Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: AiKjbaBaEBsGZA0aZlJUlT+RcRVFsnIDH3x+yy0bs0o=
Subject key identifier: 01:A5:AA:8F:7C:54:89:E5:C4:2F:D9:D8:0E:7C:BA:CE:D1:BF:B1:EB
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019F90FF512A88608DF8C08871F19DB3E894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 22:01:19 +0000
Manifest this update: Thu 23 Jul 2026 22:01:19 +0000
Manifest next update: Fri 24 Jul 2026 22:01:19 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: lxD1oPQncTBdJVI0+m/IncPHQRLljp1nXzRJhi+TtiM=)
2: hXlpXaM1pFmksY1FpbebpRbEl-Q.roa (hash: Lw896zRP/JglXDT61QeSjgmUxl+Qailc29oqIkIXseQ=)
3: oB9vecBEFrYggxsxtq3fiITzJ2Y.roa (hash: dq4CVE4zFGUyDpHFmLkSZ9sIR2d8JjqnFKVgnpPDCIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:51:2a:88:60:8d:f8:c0:88:71:f1:9d:b3:e8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Jul 23 22:01:19 2026 GMT
Not After : Jul 24 22:01:19 2026 GMT
Subject: CN=01a5aa8f7c5489e5c42fd9d80e7cbaced1bfb1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:d4:46:af:a2:28:f3:12:8f:f5:79:a9:15:
aa:fb:6f:07:ac:49:4c:7b:6f:27:a4:23:6e:ea:39:
47:14:17:53:82:c5:57:6d:47:5e:c1:a2:e2:cc:df:
59:3f:0e:7c:8b:10:fd:b2:54:ac:50:a3:b1:16:5d:
b7:71:7a:22:00:43:86:ba:0e:2b:e2:3c:2d:51:75:
b6:d2:7a:4f:dc:a8:f9:04:90:b5:2e:cd:bd:a4:34:
b0:0b:c0:2d:70:55:26:46:47:3d:84:5a:f5:79:c8:
4d:9a:13:c3:c2:a0:5d:54:f0:44:b3:27:7b:45:79:
1a:e1:a2:24:bc:84:d5:0b:c5:5b:91:af:d5:ec:ca:
08:cc:99:94:ad:01:aa:a0:30:50:77:2b:ee:5b:a8:
47:80:7a:bb:c1:d8:a2:6a:3e:5a:e3:b1:88:6a:43:
23:9d:a0:8c:bf:67:59:15:23:ed:69:d5:86:b3:01:
bd:1f:a7:04:b7:85:14:0f:92:6b:06:10:54:bc:d0:
94:a7:d6:2a:3e:b4:66:b7:a6:2a:9a:88:2d:c2:d9:
a8:7b:93:34:f5:d8:37:8d:99:4d:48:74:32:51:89:
96:22:60:c8:2c:62:31:d3:6f:34:bc:f1:d1:3d:11:
b2:5d:08:09:cf:20:89:5d:7e:62:1d:17:19:f0:31:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:AA:8F:7C:54:89:E5:C4:2F:D9:D8:0E:7C:BA:CE:D1:BF:B1:EB
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:eb:6e:bb:de:53:7b:70:2a:38:5b:13:e3:a1:27:cc:dc:3d:
91:fe:83:36:65:4a:24:e4:d3:34:51:7f:2a:95:5d:07:a3:17:
7c:bf:09:0c:21:65:3d:e7:a1:73:1d:d8:f5:d5:34:6b:3d:42:
4e:7e:01:d1:2b:5c:ca:be:1f:59:a4:87:a7:83:64:3e:bd:a3:
59:6a:b8:d2:97:37:93:a1:8c:3e:c9:b8:b7:ef:63:ae:e9:e8:
36:40:0a:b6:72:28:8b:23:fa:5d:be:55:18:28:31:5a:fd:ea:
c4:26:9b:56:c5:7e:d3:5b:c6:0a:66:c7:47:ec:14:b6:fb:a9:
4f:00:e2:a9:3b:b2:8a:0d:d5:f1:e8:c6:f6:b0:55:7d:39:aa:
56:24:01:84:ee:67:26:00:fe:a1:d4:d6:d0:da:da:08:6e:2b:
b2:eb:45:68:8e:0b:95:13:7b:01:19:c2:41:ab:7a:80:67:80:
c8:30:93:1c:b4:dd:88:4f:ed:a3:a2:56:63:35:52:dc:7e:4c:
b2:84:50:fc:72:7a:82:4a:1d:c1:73:37:a0:5e:a8:d0:23:3a:
66:57:5f:7e:83:4c:da:b3:55:84:e8:72:96:4e:01:aa:c2:bd:
53:36:6c:32:bd:3d:e6:c3:e1:87:c9:5b:b2:39:19:0c:4d:a3:
03:be:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:52 2026 by rpki-client