Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: bCZbllPYZSO3/fphyPsZ8KRI6UkjuzUBMOjB7tPAKro=
Subject key identifier: C0:FF:18:8F:80:D0:72:6A:55:1F:A2:B6:84:87:69:64:B5:A1:7A:F2
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019F90FF38AD11EAE8E2C3D94B512F016272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 22:01:12 +0000
Manifest this update: Thu 23 Jul 2026 22:01:12 +0000
Manifest next update: Fri 24 Jul 2026 22:01:12 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: qEOZffPq9QZGCD/zzuBAvvvUZka83VN7InZVZOl1SsE=)
2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:38:ad:11:ea:e8:e2:c3:d9:4b:51:2f:01:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jul 23 22:01:12 2026 GMT
Not After : Jul 24 22:01:12 2026 GMT
Subject: CN=c0ff188f80d0726a551fa2b684876964b5a17af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:9f:5a:59:e3:78:d5:fc:41:cb:6e:f5:5f:
70:d6:35:57:80:48:51:7f:eb:05:5d:ba:04:23:c8:
db:fe:9b:64:68:ac:dc:10:d7:2e:f2:ba:16:61:26:
71:2b:fd:b7:a7:1a:3c:10:41:a8:29:61:10:59:1d:
79:dd:4e:4b:f5:20:72:09:b7:f8:b5:a0:52:2d:98:
16:5e:29:b9:40:80:42:74:40:e5:b0:8d:d6:c9:b9:
7b:89:e2:69:98:2f:c3:5c:95:66:7b:01:a0:31:32:
a2:74:48:ba:17:d4:b7:d7:a3:32:7e:c6:d9:58:c1:
66:eb:3b:e4:b2:4c:6c:fa:ae:95:0e:8e:ce:b5:23:
dc:ee:1f:f5:ae:f5:8c:d4:46:44:7e:5d:76:92:64:
d1:2f:14:75:e6:d2:ce:19:b5:0b:c5:f0:fc:ec:37:
b1:d2:2e:6c:17:21:11:b2:fc:1c:2a:03:c0:5f:c4:
ff:e2:ac:21:2a:45:99:73:e7:a9:37:30:0e:39:4f:
62:cb:e9:e3:29:dc:c3:ae:69:d7:f5:c7:4c:a2:f2:
36:14:4a:f4:cf:bd:ec:db:81:21:98:6b:54:19:41:
0c:e3:c6:87:40:29:1e:98:a6:85:8e:ea:39:41:90:
d0:d8:e9:d6:1b:ab:18:59:7f:15:1c:ad:8f:41:a0:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:18:8F:80:D0:72:6A:55:1F:A2:B6:84:87:69:64:B5:A1:7A:F2
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4a:86:0b:3d:8e:83:f2:52:ed:07:47:f7:0d:99:93:56:36:
5e:16:37:32:ad:18:64:7a:0f:06:1c:66:dd:f0:03:0b:3b:9d:
8c:1f:92:96:b5:88:e6:e8:79:51:47:5b:9c:a1:f8:dd:ad:de:
68:ef:ea:4a:a4:e3:6b:6a:da:b9:15:b3:85:bf:5c:39:22:b6:
28:2e:e6:62:90:f2:0b:9e:8d:78:bb:1b:bd:a9:1d:18:62:0b:
98:fb:ea:66:4c:7e:c3:f4:8a:d7:df:a2:0d:45:ea:45:d9:cf:
15:2d:7c:db:63:32:b4:e5:6f:9c:e8:d1:2b:1c:de:3d:cf:d5:
f7:81:6e:24:65:7c:c4:da:b3:1b:91:15:02:9a:65:e1:a8:9d:
68:19:7c:40:83:6b:66:9d:27:81:06:ad:00:ff:6c:54:e6:b8:
a1:16:d6:fb:2b:6f:97:10:0a:8d:ea:7c:53:ee:01:2d:d2:0c:
e3:5d:6a:33:73:4d:be:cd:ce:aa:4a:51:0a:88:0f:af:cb:5e:
c0:d5:ba:43:d5:7c:20:f5:5c:28:35:cc:6f:25:52:9e:7d:55:
93:da:2d:3e:36:bc:6a:80:4c:2d:9e:6c:c2:6e:90:b0:f1:7e:
b1:a1:9e:4b:37:ef:78:fc:17:0d:64:d5:da:19:57:b0:d7:30:
9f:02:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:48 2026 by rpki-client