Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: sKRfQW3v7Q27DDYWCv9Jhzv2hy3i4tTDENRJHaMzc7Y=
Subject key identifier: DC:A8:1F:EE:B1:6B:63:1A:FA:29:3B:D9:E7:8E:84:8A:37:B8:63:2B
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 019F909105572CCA8BF4F744035DE4934160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 20:00:50 +0000
Manifest this update: Thu 23 Jul 2026 20:00:50 +0000
Manifest next update: Fri 24 Jul 2026 20:00:50 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: w3rCdD17do2cYpJb732zU6TZ6OcZ65BwWt2AvQwjm2Q=)
2: HyHzV1MU9ElmfLFYo26pHGiN3IQ.roa (hash: FAwtBrWvr9mjLRzQVdNQzXl4BGzCudYJ6kq3X7cDbdU=)
3: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (hash: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:05:57:2c:ca:8b:f4:f7:44:03:5d:e4:93:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jul 23 20:00:50 2026 GMT
Not After : Jul 24 20:00:50 2026 GMT
Subject: CN=dca81feeb16b631afa293bd9e78e848a37b8632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:72:1b:ea:f5:b3:c4:44:d1:ae:ed:fb:0b:
0c:16:bf:fe:b5:8d:40:6f:de:bd:e5:6f:b9:d6:f1:
8c:f1:ae:cd:4a:7a:94:7c:86:64:c9:db:d5:bb:36:
fc:d4:f7:35:63:43:e2:ab:13:a6:bd:09:1d:21:11:
e2:65:c6:87:8a:a3:e2:11:8d:5b:b7:1b:2c:9f:56:
12:47:e7:5b:e7:be:5e:36:f8:d2:1a:a1:a0:69:dc:
01:e9:f6:2a:6a:6d:23:28:30:14:bb:a2:be:1a:46:
e6:ca:9e:9c:87:59:02:38:3d:21:43:60:da:66:9b:
98:62:cf:47:81:ae:c3:66:9e:6c:bf:47:f0:a9:a1:
cf:1b:b5:75:6f:ce:2a:69:ba:a7:5d:ba:9f:e9:d8:
09:51:b2:ce:31:b2:16:a9:68:47:53:22:09:07:be:
ec:e0:d7:d6:7a:ef:bc:59:8e:22:81:3f:51:7e:0a:
32:57:df:cd:4f:ac:e7:2e:4e:37:71:50:a4:97:8b:
40:33:97:09:e9:5e:2a:dc:05:26:68:cd:69:f7:bb:
6d:fc:e2:35:2b:4a:a7:7b:79:38:26:ee:68:ba:9d:
56:f0:10:5c:dc:93:06:86:50:b4:bd:97:c0:a9:76:
bb:e2:e8:95:59:73:27:1e:40:4a:0c:65:4d:d0:da:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:1F:EE:B1:6B:63:1A:FA:29:3B:D9:E7:8E:84:8A:37:B8:63:2B
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:fe:c8:08:a7:53:e9:be:92:9d:aa:08:11:a7:8a:6b:c1:
47:b7:86:9b:7c:e5:b1:fc:1a:65:6c:22:d2:4f:cb:f4:cc:0f:
c4:19:a1:79:32:db:09:3b:71:11:0c:a7:9a:fa:b9:a5:57:83:
89:1b:8c:23:70:97:9c:4a:f1:c2:57:3d:4e:eb:d2:fa:23:56:
87:66:7e:38:51:a5:34:d3:71:6c:d8:79:c8:40:cc:61:8c:2b:
9b:ee:3b:2f:c6:a2:b7:ea:2d:43:56:1a:13:0a:e5:48:ce:b2:
78:1d:35:81:45:44:2a:90:b2:71:cb:de:01:ba:4a:4d:19:92:
b9:24:59:c8:85:2e:25:db:7f:3d:1b:e3:ec:95:99:ce:9c:51:
90:52:03:68:93:67:8e:d5:46:2d:07:67:be:99:03:fe:64:7c:
8e:91:1a:32:39:3b:30:55:96:57:d0:fd:7b:df:e1:d3:e8:2f:
1b:37:7a:9e:7b:f4:9d:0a:84:87:7b:9c:af:01:2b:d3:f0:bc:
72:64:0e:4c:56:e3:83:44:a8:db:87:da:69:63:ce:42:68:7c:
74:72:e7:f4:27:fc:47:60:dd:ad:39:a7:a2:50:dd:f7:11:ce:
6f:3a:88:99:94:20:d8:81:a0:b2:1e:fd:c6:28:03:0f:1b:98:
ec:01:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:30 2026 by rpki-client