Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: 2p5wfF2dFmhNHGyHX5Tgj8/8m0aR1pWgmbMm7nfw3vA=
Subject key identifier: 1A:56:49:2B:62:EE:54:54:36:EF:39:9E:8C:FC:FF:D3:5A:1E:B0:AD
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019F90C7BFDE9A5D18AF5F1647B0006D03B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:37 +0000
Manifest this update: Thu 23 Jul 2026 21:00:37 +0000
Manifest next update: Fri 24 Jul 2026 21:00:37 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: lReeFU18mSuqFVLWvxpUn9x7IUWD/xmhzsG51HTTc8I=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:bf:de:9a:5d:18:af:5f:16:47:b0:00:6d:03:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jul 23 21:00:37 2026 GMT
Not After : Jul 24 21:00:37 2026 GMT
Subject: CN=1a56492b62ee545436ef399e8cfcffd35a1eb0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:5e:82:7a:1d:a8:e6:07:58:79:b6:fd:22:
19:ba:a5:a7:cd:f0:0d:40:d7:bd:cf:f9:d5:b7:a3:
64:07:71:25:55:d6:31:c1:92:84:af:54:df:f3:66:
b7:08:3f:1f:85:56:83:26:81:5c:f5:70:9e:c5:d0:
ad:b6:a9:25:15:93:4e:5f:61:e1:f1:f1:25:89:d5:
ae:dd:7f:ae:67:45:3c:29:8f:b4:d1:24:c5:c2:bc:
e0:11:ae:ff:81:91:58:67:3a:ad:fc:20:60:b7:6a:
da:ca:0d:13:71:06:dc:e7:db:8d:26:2c:d0:69:ef:
fa:03:55:a0:f0:f1:87:71:03:53:4a:66:e8:df:b0:
28:ba:13:ee:55:f7:78:bc:d1:12:cf:9a:2f:08:01:
bc:2e:63:11:50:82:ca:86:b0:87:2c:e6:e7:16:a3:
17:d8:7e:4b:bb:a6:d4:75:1c:9f:5b:0e:4c:b4:19:
f9:5a:4c:de:9a:e9:13:33:27:ff:16:6b:e5:47:db:
60:0d:e0:95:44:7f:4d:13:7e:ba:97:03:2c:76:53:
36:fe:a3:54:2e:b1:0c:75:61:d3:d4:e1:6e:c8:ae:
14:df:99:b1:a9:88:21:48:b9:c6:85:3c:7b:76:8e:
42:47:59:d8:51:20:2e:a0:79:8c:96:57:cd:8c:49:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:49:2B:62:EE:54:54:36:EF:39:9E:8C:FC:FF:D3:5A:1E:B0:AD
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e6:c4:07:ce:7b:83:78:67:89:34:a6:f5:0e:50:92:15:c8:
b7:28:ff:22:b7:89:e9:a9:1d:90:57:5e:15:1a:b1:34:9b:6d:
9f:16:e6:fe:f1:b5:95:df:9d:ab:99:47:98:1a:b7:dc:74:da:
a7:8f:0c:8e:7e:9b:d9:9e:dd:ec:af:a0:97:47:2c:5f:80:80:
62:f3:ae:24:40:a8:d7:e7:44:8b:fc:ac:69:7e:e5:b6:bb:4a:
25:30:9c:08:04:18:bd:d4:fc:04:a9:d9:e4:aa:e0:af:74:ad:
97:eb:1c:27:36:14:c1:4d:3f:10:3e:24:22:81:f0:81:1a:28:
d0:d8:5b:7e:b8:54:7c:2d:5f:5a:7b:cb:fe:c2:70:50:c6:2b:
de:a3:bf:b3:f0:1d:4d:e3:48:56:93:c9:ee:61:22:cf:4c:a6:
31:65:a6:c4:76:f6:b3:18:80:c8:a8:90:4b:ba:49:1c:80:b4:
92:80:ba:6b:2b:27:4f:d3:b6:0a:cb:3b:d8:e5:da:1a:b8:c1:
83:4c:9e:43:85:d3:cb:4f:d7:b1:fc:84:44:f1:d5:95:e7:1f:
b2:d0:15:12:e7:e5:4d:39:bb:50:c1:69:e2:31:8f:a8:56:cb:
5c:69:0a:b5:de:ef:04:a9:91:93:4a:39:bd:64:a2:4e:a9:fb:
8e:1a:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:47 2026 by rpki-client