Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: IBpbsHOMePCgz9qnBMXIKvTUvUErM7Xr5UxmvJUpfo4=
Subject key identifier: 3F:01:1F:C7:A6:AA:48:70:25:D5:51:1C:23:00:62:0D:39:5F:A2:87
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019F93C90880169AAAC2E25BC82BE05BA609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:53 +0000
Manifest this update: Fri 24 Jul 2026 11:00:53 +0000
Manifest next update: Sat 25 Jul 2026 11:00:53 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: lk4vtTpi4V1iJCfqd7Nu8imR0elluDGzAEmgWPvTtcM=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:08:80:16:9a:aa:c2:e2:5b:c8:2b:e0:5b:a6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Jul 24 11:00:53 2026 GMT
Not After : Jul 25 11:00:53 2026 GMT
Subject: CN=3f011fc7a6aa487025d5511c2300620d395fa287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:12:e3:eb:22:e1:2d:b7:59:bb:02:a6:e6:
35:21:2b:59:0d:87:99:cb:d6:3a:1a:d4:9e:d3:f9:
f0:de:19:63:9c:23:ca:fd:20:26:3b:e9:c5:7e:54:
57:23:71:b8:3e:18:a7:39:51:d4:a3:40:f3:24:93:
81:b2:02:a3:51:88:52:1b:f9:cd:b4:95:64:ac:89:
e4:c7:11:d7:46:52:a0:3e:37:b7:df:42:34:8d:38:
87:04:bf:9b:92:a3:06:34:90:fe:78:a5:2b:63:39:
b9:f7:19:4f:dc:75:71:67:0b:f4:e7:f6:61:bd:18:
3c:fb:9e:15:fc:37:5f:b7:72:a8:9a:a5:31:7e:ed:
2c:9b:6c:a3:6e:5e:d7:b7:88:62:f1:08:64:ec:cb:
38:5f:78:76:63:6b:56:d1:93:28:5a:5d:e6:61:6f:
a4:ec:c1:b8:2c:87:2d:ab:83:be:98:57:f1:c1:cb:
79:45:0a:d1:32:c2:b7:46:69:51:04:a3:8d:a9:51:
f7:b1:c5:94:a3:5d:d7:ce:f7:68:ca:ce:05:60:0d:
98:54:8f:1c:e5:0d:73:4f:10:63:b4:76:10:97:f1:
64:df:8b:7e:ab:fc:1a:c4:6b:39:c5:76:f6:f4:37:
9e:57:ce:3c:03:aa:f3:87:de:97:95:f2:87:30:58:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:1F:C7:A6:AA:48:70:25:D5:51:1C:23:00:62:0D:39:5F:A2:87
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cd:ce:de:60:98:33:49:52:92:83:36:09:30:ca:08:8a:2c:
d1:82:28:94:ee:85:ea:f0:01:6b:e2:05:7a:c6:d2:55:08:05:
dd:cc:12:f6:73:a7:ac:c4:00:c9:52:02:e6:e9:72:c0:fc:0e:
61:34:6c:de:98:b1:c0:c9:2a:e6:ee:ee:d9:1d:f5:b4:f8:4a:
e5:da:fc:c6:8c:bc:2d:5d:fe:52:7f:fa:ab:5e:7c:e9:f3:b0:
04:68:47:bc:59:d9:0d:77:64:f0:47:62:05:f2:30:bb:7a:db:
a7:0b:37:01:16:70:de:33:12:f2:38:f7:76:16:ce:45:76:42:
96:0a:7d:8e:1a:3d:6c:b8:4f:1f:7a:dd:ca:da:ca:e7:96:35:
1b:6c:b7:be:21:ec:dd:1a:9d:5d:4e:7a:19:8b:20:2f:d5:c0:
18:50:cd:6f:5d:fe:82:f3:38:28:39:98:cf:90:96:19:da:8d:
e7:05:c7:78:92:a7:33:c0:5b:50:d0:12:1c:64:a9:14:04:d9:
14:98:35:9e:71:76:6c:70:5f:89:86:42:6f:df:e9:2f:8c:97:
47:53:0b:81:1b:43:ca:fb:37:ed:c5:43:b2:19:87:4e:c6:f9:
dd:5a:05:23:b5:5d:46:92:eb:19:2d:6c:1b:16:69:41:da:d3:
4b:7f:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:19 2026 by rpki-client