Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: +MMdyjNp2/Yl1S61XSYR5i8dOF8m82cg8tiw8xqIiDU=
Subject key identifier: 2F:50:8F:EE:9A:AD:D8:AB:C1:CD:F8:47:9A:E9:D5:C6:D8:71:E6:7F
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 019F91DAD7E86416F716DFE2E8E76FDD9EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 02:01:06 +0000
Manifest this update: Fri 24 Jul 2026 02:01:06 +0000
Manifest next update: Sat 25 Jul 2026 02:01:06 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: 2IPRPhdqphwCF5N30ycqWTmWGxzH5v3XAsJMfVCrn6M=)
2: Tqhx4Fn_ogmc03013r8yI8JBIyo.roa (hash: n+rTrm4PulAJ0u2rK6/67Sh0qOIq9tX+Xq5NsrAfUfU=)
3: tg4JcBcc72nsYKViVZxUUBgVXQQ.roa (hash: f2eYldA7z0hzEnVdnyZLBMrCbNOlEuq0KoeSWyn4Dig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d7:e8:64:16:f7:16:df:e2:e8:e7:6f:dd:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Jul 24 02:01:06 2026 GMT
Not After : Jul 25 02:01:06 2026 GMT
Subject: CN=2f508fee9aadd8abc1cdf8479ae9d5c6d871e67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:19:95:46:ec:8e:e4:17:fa:4d:cc:12:f7:
6c:86:21:21:20:cf:a2:1f:55:c8:ca:d5:3e:fa:f6:
de:02:bb:09:9f:27:06:2a:f9:fe:10:ba:0c:9b:26:
6b:69:d0:89:bc:f9:c3:b6:2f:27:61:76:48:33:09:
d3:41:a0:d7:19:14:ac:df:9b:1a:ea:bf:c8:32:94:
b5:c9:d4:eb:25:63:85:0d:8c:1c:8d:43:d4:ed:37:
09:79:f1:dc:f1:2f:a9:74:03:20:2c:da:2a:b7:da:
98:ea:52:ed:dc:ee:5f:34:b8:c6:61:70:a2:9b:45:
85:2f:42:8b:1d:1f:df:81:7a:4f:54:df:87:e6:29:
0e:12:b8:15:d6:0e:a5:03:80:9c:11:ab:8b:af:7b:
48:75:aa:6c:2a:f5:4f:db:5f:3a:ef:9d:0d:b2:a6:
5e:17:be:51:79:2f:ca:6e:bd:24:5a:40:6a:6f:c6:
0e:cf:14:be:c4:45:3b:b1:49:ce:44:6a:f1:8e:fd:
1b:bb:26:32:c1:e4:09:ba:a7:67:a7:8c:df:3c:ef:
42:8c:a9:26:91:74:bd:5a:5c:75:8d:f6:a2:cb:9d:
1f:9e:cc:81:65:4e:64:c1:16:09:c9:53:2a:d2:cd:
95:6b:c3:f2:88:e1:1b:33:7e:ec:36:ba:b1:0a:64:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:8F:EE:9A:AD:D8:AB:C1:CD:F8:47:9A:E9:D5:C6:D8:71:E6:7F
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:cf:ca:dc:0c:2a:09:11:39:29:3f:e7:49:5b:a4:2e:69:
3c:72:4b:54:02:e7:d1:07:be:6a:16:b7:1c:a9:68:72:a9:c8:
50:67:a7:a0:e2:2e:bc:11:5a:4d:77:fc:6c:7e:29:23:94:c1:
8e:94:aa:d0:c9:6e:bb:e1:19:eb:33:b2:f9:a9:08:d5:57:1c:
ab:c7:19:5d:42:0c:39:2a:7f:10:01:5d:4d:31:c5:85:20:48:
1c:ae:18:b0:d5:20:98:49:80:6d:a1:fd:4e:35:d6:c1:00:c8:
f9:ef:71:0a:68:d4:9e:ed:22:b3:d9:ae:7b:02:b7:ba:1f:b5:
8c:25:66:b0:0a:9e:d6:c6:8f:73:9d:71:96:87:dd:39:84:ca:
34:64:1b:3b:e6:42:65:d4:e0:53:89:74:b7:3e:88:e4:84:0f:
d0:e9:d7:ed:37:b9:6c:1f:e2:69:38:14:ea:89:8f:ed:c6:d5:
71:4b:a3:51:05:34:a6:e4:e7:20:64:fa:63:2d:49:8d:35:25:
54:84:48:5f:6e:79:11:37:a1:27:ca:2f:d4:1a:d9:1b:80:ad:
a9:5f:61:5b:50:43:91:c8:2f:bc:39:59:57:23:d1:68:5b:01:
94:12:31:ac:3c:a5:d9:94:07:43:35:12:45:ff:ac:4f:0d:24:
31:79:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:06 2026 by rpki-client