Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: 7ova0rcbD6BSogGYlh3IkqYvyixSjQ87mkWR8GeDc0M=
Subject key identifier: 57:CF:DC:92:16:84:A3:2A:A8:D6:0B:A0:2B:81:7F:AB:BA:3E:AE:E9
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019F916DBBDF1DA8C26ABA9478E08DCA888F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 00:01:55 +0000
Manifest this update: Fri 24 Jul 2026 00:01:55 +0000
Manifest next update: Sat 25 Jul 2026 00:01:55 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: wgHj2z9Pu31W3JreAw2V59c/MX2uV1NTyYfYnNVCU9E=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:bb:df:1d:a8:c2:6a:ba:94:78:e0:8d:ca:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Jul 24 00:01:55 2026 GMT
Not After : Jul 25 00:01:55 2026 GMT
Subject: CN=57cfdc921684a32aa8d60ba02b817fabba3eaee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:b2:99:b4:f9:8e:91:b9:a8:e4:9b:e2:26:
b5:99:10:c9:9a:1a:86:4f:43:63:60:46:db:03:40:
42:0f:34:ac:56:26:c3:ed:0d:65:97:5f:69:8f:d2:
b8:fb:d5:d3:8e:18:4f:18:f4:b4:56:7b:73:2c:5e:
68:ef:4a:d0:29:4a:15:28:95:06:16:c6:95:16:89:
03:c7:78:6e:c9:40:21:ac:a7:49:87:e7:e7:f2:b5:
28:be:1f:5c:5f:bd:3c:cd:e7:a5:75:68:44:e2:45:
08:8d:44:27:fe:5d:1c:e8:7f:61:c3:ad:2d:34:ae:
c8:a0:11:f1:5e:6c:40:84:a8:cb:11:0c:17:f9:67:
86:ca:f3:31:99:95:0e:9c:90:fb:dc:5e:03:eb:e8:
1f:88:e9:91:db:fe:f7:b6:e6:55:46:e4:ba:69:57:
6f:9d:2d:9b:b0:92:29:f1:b9:c0:f9:e5:7f:fb:2b:
23:a8:84:0e:df:cb:05:c8:bf:8a:28:3f:6d:53:08:
65:ab:19:18:3c:34:1f:a0:29:80:86:7c:4d:0b:9e:
9a:bd:1f:be:ad:19:69:7c:99:54:5b:ac:90:5b:f1:
b1:4a:07:4a:72:8d:04:65:ff:fe:07:64:dc:40:37:
31:ea:b3:f1:0c:32:3b:2f:54:27:42:5f:d4:a3:e1:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:DC:92:16:84:A3:2A:A8:D6:0B:A0:2B:81:7F:AB:BA:3E:AE:E9
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:63:df:ce:1a:b9:ae:5e:af:c5:e9:fb:ce:64:76:5a:46:b6:
51:96:a0:c5:56:19:18:24:54:0d:9b:15:59:2b:13:51:c1:53:
05:46:b6:78:c7:b8:7b:bc:88:00:a4:ba:ae:7b:3b:af:ea:53:
e1:58:2e:56:bd:82:e0:b9:90:a8:3a:e7:08:d0:be:9c:d6:04:
07:a1:fc:7d:14:ef:4f:95:a0:29:c6:a4:16:f4:21:68:1c:de:
3b:23:75:0f:b2:12:f7:e6:05:9d:39:e2:ec:47:91:36:dd:0d:
e8:a4:bd:f4:aa:3a:b2:b5:b2:e0:a2:44:cb:6a:f6:cb:8b:27:
db:c7:2c:79:19:1b:f9:5f:5d:aa:e1:2a:08:95:0a:7f:e1:8b:
07:8a:8c:8b:6c:b8:c0:40:e3:13:3d:65:a0:21:b0:6d:00:8f:
f3:1a:54:1b:1c:ac:a4:89:18:31:4e:5a:11:0f:b8:8e:23:08:
15:0b:ba:5b:9d:5b:47:30:fb:9c:5b:86:b9:d4:96:01:9f:69:
79:82:00:67:f1:26:99:eb:36:a8:e7:e9:f5:06:24:79:a5:66:
c1:52:11:e0:a8:6b:c9:eb:5e:29:11:f7:3b:6d:c2:bf:ae:db:
4e:19:79:8d:5e:5c:99:c7:03:94:99:b7:d8:39:58:88:68:f2:
a3:a5:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:44 2026 by rpki-client