Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: 6hqLPYmBW0OLL40+2zrBvh2HTclOBNtT1jklVCXgDes=
Subject key identifier: 64:87:AD:F8:DB:57:BA:16:33:E0:54:CC:20:4E:AB:48:D7:56:92:43
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019F8F7DE0FCFE93DC498938DF2D5CFC3C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 042E
Signing time: Thu 23 Jul 2026 15:00:19 +0000
Manifest this update: Thu 23 Jul 2026 15:00:19 +0000
Manifest next update: Fri 24 Jul 2026 15:00:19 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: d4W/BE54K6aMQ98MgoYS8DFEfcUXVpV5UZUY4zBLMaY=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e0:fc:fe:93:dc:49:89:38:df:2d:5c:fc:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Jul 23 15:00:19 2026 GMT
Not After : Jul 24 15:00:19 2026 GMT
Subject: CN=6487adf8db57ba1633e054cc204eab48d7569243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:4e:47:4d:d7:17:5f:97:47:91:e4:92:d3:
d6:7e:af:bf:87:93:56:05:0a:75:a4:ea:1a:f9:c4:
90:5e:96:2a:59:91:45:9c:44:f0:f5:6b:22:2b:4a:
ef:cf:88:ba:b8:e8:b9:30:a4:aa:94:e0:b5:5e:7b:
9e:c3:ed:d1:a5:aa:d1:15:86:e0:90:78:92:d2:a4:
63:d3:5a:2f:19:d5:c3:3a:d8:46:b5:dd:0e:df:0f:
f6:89:45:2f:70:94:fd:c6:b9:8d:f5:f5:45:ed:c4:
09:b5:93:78:38:87:72:cf:3c:36:cd:66:8c:e9:77:
66:30:8c:26:19:9d:83:11:8f:48:35:5f:a2:8b:cc:
67:32:16:3f:bb:b4:44:6d:5c:a0:1b:f6:55:b5:0d:
cb:7e:86:ed:0e:e8:d7:8f:13:09:0d:3e:cc:4f:57:
12:f1:50:a1:bf:7e:d6:d2:1d:0c:1e:8b:41:f2:aa:
44:a0:f9:ef:84:f2:05:91:4c:95:92:c0:93:04:17:
df:1e:a4:c9:3a:f6:49:a5:a9:ee:0c:ce:0b:23:5a:
9c:c6:ee:3a:c4:2b:d3:4e:b9:46:0f:90:e0:68:65:
88:14:c3:08:fe:86:5a:34:1b:34:5d:44:c6:bc:ab:
ae:75:2a:4d:22:2a:78:e5:b5:76:b6:62:0f:14:78:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:AD:F8:DB:57:BA:16:33:E0:54:CC:20:4E:AB:48:D7:56:92:43
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:63:20:54:f3:31:e2:b0:e5:d7:95:d7:a2:ca:5b:61:b7:f3:
c4:1f:bf:23:e6:61:a6:ed:b6:df:23:c8:74:a1:b2:e7:77:96:
9e:48:b4:0e:14:e1:e4:43:b9:5e:b9:27:2c:c6:ed:b5:b1:30:
3d:37:cb:8d:c1:11:47:34:eb:f5:db:97:2f:06:b5:b5:a2:b5:
99:d9:f9:c9:58:f3:22:4e:13:52:01:92:31:86:db:49:99:60:
7f:d7:1e:54:45:13:26:59:b6:fa:ea:66:ad:e1:27:45:10:af:
50:02:00:59:c4:7b:be:88:9e:f3:ea:8d:ba:a7:20:ac:3a:70:
a0:34:ab:3b:32:12:04:af:5d:1c:cb:fb:e0:fa:ea:6a:c2:11:
5e:58:18:7e:e6:d5:aa:e0:62:02:e5:90:cf:7a:50:c4:12:35:
20:18:6e:3e:f1:7c:d9:29:4b:61:d7:de:93:69:b9:ca:87:38:
bb:a5:dc:8c:01:31:d3:79:19:19:be:55:0c:8a:67:5e:2e:3b:
a0:54:b8:26:14:bd:65:0d:f7:ff:6c:1d:4b:83:d3:a6:3b:51:
30:29:21:45:74:d8:9c:18:f1:f2:93:73:23:37:13:58:65:ef:
62:27:cf:d3:28:d8:49:9e:30:16:3d:85:86:ec:ef:b3:d1:d4:
73:a5:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:13 2026 by rpki-client