Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: YRdktAtcJ46EJ1kSKtiO0xOerAnaLn/MKyeHHxNCS0k=
Subject key identifier: A8:BE:21:CD:57:6F:D4:4A:40:70:73:57:59:F0:15:E7:D9:EB:36:B4
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019F9022A62C3221D3C5C5A39B4073C30762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 18:00:17 +0000
Manifest this update: Thu 23 Jul 2026 18:00:17 +0000
Manifest next update: Fri 24 Jul 2026 18:00:17 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: +UJonxySB0FCYCegVxESS5SStFswkZ8tDGjg2Kvb3n8=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:a6:2c:32:21:d3:c5:c5:a3:9b:40:73:c3:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Jul 23 18:00:17 2026 GMT
Not After : Jul 24 18:00:17 2026 GMT
Subject: CN=a8be21cd576fd44a4070735759f015e7d9eb36b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:76:c9:1e:e7:01:30:75:32:aa:79:c4:05:
85:63:80:cb:52:e2:a0:c6:85:df:87:77:4b:51:e8:
58:e9:ea:59:53:44:58:a8:a1:3c:8f:99:24:3a:33:
34:26:19:52:5b:3d:fa:e8:a3:49:63:3a:f8:b8:95:
e2:3f:88:6a:49:f8:e7:f9:67:6f:9f:63:31:1d:21:
67:0d:d0:40:59:20:aa:42:8a:74:26:65:d9:ab:47:
bd:ae:2f:73:27:91:3f:46:47:0b:7f:2f:27:fd:84:
1c:fa:ba:04:49:a8:1a:23:f4:90:6d:a5:98:04:8e:
d7:af:b9:e1:40:60:2b:96:9e:c2:3e:9f:c1:88:db:
d1:c8:2e:37:c7:83:ba:8f:89:de:aa:04:d1:4a:cc:
75:ef:d1:c5:f1:94:7b:18:b0:24:31:74:07:6f:a9:
c1:53:34:6a:5b:50:fb:f3:34:a7:a9:d6:b7:a6:e6:
c1:c0:6b:b7:a3:65:0e:b9:e2:66:84:c8:81:8e:f0:
26:be:9c:83:f1:27:b6:62:be:a5:1f:97:4f:8a:a5:
b5:ea:e7:6a:13:66:e5:40:72:14:ad:24:5e:b7:ae:
e5:7e:3c:61:a3:be:aa:cc:b9:6b:9d:62:80:f8:b9:
94:b2:dc:4b:bb:3d:90:5d:b8:4a:63:08:d3:98:21:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:21:CD:57:6F:D4:4A:40:70:73:57:59:F0:15:E7:D9:EB:36:B4
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:1c:3c:17:a6:79:92:63:10:9b:62:75:02:e1:4b:47:62:
f1:6f:66:f9:28:c9:c3:45:37:fb:c8:73:da:da:64:65:1c:c9:
d0:4b:da:ab:98:25:ae:97:c4:6a:48:6e:d8:92:00:fa:6a:e9:
74:8a:2c:6c:fb:67:53:ed:47:f2:3e:91:23:36:07:ba:51:9b:
a8:31:b5:10:20:5c:2d:10:5a:4a:8d:1b:53:39:bc:ea:79:12:
c5:d4:86:b2:fd:c4:11:aa:f9:9c:6c:4c:3e:f1:fc:13:4a:54:
26:24:75:a3:13:35:4f:cc:d4:02:02:41:13:f8:1e:08:d9:9c:
e5:67:2d:47:3e:8d:67:81:fc:11:4d:64:d6:9a:a5:4e:d5:8f:
5d:de:ae:8c:8c:f8:6e:23:fb:8a:97:7a:58:91:5b:af:d8:2a:
1e:34:cb:39:24:9d:75:4f:7f:ec:eb:f5:04:e3:60:f4:53:74:
9e:eb:6c:b4:21:39:54:20:40:04:75:ed:c3:f5:db:f3:2a:67:
b4:77:8e:18:85:72:b7:60:4f:fa:30:4f:89:41:44:4a:9f:4b:
d4:9d:3e:09:1e:1d:9c:d6:6f:18:c6:e5:a6:cf:5d:3e:c3:a8:
1e:fd:76:85:75:6b:c7:ee:b5:6c:e2:30:9b:c9:c9:bd:16:7e:
c6:6d:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:22 2026 by rpki-client