Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: pbRwCWPKg0EnFo/Ho/V8ikkuKaN69jXov9P/HOuNaVM=
Subject key identifier: 8C:53:90:F5:0C:68:43:90:7C:DE:79:CF:37:6B:56:A9:EB:BB:4E:51
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019F8FEC18D7224528820DC83978D1EBBE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 17:00:42 +0000
Manifest this update: Thu 23 Jul 2026 17:00:42 +0000
Manifest next update: Fri 24 Jul 2026 17:00:42 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: /TpVWIQy+nvhGeauE6VDwdvdIHlDrD46w7Pp4s6S324=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:18:d7:22:45:28:82:0d:c8:39:78:d1:eb:be:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Jul 23 17:00:42 2026 GMT
Not After : Jul 24 17:00:42 2026 GMT
Subject: CN=8c5390f50c6843907cde79cf376b56a9ebbb4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:d6:17:43:82:3c:13:f9:6c:8c:a4:7e:fa:
32:e3:6f:7f:7f:40:9d:ba:89:ec:c7:1e:b6:7f:dd:
79:36:ed:a2:bd:cf:26:7f:4c:63:b4:67:8a:68:4f:
bb:0f:8f:9f:5c:58:96:43:d4:4d:0a:f8:a4:36:4e:
69:49:56:be:7b:14:ee:f5:85:e7:42:48:ae:7f:93:
b8:a0:9b:f9:4f:fa:02:26:97:6b:1f:c2:5c:2a:21:
aa:1b:ee:3b:be:b0:82:fc:a3:77:21:06:8e:f3:63:
43:00:01:35:c7:a2:88:a3:d1:d3:5c:05:02:4e:33:
cd:7d:a3:e5:73:d3:da:51:e5:83:ce:0a:74:84:75:
3b:97:48:fb:a0:cd:9a:06:da:be:7c:ec:93:67:c4:
da:43:1f:17:8c:0f:bd:e1:03:be:ab:ab:5e:33:7f:
73:8d:90:af:b8:d0:c7:c1:4a:6c:fd:ae:c3:8d:bf:
7f:be:8b:2d:87:72:48:c2:44:ce:e3:4a:c8:f9:4e:
c8:17:2f:3c:94:79:80:b0:d3:a8:09:81:2c:d8:da:
c3:df:b5:c5:2f:07:f8:fa:f9:9c:a4:56:6a:e5:d4:
3b:d6:a8:c2:26:0f:a2:28:cc:81:94:36:93:a3:f5:
0a:c7:54:d6:8f:95:58:2e:55:e6:9c:db:3e:fd:de:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:90:F5:0C:68:43:90:7C:DE:79:CF:37:6B:56:A9:EB:BB:4E:51
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:35:cb:ba:31:d1:95:4e:66:47:c9:6a:de:ac:78:57:35:
83:2c:ab:ce:94:25:5c:7d:cf:02:b2:b8:17:80:47:9b:1d:6c:
7d:29:fb:4b:ea:4e:a2:7a:95:4d:7f:bb:e7:56:a1:94:f2:84:
c6:2b:9e:d1:96:83:09:3f:50:1f:ca:3f:ca:ec:8c:1b:ed:6c:
a3:c3:5e:58:c7:ed:d6:08:a8:84:0b:70:75:67:5a:34:13:d9:
5e:10:10:1d:21:a0:e5:07:9d:fd:22:3f:c7:3c:c5:0c:93:e0:
b6:13:0e:1a:ef:92:5d:df:30:0b:5d:02:03:cb:8a:6d:16:78:
c5:a2:6a:fb:e7:44:83:c9:8b:22:55:ae:25:90:69:1f:44:12:
8c:82:4d:31:db:43:59:4a:2e:0a:b8:54:e8:c0:d0:b7:ae:0d:
07:23:27:a4:c9:0a:2e:e9:78:f8:19:73:b9:97:cc:f5:27:8d:
bc:9f:c2:21:55:c0:53:ff:df:58:eb:3e:f6:50:e9:70:b9:09:
32:7a:72:e8:f4:90:0f:a0:ee:44:9d:0c:65:b8:dc:5b:3e:2f:
ef:e0:51:92:f3:5e:8d:e6:a1:63:c1:39:51:c9:a3:5f:32:f7:
a6:2e:05:81:59:a8:58:86:47:c8:76:f2:4a:46:3d:46:e5:f7:
46:a7:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:46 2026 by rpki-client