Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: X3aTXAe8uUJ/uD40S6KRKd+HvaSnd2gaN2zM1twHs1M=
Subject key identifier: 53:B3:8D:90:86:DD:34:E2:98:58:26:7E:B0:6A:F3:7E:31:47:CD:9C
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019F90C7BEFF050C380197223BE143152CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:37 +0000
Manifest this update: Thu 23 Jul 2026 21:00:37 +0000
Manifest next update: Fri 24 Jul 2026 21:00:37 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: d8gKvJxWZHTv921uwS0H8/GOUhKN41qVnQWasNFXRhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:be:ff:05:0c:38:01:97:22:3b:e1:43:15:2c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jul 23 21:00:37 2026 GMT
Not After : Jul 24 21:00:37 2026 GMT
Subject: CN=53b38d9086dd34e29858267eb06af37e3147cd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:7a:f6:58:dd:99:e1:35:88:4d:04:e0:f7:
e8:19:36:26:39:8e:0f:11:84:88:cb:c8:ab:53:2d:
9f:63:f1:a2:24:8d:94:29:ff:c6:e3:e1:2c:f5:68:
18:21:41:25:74:8c:a5:84:1a:18:2c:29:ee:5a:07:
0b:56:43:24:ed:8c:0f:24:80:de:15:93:69:3f:63:
c2:1c:51:d3:52:db:b4:e7:ef:fa:be:96:f4:75:eb:
93:39:a4:68:4b:2f:46:9b:8c:c7:be:1d:c2:28:13:
bf:1d:d6:f4:a6:34:a8:13:fa:1c:d2:d3:41:b7:29:
c0:fb:90:bc:c7:08:c0:78:cb:72:34:fa:d0:6e:db:
9d:fd:e7:8c:9e:c5:19:65:e0:1c:5f:f5:69:e1:6c:
6e:d3:51:3c:9a:ca:08:b4:09:ea:d7:21:92:23:01:
ab:b6:fe:33:52:f5:b4:2b:40:b7:52:c2:b7:60:d1:
42:4d:eb:6b:60:16:51:1f:cf:03:17:32:4c:cd:0b:
cb:63:cc:89:3a:40:c1:a2:27:9b:25:75:51:6d:af:
ba:84:ac:15:f8:68:0e:77:91:c7:49:ff:74:8b:87:
32:d2:67:a7:1f:aa:3f:52:db:c4:dc:d3:4a:11:93:
8e:0e:00:1f:18:89:e6:1f:48:bf:ae:17:45:d5:17:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:8D:90:86:DD:34:E2:98:58:26:7E:B0:6A:F3:7E:31:47:CD:9C
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:75:8d:64:cd:f0:c0:7c:25:50:53:2d:9a:00:dc:52:24:0e:
f7:84:af:96:64:dc:a2:05:a4:24:32:07:d1:e5:5a:9b:e2:b6:
25:e3:f2:fa:5a:2c:d7:64:a5:f2:0b:50:ad:d9:2d:98:69:84:
d8:b7:0c:b6:b5:94:91:f4:cb:56:98:78:bb:fc:51:e4:cd:72:
8e:9f:c4:7b:73:e9:d0:80:94:3d:47:cd:80:32:18:13:7a:3f:
00:47:e5:13:c7:43:f4:b2:1a:72:a4:a3:d4:aa:62:a9:ff:4e:
43:71:87:60:7a:c7:be:2b:71:b5:a9:05:64:65:52:31:2e:76:
20:1d:92:6a:4f:2e:7e:95:41:42:13:e0:48:7f:5f:39:49:fa:
fd:3b:a2:90:41:d0:c2:1f:d5:c1:d3:25:ab:e3:ab:c5:83:1d:
65:25:a1:4a:9e:59:c3:57:67:2b:2a:ec:b8:7e:f0:e1:e6:83:
3f:47:ea:99:1f:b2:bc:63:c7:60:98:65:29:15:12:70:2c:10:
76:5f:f9:44:1a:48:93:31:b2:e8:08:61:62:07:59:68:a6:92:
15:ff:4a:50:1a:fe:05:77:21:02:c6:44:c1:b8:ea:ad:cb:37:
21:88:b0:8d:ca:db:69:57:5e:86:c7:3e:31:f3:17:77:60:ce:
15:0e:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:40 2026 by rpki-client