Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: iS9jo7QK08Z4wQcFrNFMTuQqjRDb1+nV8eHKpFZVaYo=
Subject key identifier: 09:D0:81:90:EE:3A:F9:D3:8F:80:1A:BF:1B:5C:72:41:7C:02:2C:DF
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 019F90C7F93A47DFB3610084E608AFB9AB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 21:00:52 +0000
Manifest this update: Thu 23 Jul 2026 21:00:52 +0000
Manifest next update: Fri 24 Jul 2026 21:00:52 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: xpez+Sg1Z+/rvpe+b5NHjd4LiObR0YAw395LRiFvPY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f9:3a:47:df:b3:61:00:84:e6:08:af:b9:ab:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Jul 23 21:00:52 2026 GMT
Not After : Jul 24 21:00:52 2026 GMT
Subject: CN=09d08190ee3af9d38f801abf1b5c72417c022cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:b7:93:d8:07:fa:cc:84:58:b4:50:64:40:
a8:b8:e7:31:58:ef:47:47:f1:70:65:cc:d6:a2:7d:
70:95:17:d2:aa:f3:c2:af:94:03:81:8f:66:02:73:
9f:cf:ce:73:93:46:d5:1f:01:db:02:79:09:13:7c:
57:f0:41:82:a1:de:84:96:84:b6:b4:e7:e9:be:e5:
9a:15:f9:a6:c7:69:a2:5e:71:29:27:c7:de:09:33:
31:c8:9b:40:ed:9d:8d:ae:b5:33:8a:b7:78:d4:3d:
c5:4b:3f:c0:31:82:f9:32:5a:77:52:0e:80:ca:45:
eb:e1:5d:60:29:2e:fb:70:65:90:c0:dd:29:ad:52:
53:10:33:5a:8b:b1:cb:f3:0a:fb:ac:2b:04:38:14:
ec:50:c9:94:23:aa:01:3a:1d:4b:ed:63:04:1a:db:
84:d6:0e:57:30:4a:16:cc:59:9c:84:d8:3b:53:59:
7e:87:16:71:e4:c0:71:21:9b:5d:a4:46:43:c3:9b:
88:ca:6d:26:4e:4c:80:bc:a6:f9:a7:bb:c4:b4:7f:
42:71:a8:ee:04:41:df:ef:8b:6f:3e:20:30:18:bb:
22:8f:cc:23:80:34:03:7b:c7:38:33:4c:bb:b7:2e:
58:ca:a2:66:9f:56:61:da:b8:ec:88:9d:b3:b7:f9:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:81:90:EE:3A:F9:D3:8F:80:1A:BF:1B:5C:72:41:7C:02:2C:DF
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:06:49:61:49:a9:4d:59:27:66:64:03:a8:dc:7d:fb:e2:6d:
51:b2:f2:01:f6:78:4c:81:16:66:43:69:4b:47:d6:32:c3:4c:
b6:15:fb:4f:b2:a9:4e:d2:1b:47:77:29:d1:d8:d7:62:ec:fd:
63:3d:e5:1d:39:5c:ba:fd:91:61:e8:32:71:64:7c:29:45:67:
55:c7:44:90:be:1f:54:77:c7:00:f7:43:ef:61:18:a5:29:8e:
c8:4c:b6:da:bd:30:e8:f4:a5:64:87:aa:fa:5d:81:5d:ff:f9:
b7:14:6e:e8:2f:cd:5c:23:5c:0b:f7:83:84:3f:53:57:39:07:
5c:b8:e8:15:8e:78:09:df:46:13:d3:54:08:ce:fb:f6:98:0a:
71:e3:3e:c2:4b:9a:b1:f4:1c:75:e8:59:bc:c5:6d:c9:43:2b:
22:7c:ab:f3:89:c2:47:c4:5c:77:60:8d:53:dc:d5:57:ef:18:
8f:07:0c:3a:e1:6f:ca:1b:23:cd:d3:7b:43:f4:15:fe:67:56:
27:7d:e6:e5:62:62:a0:6a:e6:1e:bb:62:d6:e4:d4:79:ef:46:
95:a0:ff:3c:d8:9a:21:19:99:b3:5e:b4:42:f4:02:4e:5b:51:
d9:25:a6:98:0f:70:c2:f6:78:b1:64:10:8c:be:8e:1a:31:ec:
9d:bd:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:31 2026 by rpki-client