Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: Q0R1oO4ZeW522Fg2CzZwZeJmC3Iw9sA01QO8ia3ECL0=
Subject key identifier: 6F:16:8D:BF:0C:D1:F5:93:19:23:77:EF:60:39:98:4D:8E:78:70:EF
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019F8FB51A741DB7C3F966761089C3F83460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 16:00:38 +0000
Manifest this update: Thu 23 Jul 2026 16:00:38 +0000
Manifest next update: Fri 24 Jul 2026 16:00:38 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: lXGYDsvqElJPng8sNNPlqYKJ1FgZfvd+dE57cJgeD1Q=)
2: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (hash: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:1a:74:1d:b7:c3:f9:66:76:10:89:c3:f8:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Jul 23 16:00:38 2026 GMT
Not After : Jul 24 16:00:38 2026 GMT
Subject: CN=6f168dbf0cd1f593192377ef6039984d8e7870ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:64:5e:90:c3:02:f3:d8:cd:cb:5d:c0:eb:
c7:72:6c:c5:b4:a2:a4:ea:49:9b:c9:87:70:07:5f:
dc:66:34:19:b6:32:a1:2f:bf:ff:46:57:5a:e1:8b:
67:46:b0:1a:55:75:b3:5f:d0:84:ab:5c:f4:34:03:
4b:66:00:45:d1:a3:54:85:24:c8:26:d5:45:6a:65:
56:fe:9a:4f:c8:81:f0:d3:1d:ad:38:35:b5:f0:0b:
28:a8:3e:4a:29:0d:30:ea:81:3e:fd:37:c4:b3:2a:
31:1f:6b:48:36:5d:d6:c7:bc:db:2c:64:0d:a3:e6:
9a:48:bb:b5:fb:c5:f4:7b:b8:38:4c:d1:4c:4b:cb:
65:17:a0:c5:6c:7c:de:b4:58:69:27:59:a3:8b:bd:
01:f9:a8:5a:d1:b2:0e:10:3f:9e:67:03:04:9a:38:
8a:ca:e3:56:70:b8:1e:10:03:28:c4:e3:54:0b:be:
9d:28:c0:4a:18:bf:cc:05:96:60:f1:2a:e9:69:9a:
04:7f:1f:cb:ea:a9:c5:55:0e:d2:49:40:eb:1b:65:
07:00:01:7c:a6:f0:95:f4:cc:1d:42:ba:dc:bd:4e:
a0:84:72:71:86:d8:66:46:55:19:69:e0:d7:96:35:
ec:a1:76:ca:52:9d:3f:fb:7b:0c:75:f6:0e:5a:92:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:8D:BF:0C:D1:F5:93:19:23:77:EF:60:39:98:4D:8E:78:70:EF
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:7c:3c:38:5d:2c:38:c1:03:e9:a5:72:32:0c:ac:84:23:
82:e7:7a:66:9d:af:23:eb:f1:3f:65:c7:b3:0c:32:cf:5f:68:
90:1b:0e:7e:8e:ae:06:4b:82:27:45:44:35:90:e7:a1:d0:af:
1f:a5:69:93:d1:7d:5f:41:a6:4d:f6:9b:82:94:a0:cc:c6:89:
8c:43:b7:c3:70:dd:cf:20:5c:3a:b2:5e:35:fc:d9:74:dd:e8:
6d:81:93:79:63:24:01:7b:5f:d9:57:95:e8:fb:f0:6f:8c:35:
1c:e4:66:7b:2e:51:34:19:02:39:6a:1f:d3:fc:85:d7:0b:26:
ee:07:82:9a:b0:45:ef:1a:58:95:19:31:96:c9:44:41:ab:ed:
50:4e:db:a5:dd:6c:36:a2:19:61:4f:76:52:b8:ad:eb:e8:8b:
d8:53:0c:52:a1:45:98:d5:e6:93:4a:30:7b:c5:55:9b:b8:4b:
ff:38:b5:71:35:29:e4:87:41:ba:1d:bd:48:bb:57:4f:58:af:
13:c1:28:60:3a:99:0a:38:3b:8c:a9:3e:d0:90:db:14:e5:2b:
b6:ef:13:4b:5c:77:ff:a7:ee:d6:18:ad:c4:21:29:26:a9:23:
61:91:88:65:40:9e:c7:72:51:a2:81:1b:2d:ba:3e:b3:41:68:
1c:3a:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:22 2026 by rpki-client