Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: MIlDBarBXQHP4BA55AbWyXYaIKuZVSF3Q/iImcIvMaQ=
Subject key identifier: 7E:C4:93:9D:92:9F:00:F2:2F:54:30:00:F3:87:55:80:E6:CF:B2:C6
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019F927F51C593DE21D105685616B257481D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 1098
Signing time: Fri 24 Jul 2026 05:00:45 +0000
Manifest this update: Fri 24 Jul 2026 05:00:45 +0000
Manifest next update: Sat 25 Jul 2026 05:00:45 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: 2R2CRidXgc3IzY6gtIR/cZmVQsVSzBvLGqr23/+wG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:51:c5:93:de:21:d1:05:68:56:16:b2:57:48:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Jul 24 05:00:45 2026 GMT
Not After : Jul 25 05:00:45 2026 GMT
Subject: CN=7ec4939d929f00f22f543000f3875580e6cfb2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:95:92:a7:39:e2:78:aa:92:56:73:a9:1f:
6a:2d:6a:31:3f:b2:bc:66:86:0c:fa:9c:75:26:ee:
d6:be:c5:73:40:5e:b6:d4:1e:24:78:e1:a3:3f:17:
ec:63:11:79:1e:54:66:b1:54:cf:37:63:7d:17:4b:
73:cc:78:b0:c9:da:53:03:36:47:2f:8c:65:07:a3:
0e:02:c2:25:5b:41:96:e9:e4:7c:0b:3d:fb:7e:92:
b2:36:13:31:3c:13:a5:70:fe:eb:ab:1c:48:be:67:
86:dc:52:cd:87:93:85:6f:55:07:d1:b0:39:ae:7e:
c3:8e:a0:0e:eb:69:fd:35:bd:14:f3:03:17:8e:36:
52:cc:30:45:1c:aa:7b:05:85:4d:11:44:58:3f:a9:
d3:54:4b:84:5e:05:4b:b3:bf:a8:10:ab:b5:5f:53:
1c:0a:fd:42:b1:3b:d0:f3:2e:56:dd:39:3a:12:f4:
6a:03:fe:3f:3d:2e:d4:cb:5d:52:4e:56:23:89:05:
6a:68:e8:85:e8:5a:16:a0:25:b0:68:3e:c9:df:05:
9e:2c:c7:80:4c:ff:d8:2c:7c:42:a0:6e:b8:90:4d:
b8:b3:f7:fa:6f:5c:13:66:25:49:0b:87:64:8a:36:
43:4a:55:d1:bd:e6:91:3d:ed:a6:8b:57:61:ee:0b:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:93:9D:92:9F:00:F2:2F:54:30:00:F3:87:55:80:E6:CF:B2:C6
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:92:b5:8f:3b:53:62:35:81:9c:6f:2f:8d:38:01:51:80:
69:5a:8e:77:33:be:50:4a:f5:b0:a2:03:7c:34:e3:b0:20:1c:
cb:4b:e9:59:7c:af:6d:1b:85:6a:e6:3c:a0:f8:4a:18:39:9c:
de:7d:e8:b0:b5:2b:3f:d0:e2:36:7f:4f:15:3c:b2:c9:a3:0d:
bf:8d:d9:01:d3:72:da:f1:ac:08:34:59:24:b9:f1:1e:e9:e1:
fe:c1:57:9a:48:02:56:ca:9c:24:f1:90:cc:1a:94:a9:ef:91:
7a:d7:46:65:f7:cf:ab:df:bc:4e:75:c8:aa:51:cc:03:a9:2c:
47:f5:46:7d:ae:e3:ab:cf:ce:b1:a4:43:59:f1:31:b7:2c:90:
1b:f8:44:da:81:2d:3e:8a:23:e8:fd:b2:39:6e:3a:f2:04:f1:
b1:21:c5:b5:b1:d3:0e:e9:0b:95:45:f6:16:54:93:1d:3d:97:
13:14:4e:d4:7d:88:7c:77:9d:0c:66:a0:03:2b:ee:fb:ae:a3:
d8:46:95:ac:90:a0:90:83:71:67:e2:50:da:ac:12:05:f4:72:
0a:4f:d4:eb:1f:c1:49:8a:53:46:7b:a1:95:06:a3:d3:3f:b5:
69:5c:a7:cd:0a:c1:14:f6:0d:0d:5e:2e:43:75:44:4b:b6:a9:
2e:80:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:27 2026 by rpki-client