Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier: E7ZOhzsslnhzt9ZKh/hPhBs/uHMVQyBOk0b+pa4M8OQ=
Subject key identifier: 3F:00:DA:08:47:8E:5B:71:89:CD:FA:BE:60:5A:4C:EA:0A:3F:BE:F0
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019F8EA2E8402B5D66BD22B6DF970FA2B3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number: 19F1
Signing time: Thu 23 Jul 2026 11:01:08 +0000
Manifest this update: Thu 23 Jul 2026 11:01:08 +0000
Manifest next update: Fri 24 Jul 2026 11:01:08 +0000
Files and hashes: 1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
2: HXYyIJwp77xrh-D2GvGeIYjlxSc.roa (hash: Yaww4KhCdEduJ3ZeARFzOtzBnj3+LePhr5NqSxinVtE=)
3: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
4: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: nmF0RrngqRVI4VV5UJJexGKQe2HjcaODBSTcKP+CL2g=)
6: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
7: z1RV9HlRUrsc0eXa5k4hr7_8KwA.asa (hash: L60YiW4wcsK0ahFFVrtWamuz7Xbp/eEjQXmY54sWCXg=)
8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e8:40:2b:5d:66:bd:22:b6:df:97:0f:a2:b3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jul 23 11:01:08 2026 GMT
Not After : Jul 24 11:01:08 2026 GMT
Subject: CN=3f00da08478e5b7189cdfabe605a4cea0a3fbef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:4e:26:b4:58:b7:9d:25:2f:97:7b:de:63:
bb:52:56:29:87:21:35:8b:71:fd:40:4b:46:99:2a:
6a:c8:be:be:ad:0d:15:4c:ab:32:13:8f:cd:bf:29:
97:49:54:1c:b5:df:43:44:88:ee:44:e5:d1:f4:50:
c6:c5:ec:f3:7e:f4:96:bd:6e:cc:38:a0:b9:50:8a:
a3:e3:88:32:46:38:f0:40:6c:1b:13:fa:b8:2d:c5:
ba:88:f0:1f:3d:50:60:fe:7c:90:cd:c3:c6:55:50:
a8:aa:ee:96:bd:57:20:3a:e6:21:e1:55:25:ec:5b:
be:4f:5d:9a:8c:03:d6:03:93:e2:5c:09:cf:10:76:
c2:c8:e9:25:6a:af:d9:6f:bc:9b:cf:e2:61:1f:2c:
d9:a5:e1:d9:d9:9d:00:d5:27:3d:7b:2f:78:45:0e:
3f:27:18:a3:df:2e:d7:5d:02:95:ec:d9:bb:b4:03:
52:46:bb:ba:00:6f:52:8b:16:39:04:57:0b:52:bf:
08:09:bc:6e:7a:bb:a6:ef:74:2b:c1:67:a3:c5:8c:
01:c2:30:5b:b7:cd:1c:01:af:f2:45:1a:12:06:8b:
e0:eb:fd:74:fb:c1:18:f2:07:22:87:78:c5:26:75:
34:dc:8a:f3:a2:f0:ac:16:81:e0:dc:05:01:25:12:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:DA:08:47:8E:5B:71:89:CD:FA:BE:60:5A:4C:EA:0A:3F:BE:F0
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:26:f1:89:5b:fc:3c:d8:8c:22:71:e6:6b:24:a9:40:f6:23:
ef:e8:ca:d4:71:46:e0:5b:4c:a5:32:b4:66:11:a2:1e:87:68:
5e:49:c2:0b:86:62:06:99:c0:17:88:50:7d:d4:d0:9a:8e:45:
f2:94:ef:fd:7e:f0:c6:2b:c0:68:22:06:4a:f7:ff:ec:7f:9a:
d2:82:65:4e:87:fa:ec:1e:a9:fb:dc:da:e2:5f:52:06:6d:a0:
f9:ac:20:b7:17:64:5c:6f:3b:68:ed:6f:2c:ed:d0:08:d3:ab:
c6:8d:69:cc:9c:c1:d0:15:75:92:44:f8:0e:73:a2:81:f5:e1:
e3:b9:79:68:56:f9:72:f9:ba:d4:e3:74:1b:6e:d5:42:2a:35:
19:8b:b6:a9:40:80:37:63:5a:5e:97:6a:db:ee:82:36:7f:72:
23:09:cf:db:6e:2c:98:68:9a:f4:db:76:dd:c2:81:a9:d5:1d:
de:a3:78:06:50:3d:9d:7c:22:2e:77:e0:0d:a0:cf:1c:25:54:
1f:bc:92:bd:dd:28:c6:fd:c4:82:3d:90:ad:31:b3:46:21:8b:
a6:9d:e1:f4:bb:c5:6e:df:26:16:55:c0:bc:41:a0:9b:fd:e8:
2a:e4:b2:72:c6:de:e6:88:44:fc:f3:8d:1a:86:ec:a0:1a:ae:
ce:e3:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:07:53 2026 by rpki-client