Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: Apa2iXLxFg83g0ieKlR/mhzqwmMaEE3fQycMAXyZzKY=
Subject key identifier: 8E:B6:77:33:01:F7:8A:77:46:B2:6A:C2:F8:09:48:A7:CD:14:C2:DC
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019F91DB0BA1985D386819F11C1E3A02B530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:01:19 +0000
Manifest this update: Fri 24 Jul 2026 02:01:19 +0000
Manifest next update: Sat 25 Jul 2026 02:01:19 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: eNlyrWXxWzPo9lRoRjXRqGauMesBlRd2ybYECMECEFM=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:0b:a1:98:5d:38:68:19:f1:1c:1e:3a:02:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jul 24 02:01:19 2026 GMT
Not After : Jul 25 02:01:19 2026 GMT
Subject: CN=8eb6773301f78a7746b26ac2f80948a7cd14c2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:05:86:5c:63:4b:55:66:8f:29:ed:b7:cc:
59:28:98:45:7c:3a:8f:8b:27:65:04:07:3c:4f:a5:
cf:8d:5b:7e:72:fa:5a:c2:69:bd:42:15:51:d1:f0:
33:d5:1e:bb:2c:ce:20:43:6b:53:3d:f2:95:21:2b:
d0:8c:f4:91:09:a6:e2:b0:29:06:54:80:4f:e1:84:
00:01:82:f3:59:3e:b9:db:18:68:b0:66:c1:c1:6e:
6f:0b:9f:af:2a:7d:75:a3:c5:aa:0d:e0:45:e0:88:
59:e8:a6:61:d9:fd:58:bb:97:52:22:ad:1b:c5:32:
11:ae:02:d4:76:7f:1a:ec:82:ad:5c:ee:66:df:67:
05:30:ac:af:1f:60:89:f3:03:fd:07:7f:b4:70:6b:
c7:37:8f:ee:7b:3b:e2:b9:26:61:de:9a:28:7a:29:
ec:69:a3:47:2d:08:bc:f5:04:f7:cf:9b:98:e1:47:
cd:9b:81:93:ea:dc:57:03:22:fe:a1:c8:30:fe:d5:
fa:04:b2:6a:21:fe:54:7c:d3:51:79:85:6c:54:de:
f3:b2:ae:27:a5:53:59:4d:5c:3f:2c:9a:2d:29:77:
fa:f9:db:17:34:0b:06:d9:fa:30:a5:86:ca:85:a0:
0d:e7:c8:a3:b1:77:fa:f5:82:23:f6:e2:29:8a:2f:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:77:33:01:F7:8A:77:46:B2:6A:C2:F8:09:48:A7:CD:14:C2:DC
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a8:98:26:10:74:59:56:7f:6a:11:6b:3d:cc:11:96:b6:3d:
59:60:62:d9:ae:f5:b5:ec:11:97:3c:df:0c:85:27:de:21:57:
54:33:23:03:42:f4:dd:08:6b:22:a2:e0:e5:af:85:8a:89:b0:
67:c4:01:af:d2:cf:35:66:1a:a7:e7:46:91:dc:80:b1:3c:c2:
42:90:9e:3e:09:c2:38:9e:09:f6:7f:dc:e6:29:2e:06:61:da:
c4:49:90:3f:fd:66:7e:b7:44:1e:33:ae:5c:58:95:af:d7:7b:
08:71:ac:35:3f:f1:ce:fa:7e:e8:52:ac:3c:a8:03:5a:1f:00:
08:bd:68:88:4d:9f:8e:ee:fc:b7:87:a4:22:b0:98:f7:75:ca:
26:a8:98:e0:0e:a6:da:25:3e:95:f3:ea:e1:aa:ed:97:6e:63:
94:c4:e6:3f:4f:39:41:2f:f8:23:4a:09:d6:20:63:9a:1c:75:
dd:93:cb:08:82:65:77:87:83:30:9f:eb:bf:ff:6f:94:9a:48:
87:02:84:82:e1:ea:75:0e:c7:b4:c9:9f:e3:87:ee:57:19:f6:
5b:76:36:e1:c7:aa:46:d8:5d:c8:7b:fb:fb:39:52:7e:60:9b:
dc:03:4f:ff:56:97:76:05:d5:7b:fc:32:2f:2e:2f:29:3c:c2:
4c:de:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:07 2026 by rpki-client