Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: Q5Y4kTAWoEFOVv4vr7gzijRGqQpd+9oz37NXYiFTiCs=
Subject key identifier: 37:7D:33:0C:88:BA:11:0E:37:64:10:34:BF:29:F5:76:9D:F4:31:C2
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019F92ED53538C18E01C350883A15C662947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 07:00:54 +0000
Manifest this update: Fri 24 Jul 2026 07:00:54 +0000
Manifest next update: Sat 25 Jul 2026 07:00:54 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: o+wJJ7C6tHWuPYvgj/qCcgRnzh8+f0qo+FN1pYcpgJI=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:53:53:8c:18:e0:1c:35:08:83:a1:5c:66:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jul 24 07:00:54 2026 GMT
Not After : Jul 25 07:00:54 2026 GMT
Subject: CN=377d330c88ba110e37641034bf29f5769df431c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:4f:25:64:a2:2b:8d:b8:b3:a5:81:8c:05:
f9:cf:1b:2a:2f:02:d6:2e:db:5b:46:29:b3:27:92:
ec:c0:aa:92:66:8b:6e:84:c8:4a:87:84:eb:80:63:
37:6d:36:b2:75:3c:6f:4e:ba:c1:74:12:97:d2:80:
a9:38:2f:c9:98:d1:5d:7a:e6:d6:ed:6e:1d:7a:4f:
59:b1:26:3c:5d:a9:cf:42:3a:17:53:b5:8a:73:a2:
16:d0:a4:bd:a6:5e:38:c3:fd:5c:da:93:11:6f:82:
01:6e:f8:b7:7d:5b:ea:94:7e:29:ea:4a:b3:1f:06:
fe:1a:18:ba:e2:5d:0b:f5:ef:4c:fa:8f:78:1d:78:
3e:d7:69:01:7d:33:5d:44:7b:ca:73:c6:b4:c7:fd:
9d:df:04:51:e5:92:8b:c4:f4:bf:97:eb:c9:58:de:
eb:9b:01:31:12:f0:84:77:cd:3c:b6:db:e9:44:31:
fb:22:45:65:c0:a7:4a:5f:4c:7d:58:35:00:24:d1:
30:50:d2:12:87:85:ff:2f:48:bd:ca:06:69:0a:a6:
11:33:30:a4:f9:e6:1c:6c:af:c6:00:76:df:c2:13:
ce:70:62:80:dd:f1:93:7a:3f:66:f7:9f:d1:dc:a2:
0c:6c:9d:6e:bc:e4:2d:ee:91:1f:bd:13:0e:8e:8e:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:33:0C:88:BA:11:0E:37:64:10:34:BF:29:F5:76:9D:F4:31:C2
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:95:c0:43:06:11:73:47:41:94:6b:bb:e2:90:ee:a5:6f:
8a:6f:d8:33:db:09:16:41:8f:29:3c:4f:9c:35:e8:5f:c6:f5:
f9:ce:36:a8:9c:b2:fd:70:e4:c8:49:b8:52:1c:e3:96:ad:ae:
fc:f8:76:0e:3f:22:c6:1d:50:ac:40:e6:fb:38:5e:49:18:6f:
8d:e9:69:04:bc:35:78:80:7d:86:eb:a2:94:1b:18:80:ff:15:
4f:46:77:cf:5c:12:3c:7d:0d:1b:f1:7f:2c:94:6a:00:08:43:
21:35:6c:d3:2c:cf:8f:6b:ab:56:86:85:20:6a:49:60:36:b1:
0a:25:ed:72:8c:3c:bd:73:f2:86:3d:06:52:f2:43:b5:31:75:
eb:ea:00:b3:f1:b1:5c:c4:40:b2:ed:63:d5:ac:be:0c:f1:d7:
4f:11:c1:44:66:92:23:3e:3a:ed:b6:67:10:34:d1:2a:39:6b:
14:a6:ff:7f:98:a2:28:dc:7e:09:20:77:ba:e2:cb:f0:76:79:
ba:fe:fd:d4:08:ed:50:64:9c:cb:5b:9f:e1:f6:28:b6:48:e7:
1b:63:66:38:eb:7d:4d:bf:06:a3:bc:73:e8:64:c7:d2:92:e9:
00:c4:29:93:97:50:ce:a5:54:27:b2:1e:2b:f6:49:53:cd:5d:
70:27:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:22 2026 by rpki-client