Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: jqT7BR+Y02kiW6Os6XmCDl+jNGTQcQrhGYWoIH5FLE4=
Subject key identifier: AF:30:DB:AB:36:84:64:A0:CD:4F:CA:B2:1D:A0:81:BC:55:A5:84:DA
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 019F8FEBD17D1B4DCB580CA139634240D3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 17:00:24 +0000
Manifest this update: Thu 23 Jul 2026 17:00:24 +0000
Manifest next update: Fri 24 Jul 2026 17:00:24 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: zjiMZtKlklmu2X/OuCcNNzX7vhMAlcIZaR7bKn4pJq8=)
2: jkf9uYsYVRJJo7-7ziQQDEzWpm8.roa (hash: KJPWOCNh5BY9Xr2oC9jvPyLkj0+8kyflAtM1BYsxhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d1:7d:1b:4d:cb:58:0c:a1:39:63:42:40:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Jul 23 17:00:24 2026 GMT
Not After : Jul 24 17:00:24 2026 GMT
Subject: CN=af30dbab368464a0cd4fcab21da081bc55a584da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:a0:ed:0e:1b:1b:4e:c3:3f:ea:f6:dc:81:
f5:92:9f:58:72:79:97:64:96:f6:3e:c5:aa:f7:73:
d0:e2:fe:83:f5:59:89:15:29:87:2b:ba:23:e0:7d:
e5:87:af:9a:a4:08:fb:71:e6:24:4b:4f:5b:27:72:
63:6f:3a:63:05:df:da:ff:44:19:fe:2a:6a:ba:16:
7c:68:a6:60:ae:96:93:8c:74:2a:77:26:bf:85:96:
33:52:35:e2:88:83:da:18:34:c8:a8:d9:93:a9:26:
cb:50:0b:21:b7:e5:75:23:1b:42:b0:dd:d8:d9:ca:
8d:2d:e0:33:b7:07:f7:45:7c:ca:4b:c7:cd:94:bc:
7d:fa:80:57:fd:6c:23:bd:e0:d5:93:74:ee:ba:39:
ec:13:fd:83:80:e6:5f:01:7f:7f:76:06:61:cf:3f:
95:2b:98:d9:33:d2:01:27:f5:33:11:bd:14:ca:f0:
09:b2:73:32:7e:57:10:e5:e2:ac:c9:bf:be:34:47:
dc:f0:ac:44:ad:14:bd:ad:f8:17:c3:a6:db:6c:4f:
92:f6:81:64:ab:67:78:5c:f8:86:d1:c1:0d:79:8a:
74:52:20:a4:45:9d:8e:60:c9:50:b8:83:86:2f:89:
af:dd:ff:d4:ca:a0:69:4f:61:a1:d3:a2:70:a1:e1:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:DB:AB:36:84:64:A0:CD:4F:CA:B2:1D:A0:81:BC:55:A5:84:DA
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:67:02:fb:34:2f:ce:4b:68:46:c8:3d:67:3e:3a:c5:8d:af:
2b:59:8d:4f:a6:80:e6:32:03:64:6c:e7:43:84:b0:9e:a8:6f:
24:65:d0:2c:21:1e:44:8c:6e:9e:2e:32:83:70:08:75:26:ac:
02:9b:ac:72:b7:e0:b7:ea:51:b4:44:27:c4:f6:84:96:f2:ba:
42:6f:18:6d:ac:f4:f2:12:35:ba:e3:1f:f8:2f:7d:49:c1:2b:
70:b3:c4:8d:4a:42:75:ba:30:cf:88:6e:cf:25:92:c0:e8:97:
46:4d:85:28:a5:63:c6:2f:07:fd:3f:8d:cf:b6:b3:17:68:08:
02:f9:8a:6a:3f:f6:d0:f4:7b:60:3a:dd:67:79:7a:74:2e:c9:
d9:37:b3:0b:97:6d:10:75:e1:7d:89:be:b5:ae:c7:e1:37:ba:
e3:b1:1c:9e:a0:e6:56:f0:04:aa:ff:34:7b:05:ec:f0:56:d5:
f8:a1:20:cb:8f:1e:97:53:da:dd:f0:d1:72:46:47:2f:4f:d5:
55:40:cd:72:40:80:c4:ac:66:c8:98:bb:ad:b9:cb:ef:b2:15:
8b:b0:4f:04:f4:78:93:18:20:c4:d7:9a:4e:29:13:ee:85:34:
c0:09:e0:04:8c:73:8a:06:a7:dd:ef:7e:b7:ed:ce:74:90:eb:
7f:d7:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:49 2026 by rpki-client