Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.mft (raw, json)
Hash identifier: G971D5vfzer/FOlRKRvE9isICYAeI4uXjErZC2J9U2w=
Subject key identifier: 81:2A:93:7E:B1:56:62:89:F1:89:92:88:D0:65:02:3C:6D:86:DD:4C
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 019F916D3338FFC7E686D320770FE86522F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:20 +0000
Manifest this update: Fri 24 Jul 2026 00:01:20 +0000
Manifest next update: Sat 25 Jul 2026 00:01:20 +0000
Files and hashes: 1: 8HAXP0NYuNkh6EyoveYUGpIkxSg.roa (hash: GuE049OXvSIVDUXmahqcqeUvOGnhrhD008vD02DXH2w=)
2: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (hash: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=)
3: c1S29BRaevUNxcEVUDt9KN4bDEQ.crl (hash: V/PHfU79s5Uc1VJTRSv3IfSGc5jbdYsYU0Xb4G7EGXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:33:38:ff:c7:e6:86:d3:20:77:0f:e8:65:22:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Jul 24 00:01:20 2026 GMT
Not After : Jul 25 00:01:20 2026 GMT
Subject: CN=812a937eb1566289f1899288d065023c6d86dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:55:23:d6:52:72:ba:2c:8f:af:ca:21:e2:
8c:25:39:9a:55:0a:f4:f9:08:3c:d2:01:44:87:4e:
f7:f7:2f:80:26:f9:7a:0e:5e:8b:62:c4:3a:11:67:
3e:bc:c0:01:50:5d:8c:e4:07:03:9f:0b:1e:17:61:
67:fc:d9:70:55:53:9c:94:01:db:84:30:75:64:63:
12:12:c3:ae:09:8a:14:24:a0:17:9e:a4:0c:30:4f:
fb:70:a6:44:51:7d:70:52:65:ae:3e:e4:0d:dd:58:
23:e1:2d:bf:56:93:dc:a3:de:b6:9c:1d:76:81:2c:
fb:53:1c:25:b5:62:46:78:6d:d9:01:9a:44:e7:ce:
ed:a3:2a:94:68:57:74:2a:1c:25:09:da:f4:d8:0e:
8d:3b:ba:b9:83:3b:cd:93:11:1b:f5:35:c0:b6:32:
fb:66:ae:29:0b:e0:32:41:c6:47:6a:06:53:72:c7:
94:0c:2c:8b:5e:3f:3c:05:3b:fb:97:eb:6c:78:a1:
15:90:df:41:fa:f9:b0:76:4a:be:76:4b:e6:a5:25:
9a:03:1b:75:1a:67:54:b7:0d:8a:37:26:80:d9:a9:
82:a8:98:e6:ac:15:b2:84:5d:99:c1:2d:f4:c6:c8:
97:6c:ad:68:31:ea:82:ca:32:05:e4:f1:7c:da:e8:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:93:7E:B1:56:62:89:F1:89:92:88:D0:65:02:3C:6D:86:DD:4C
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:ef:45:45:8b:cb:6e:43:93:27:4e:99:39:f8:bc:52:69:
3d:00:75:17:6e:fe:b5:e8:7f:f6:fa:24:36:9e:44:df:78:3d:
79:58:7d:f9:27:c9:bc:66:54:4d:85:23:15:cf:0d:74:c9:c5:
62:9d:58:01:be:b6:32:de:8f:12:b6:37:cb:56:84:6b:77:78:
5f:10:0f:03:ca:af:f2:2d:a5:45:82:4c:d2:7f:9d:65:dc:bb:
74:2f:03:07:7f:1f:c1:8b:db:c0:79:3e:b9:0a:b7:a5:b4:4c:
0e:ac:03:42:16:ae:d4:07:22:95:6e:dc:50:ec:52:07:25:7f:
10:3e:68:0b:98:8f:f8:f6:27:17:8f:43:36:1f:49:60:e4:66:
5d:a5:3d:9c:d8:02:d8:02:f6:66:74:a2:14:c2:0c:b5:83:02:
91:51:fd:93:dd:b1:2c:95:f7:f3:60:86:81:6e:41:1f:8c:b4:
10:46:1c:8a:b2:78:73:4f:9b:48:4f:25:a4:61:57:7c:65:6a:
2a:12:02:8c:32:77:6c:c9:b1:e4:f8:40:7f:44:7f:da:b3:d6:
63:ce:d9:78:cd:20:5e:6c:c7:12:d1:78:0c:fd:6a:a5:10:ed:
e1:02:44:68:f1:c7:f4:46:20:f8:bc:c7:a2:be:3d:66:23:d0:
de:bb:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:38 2026 by rpki-client