Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: Kw1ybW1DHuhRwBHRKYvP297M+7Sg9gEgqrm+x8nPCvk=
Subject key identifier: 5C:3B:6C:BA:21:A7:37:D7:AE:20:03:0E:7D:5A:39:08:7A:7B:18:93
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019F90FF350264C343AFB38596CAA1E6C409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 22:01:12 +0000
Manifest this update: Thu 23 Jul 2026 22:01:12 +0000
Manifest next update: Fri 24 Jul 2026 22:01:12 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: QxqwO+3NHRqdXWXkF0GUyzSxVTTjKyM6EgxEUxfiRq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:35:02:64:c3:43:af:b3:85:96:ca:a1:e6:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jul 23 22:01:12 2026 GMT
Not After : Jul 24 22:01:12 2026 GMT
Subject: CN=5c3b6cba21a737d7ae20030e7d5a39087a7b1893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:d8:ae:74:15:36:b4:0d:9b:e9:b0:b0:1e:
a1:be:98:07:da:e3:bd:12:33:48:e7:94:5e:1a:30:
bb:34:e0:49:bd:b1:ba:3a:8b:31:f3:3a:3d:bb:93:
14:77:12:0f:81:ff:5a:d7:2f:1d:28:f4:e4:ee:56:
3c:76:df:e0:1a:9f:72:19:7f:3a:1b:79:09:69:8c:
de:21:4a:7c:67:9a:25:79:78:41:c6:79:be:20:5c:
e0:27:94:06:b0:fd:09:60:9e:a8:5c:cd:7d:bc:fd:
2b:d6:7d:8d:f0:66:35:87:6f:45:28:5a:de:9c:05:
d2:b3:a7:e6:9a:ee:5a:34:55:18:6f:cd:74:5a:be:
06:dc:ed:a1:ca:f1:c3:78:2d:76:15:df:07:b0:d1:
ca:4a:1c:7d:1d:33:aa:da:f9:5b:d8:5e:da:2b:a2:
2a:c2:55:5d:0f:09:35:80:ca:19:4c:3b:c1:14:9d:
56:56:d0:c2:38:d5:7e:4f:f1:f0:5c:31:22:eb:2c:
cc:da:df:7f:19:7e:27:32:60:a7:ba:8b:3c:54:ad:
89:79:b8:b5:01:99:2a:26:f9:f9:fe:28:0b:0a:fc:
9b:0b:4a:58:d2:c9:a3:51:02:6c:ec:53:08:60:17:
5d:76:e6:0b:b5:a4:67:34:06:44:f4:03:29:e7:4c:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:6C:BA:21:A7:37:D7:AE:20:03:0E:7D:5A:39:08:7A:7B:18:93
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:9a:d5:6d:c2:75:3b:0e:b2:c9:cb:b4:6d:d7:de:d3:2e:
6d:88:31:c8:67:dd:ce:88:23:b6:34:da:ed:17:41:7f:4a:51:
c8:e9:01:d7:28:ba:b6:a7:7f:30:9f:41:58:64:12:25:c3:8a:
01:6d:4a:fa:96:cd:a9:5e:f0:7f:e1:c2:fd:66:67:1f:55:0f:
3f:85:5b:e8:7c:a2:57:45:c1:bf:a7:d1:15:04:c0:b0:e5:ef:
5f:38:5e:19:18:e7:4e:5e:3e:5f:27:c3:6a:60:dd:4c:b8:04:
d9:31:70:b3:29:11:3f:62:56:e8:af:3e:dd:48:78:4f:10:08:
eb:bd:2f:b9:b9:a0:c5:94:b6:ca:e3:54:96:8f:b9:be:b1:71:
04:52:5e:40:31:9c:da:09:3e:de:0a:64:2e:15:76:ff:bb:3d:
c9:42:5d:ee:45:91:00:be:56:d2:a0:ca:fc:67:c7:ba:7c:07:
4d:ae:52:6a:ae:72:b6:ef:87:50:02:56:cd:a4:b3:27:94:00:
58:71:24:af:3f:fc:92:48:e6:b3:1f:9d:97:b9:b0:ce:5f:bb:
32:e8:78:b0:99:9f:03:aa:25:4c:b1:63:92:50:83:57:b0:db:
1e:b9:24:77:51:69:6e:49:09:df:8e:6c:2a:4b:1f:d6:71:85:
75:0e:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:15 2026 by rpki-client