Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: d8C6/RvcWmb+Bc8w1p9u9xc7PW3lPzLoREaF/mXMj0M=
Subject key identifier: B0:CD:63:5F:4A:B9:CA:4E:11:68:8D:04:47:4B:D9:13:9B:AF:7A:5C
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 019F91DA6FF81494ED6B3BA3061A4EA94BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 189E
Signing time: Fri 24 Jul 2026 02:00:39 +0000
Manifest this update: Fri 24 Jul 2026 02:00:39 +0000
Manifest next update: Sat 25 Jul 2026 02:00:39 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: AYLzI7UoWfnlfGeEkapd0ZYoiFSB3W3HNiLa04GtxnY=)
2: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (hash: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6f:f8:14:94:ed:6b:3b:a3:06:1a:4e:a9:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Jul 24 02:00:39 2026 GMT
Not After : Jul 25 02:00:39 2026 GMT
Subject: CN=b0cd635f4ab9ca4e11688d04474bd9139baf7a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:c9:75:2f:f8:25:3a:c2:6d:f6:d0:9d:24:
4e:09:63:55:f3:98:4d:b3:7f:c4:9f:fc:db:41:b7:
30:9e:a1:a0:ad:9f:a1:17:c1:ab:3a:4e:a5:50:a6:
3b:1b:3f:ef:6f:ba:ea:d9:63:1e:e5:be:9f:4a:f7:
06:9e:83:a8:41:1b:45:a7:37:5f:39:fa:36:82:81:
92:51:71:09:90:63:1f:bd:6f:9d:62:63:55:04:33:
88:b0:86:5b:66:ec:10:43:e5:bb:52:2a:9d:de:85:
06:1d:c5:e7:b6:a5:27:6f:1a:1b:f6:d8:51:f3:20:
50:61:07:91:1f:34:20:98:b9:f4:9c:84:53:a5:c0:
8d:51:02:f5:ab:ff:06:d1:43:8c:59:e5:c9:91:e4:
be:08:58:a4:a6:46:d3:6e:81:14:48:c6:ea:02:51:
ba:38:e5:67:3e:a8:1d:54:15:56:da:18:af:f7:1e:
58:5e:f5:f8:0a:85:3e:e5:56:f7:6f:81:f2:5a:c0:
29:0d:65:35:c3:11:f7:b1:d7:62:02:7c:32:ca:54:
db:f9:5c:e8:86:2b:5b:6e:09:cc:08:ec:00:ba:d9:
87:bf:4b:cd:3d:42:2b:a4:ed:b1:11:f8:0d:b6:f1:
b1:2b:fc:15:ab:87:6c:6e:40:b1:15:45:d4:e0:07:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CD:63:5F:4A:B9:CA:4E:11:68:8D:04:47:4B:D9:13:9B:AF:7A:5C
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:48:99:7f:82:80:74:c8:ec:6b:3f:b1:63:5f:4f:8c:76:
72:7b:18:61:e8:ab:90:2d:e7:6e:a0:37:95:7f:5f:23:de:5d:
ce:be:1a:65:db:05:91:b8:62:29:8f:7d:ab:e4:17:a1:40:59:
5f:b4:37:d6:18:95:c9:9b:06:0d:f9:b4:72:19:8f:32:9f:30:
36:dc:d7:2a:83:de:20:e3:d5:bf:ba:b5:94:24:ad:0a:e1:cf:
01:6a:58:f5:71:fb:9f:75:f0:c0:07:7b:14:52:6c:d7:4a:d2:
10:f4:5e:57:5f:fc:33:4f:5c:09:07:8c:00:f1:95:ef:72:45:
0a:ac:23:7d:13:3b:03:a0:83:65:65:ec:b1:1e:da:a7:ee:df:
53:bf:d3:5d:dc:54:30:4c:7c:6f:78:0f:7c:b0:53:08:94:62:
fa:c8:93:ba:53:c5:5b:4f:65:a1:b6:10:23:6d:50:ee:e2:e2:
e9:40:18:ab:3b:25:1d:2f:7c:98:85:8f:64:ba:d2:a9:57:22:
a1:43:28:38:9a:1b:fd:51:8a:30:e2:84:2c:05:01:66:d0:78:
22:52:e3:c6:15:26:38:75:37:ec:58:73:9f:c3:06:3e:2f:75:
c6:36:63:34:df:b3:38:f7:61:16:47:72:2a:5b:8c:9f:e7:d4:
a0:59:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:15 2026 by rpki-client