Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: 50yU13ClwZL4c7xwE3sqHOpWGYqeHIycdGTXPVI/v9Y=
Subject key identifier: BE:5B:C2:AD:F4:D1:B6:F2:2E:84:54:92:54:FB:CA:31:A0:D6:F6:77
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 019F92118A74E397A1D7FD54D49927DCB1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 19E4
Signing time: Fri 24 Jul 2026 03:00:50 +0000
Manifest this update: Fri 24 Jul 2026 03:00:50 +0000
Manifest next update: Sat 25 Jul 2026 03:00:50 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: OJtcDDtK+cJiUAqEhttS2aAkqcr8+IN/cZygnPMljjA=)
2: _fx4TtZl912PDxKt3SpPKkcaW4A.roa (hash: dK8lG/+XmK+y1Z83e8NRgEb93MJfhW6m6ThSMLB6k4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:8a:74:e3:97:a1:d7:fd:54:d4:99:27:dc:b1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jul 24 03:00:50 2026 GMT
Not After : Jul 25 03:00:50 2026 GMT
Subject: CN=be5bc2adf4d1b6f22e84549254fbca31a0d6f677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:1a:43:51:fd:3b:f4:8c:b7:9d:62:1b:4a:
10:24:b6:5c:db:ee:14:fa:fc:9f:06:ee:6e:31:9f:
dc:4f:ad:d6:23:ec:0a:87:de:cf:cb:83:4a:98:2d:
17:58:f4:2b:5b:c6:33:4b:5e:41:63:e8:66:77:86:
81:6c:50:cb:57:f5:4c:5f:52:10:85:93:4a:80:4f:
52:f2:f2:b0:0f:c3:35:28:f7:4d:d7:84:8f:4b:b2:
82:0e:88:69:11:d5:2a:29:92:36:b8:49:af:cb:1d:
75:db:5b:c4:9a:92:a2:0b:53:43:08:5e:a1:79:df:
f2:5f:67:00:e9:9d:ee:d1:c6:3a:ff:b5:0c:2e:27:
9e:c4:47:67:32:f4:08:1d:b9:d6:c3:75:b3:a2:ca:
73:03:20:aa:ed:ac:46:3a:63:3d:1d:bc:ba:1a:bd:
f1:ac:32:5a:ad:dd:97:5a:a4:ad:38:a7:0d:cc:60:
e7:ab:be:3c:7f:84:a5:5b:97:8d:ff:1f:b9:0e:09:
0c:35:30:53:1d:64:a1:d3:06:9e:e9:5a:af:8c:c0:
e4:1f:2c:f6:c1:1a:35:36:a3:bd:ca:80:23:84:9c:
fe:fe:45:7f:6c:c9:8d:89:3e:c0:4c:ff:1b:9f:16:
aa:57:1c:0f:3c:e9:f8:3e:c2:86:a1:fa:37:6b:71:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:C2:AD:F4:D1:B6:F2:2E:84:54:92:54:FB:CA:31:A0:D6:F6:77
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ab:ff:ee:0f:73:55:fc:e1:33:4f:00:bd:d9:fa:38:cb:22:
d7:e9:41:82:8f:d0:37:4e:69:1a:1a:db:be:2c:4a:de:e9:f6:
bf:49:df:41:d4:1c:fd:b3:75:8a:57:11:c6:19:98:68:62:3f:
4b:e7:77:ee:47:0c:e2:47:f6:a3:15:fa:a2:db:1d:0b:14:99:
1f:d1:d7:e8:e8:93:21:ae:6e:ab:71:57:02:76:98:17:3c:13:
cf:63:4c:2c:ad:c2:94:cc:40:e4:2e:84:bc:e9:dc:0f:c8:81:
a6:20:f6:3a:81:f3:44:0f:8c:71:04:88:51:1f:82:4b:0a:8d:
8d:52:0e:6e:cd:65:d5:1f:17:4f:3e:c8:28:a9:58:7a:0f:f3:
af:86:a6:13:5b:cd:9e:85:d8:f1:7c:c3:9a:6f:d7:cd:46:b1:
44:e4:c6:05:97:64:7a:1f:f3:dc:64:ad:dd:b8:96:88:51:ac:
62:73:8e:28:9c:c1:3b:77:03:ee:99:61:d9:23:60:5c:d6:00:
46:23:f5:8c:e6:fc:2a:ad:01:e8:36:d9:18:e3:dd:c4:55:6c:
43:a0:13:02:11:03:5c:46:3b:71:96:d5:5e:11:ac:ea:a9:c8:
99:11:e2:29:73:a7:1d:14:27:b5:9a:09:53:83:55:78:5d:0e:
2a:fc:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:58 2026 by rpki-client