Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: /ADnAPjwYB1MjygIByQjrupRFaNHiqx8nL/W0hvB9tc=
Subject key identifier: 47:AE:51:06:69:3B:26:16:5F:43:60:02:8E:E1:BD:2D:E1:F5:E3:69
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019F9580B4D29EA41E80FE041DB1672EB47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 19:01:07 +0000
Manifest this update: Fri 24 Jul 2026 19:01:07 +0000
Manifest next update: Sat 25 Jul 2026 19:01:07 +0000
Files and hashes: 1: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (hash: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=)
2: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: A42z2OzpPlWmzc7ptSIRVeSJ8h29qJ9jhHm6v0Mr6ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:b4:d2:9e:a4:1e:80:fe:04:1d:b1:67:2e:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jul 24 19:01:07 2026 GMT
Not After : Jul 25 19:01:07 2026 GMT
Subject: CN=47ae5106693b26165f4360028ee1bd2de1f5e369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:6a:2b:22:5f:37:38:4b:5d:d5:6c:9c:ba:
95:cd:b1:38:17:c5:8c:b2:6e:f9:97:d7:c4:be:8e:
5c:44:f3:2f:fa:84:09:9f:1c:6d:d0:fe:f4:ac:77:
d3:1e:15:2d:e7:60:2d:0a:9f:9f:b9:36:56:32:df:
ad:7a:4f:6c:e8:95:ef:40:c8:dc:15:14:3c:46:5b:
47:6b:ac:49:62:36:ed:b1:29:54:cf:52:26:c4:03:
f1:66:18:d2:2f:2f:b8:69:77:22:1b:42:de:23:b8:
0a:86:3f:15:72:61:95:63:1f:48:64:cb:cb:4a:c8:
f4:b8:8a:47:fb:ed:07:3a:68:04:02:7c:08:bd:5a:
e1:5a:fa:6a:45:56:a1:e2:74:ed:22:79:80:97:73:
f0:66:d8:7e:4a:83:34:08:a2:12:5a:da:16:34:fe:
4b:cd:90:b6:b3:a3:20:43:34:8a:a8:c6:55:73:51:
06:d1:06:12:11:ef:10:40:41:c7:04:fa:ee:f3:cc:
9c:38:2e:9e:50:a7:10:bd:72:55:41:a3:7f:e7:68:
c3:fd:88:80:1b:74:3b:4e:cf:80:9c:43:dc:c7:0e:
87:5f:a2:ef:7e:49:28:40:23:b7:7a:cc:02:f0:9b:
5f:07:32:a0:e8:05:d1:66:83:15:e0:c5:9b:ea:0e:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:51:06:69:3B:26:16:5F:43:60:02:8E:E1:BD:2D:E1:F5:E3:69
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f2:ee:f4:a7:f8:e3:78:20:26:fb:4d:38:bc:49:98:d6:77:
0a:09:f4:fc:7b:6c:52:01:2d:4e:85:f0:08:c9:15:eb:7b:3e:
e2:35:b3:82:e3:5a:e7:c4:7b:02:02:c7:bb:68:8f:a8:c7:b5:
dd:32:62:13:66:88:bd:fb:5a:fe:ab:21:5e:7b:d4:01:df:32:
f7:1e:53:6e:2a:68:66:ae:83:e9:d0:7b:c3:35:4d:23:38:b5:
ce:12:92:bf:52:f7:cf:a7:8f:c7:70:3e:bf:63:22:0a:f4:e2:
36:40:cc:61:05:24:5b:16:bc:0f:43:dd:f3:a1:8c:dd:fd:16:
2b:21:d8:b4:f2:95:5e:a1:c3:1b:3d:41:27:83:3f:f2:4f:3b:
6b:4f:ef:59:94:9b:50:68:9f:59:e6:e1:15:5f:2d:bc:c9:cd:
65:4c:04:e7:dd:96:1c:c3:b9:14:d4:a2:60:3a:82:b0:49:94:
5b:85:e0:e6:61:73:0c:a5:a7:f9:c5:5d:22:8a:f7:ee:f1:72:
24:4a:8a:59:e4:f3:a2:41:5e:7d:0b:ee:7d:81:a4:83:8a:9d:
af:95:55:af:f3:ee:f0:85:3b:4c:b3:4c:3e:01:5f:78:54:fb:
1a:cd:de:3f:8e:78:d7:52:a1:17:66:a4:19:01:53:26:4b:b0:
7d:8e:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:28:31 2026 by rpki-client