:bc:
c6:77:2f:8e:42:ee:fe:79:f5:9b:63:40:8d:ac:b2:
ad:0c:43:e9:e8:66:43:ac:ad:29:0c:fd:a1:58:f3:
d8:fd:82:9d:3e:5d:52:02:6a:da:64:9d:23:0a:6e:
f9:7a:8b:c5:63:d5:92:85:8e:27:ed:e6:77:7b:7c:
8c:75:5a:22:77:cf:2f:76:ef:2f:fd:2a:54:d6:37:
cb:3f:47:99:39:b5:01:6b:b2:cb:8a:d7:e3:c5:be:
f3:73:3f:33:69:dc:92:53:57:fb:73:c3:dd:d1:51:
40:f9:f3:57:20:24:ea:a6:e5:d1:af:af:32:7b:60:
33:1a:18:d3:cc:b5:cd:39:86:79:e6:69:31:d4:a4:
45:38:56:bb:f0:b3:a7:f8:f7:44:32:7c:43:bd:b7:
6f:20:77:c9:b3:8f:c7:ac:0e:db:70:b9:85:d9:24:
80:bd:8f:38:0f:3e:0f:b0:2b:7b:83:62:5f:cd:a3:
98:a6:d8:90:0c:2d:8a:11:56:db:02:12:d3:75:33:
80:1e:47:62:fa:e1:08:9d:32:65:cf:59:a1:a6:e1:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:EB:E6:F7:CA:06:55:85:2F:AD:9F:D1:B1:9C:4A:EF:AF:27:2C
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8a:ed:45:de:45:b1:22:c2:ff:38:8d:86:30:d3:08:61:2c:
8d:34:35:81:0f:0b:66:d4:b1:ce:e3:11:fd:25:8b:34:81:97:
9e:66:96:55:6c:b6:2d:a1:bc:c8:a7:e1:fb:24:60:8c:4c:c6:
c4:37:cd:51:d8:bf:cc:c6:07:2b:5d:6c:92:cc:89:a6:44:0f:
f5:07:12:d6:45:cb:69:44:01:32:2d:96:11:bb:28:bf:5d:db:
c1:85:c6:81:1b:a2:2a:4f:e7:a2:b0:03:c2:10:64:ba:98:4f:
73:e0:e7:cb:3d:97:a1:24:a0:bd:3a:db:00:81:e4:8f:9b:b3:
2e:a2:f5:ae:8c:9d:c8:e4:d1:7b:37:f0:e5:00:65:4e:ac:31:
ec:ae:ff:40:46:49:97:fd:2a:24:13:91:a0:a0:f4:72:02:bd:
0a:6a:17:c5:75:73:93:cf:98:44:ab:68:56:e5:29:65:79:8d:
ab:9c:51:e5:1b:1e:41:55:6f:44:80:c4:70:5b:05:80:63:26:
49:5f:ba:3b:71:a0:33:95:a0:c7:14:bf:0e:d6:f7:b9:8f:b7:
c3:42:04:4b:fe:c7:12:bc:b0:7a:f6:24:ce:3a:f5:85:8d:da:
d7:c2:f0:33:c2:98:43:c6:a4:85:8e:4b:58:47:5e:b0:d4:36:
eb:4e:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:37:47 2026 by rpki-client