Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: JT7X/xdGSumi9kHO2TcwpUw9Za6e5GwmshDwBzXJvpI=
Subject key identifier: FF:CC:77:B7:6A:05:58:35:12:A4:CA:91:7B:FD:38:23:F0:38:A6:05
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019F9323D755915DD9F91AABE1127F0A0005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 08:00:27 +0000
Manifest this update: Fri 24 Jul 2026 08:00:27 +0000
Manifest next update: Sat 25 Jul 2026 08:00:27 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: xspqyKI948+kcHQuYlZIEYtOWe2+PbtaHehtxaBE9tA=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d7:55:91:5d:d9:f9:1a:ab:e1:12:7f:0a:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jul 24 08:00:27 2026 GMT
Not After : Jul 25 08:00:27 2026 GMT
Subject: CN=ffcc77b76a05583512a4ca917bfd3823f038a605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:2a:54:de:53:c6:91:c4:47:25:88:6e:a1:
f8:93:16:ef:ff:1d:2a:d7:76:f2:0d:77:4b:10:f4:
9f:b7:4f:25:95:a0:a1:fd:ef:20:93:94:f1:99:83:
3f:c7:f3:e3:7e:b8:53:32:05:85:2c:67:0c:61:52:
28:de:b0:38:aa:62:5b:78:c0:61:01:df:cb:3e:4d:
55:60:d5:db:38:e9:e2:25:b1:ce:44:88:3a:7a:5d:
65:02:d5:12:2f:0b:3a:95:14:2f:8a:f6:be:8a:78:
20:47:b9:26:ae:fb:63:d4:94:1b:1a:4e:11:3d:12:
41:74:2e:20:ea:e0:62:36:24:5b:e6:cb:87:fc:ed:
a0:69:ef:bf:a0:96:30:73:fe:ec:f5:be:19:25:e2:
ad:61:da:ab:c9:84:bc:ef:bf:64:94:1c:bc:37:36:
c4:14:7d:a5:65:5d:f0:5e:67:55:96:53:b2:43:5a:
d0:28:52:99:74:10:a7:df:0c:0d:70:7f:93:6f:88:
37:11:da:5b:75:b9:53:bc:fe:59:2f:22:69:05:66:
73:70:21:47:26:2a:fe:da:58:5c:2e:c1:57:f2:07:
f4:84:cf:cc:61:2b:92:8f:27:9b:92:28:b1:48:ae:
46:85:0f:6e:2f:ae:64:65:a1:90:73:3f:f4:dd:31:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:77:B7:6A:05:58:35:12:A4:CA:91:7B:FD:38:23:F0:38:A6:05
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:8b:37:fc:97:ac:7b:6e:b3:47:48:4d:cf:50:28:a5:ac:
25:ae:64:47:12:22:33:d9:e7:42:7c:f4:e2:66:21:68:e5:7c:
7f:60:35:7a:a0:b5:cd:4c:43:d6:6a:94:a0:73:75:ed:8f:29:
6e:11:5d:71:1a:83:57:3c:38:46:2b:ff:fd:24:ef:76:06:9c:
03:26:58:d9:f9:a0:7e:c8:05:20:1e:c9:29:22:bf:27:67:ce:
ea:08:52:9b:94:88:a4:cd:dd:91:2f:30:7f:ed:15:3a:03:59:
c3:f9:12:74:a0:a0:16:58:af:94:e5:56:b7:1e:4b:f5:3a:d5:
b1:9b:72:d2:86:e1:47:13:0e:2f:f8:ee:0d:73:3b:08:3d:e6:
59:8c:86:7a:4b:85:26:48:e8:3d:98:83:c8:6f:37:66:0c:8a:
d0:b8:c2:d9:ba:b7:73:d0:4c:7c:5a:e4:1b:d0:c1:cb:6e:6d:
82:90:47:f5:99:ed:12:5f:ad:53:d6:81:fb:74:84:d4:db:08:
6e:d6:6a:1e:ff:ee:c8:f4:1e:d6:91:d9:5a:11:d1:e4:cf:d5:
29:d2:77:8c:81:b2:db:9c:5b:ed:4f:55:a2:24:34:06:89:cd:
17:29:09:de:3e:a2:64:36:87:9b:bd:42:79:e8:da:3d:b9:a5:
59:80:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:15 2026 by rpki-client