Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: UBY9wTRzCAd5D94LAZGSf/N3/vfHgKxppP5aG89eVTs=
Subject key identifier: 29:F5:72:3E:D0:EB:9C:DF:29:33:95:AC:B7:2D:06:60:78:46:6A:76
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 019F8FB51E2BFC4BA7B41429E561A4B90725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 16:00:39 +0000
Manifest this update: Thu 23 Jul 2026 16:00:39 +0000
Manifest next update: Fri 24 Jul 2026 16:00:39 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: M0r8jihFgRXEDJLjpn2y7rauFvL/7+pRAePLLX4pSXk=)
2: 3OShaLp1tgG0w6F8SnVFUGGGJJU.roa (hash: 6F9cP81CAB2z6kxGDavpoTqFUUII+JeGSAu6vLBGSQA=)
3: aSq4kwpisiyPqp-dHXzcfCq_VbE.roa (hash: W/mYGGv/Jtea8oXyonioU+JGGz0ezZ8tWqj2IvUsfjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:1e:2b:fc:4b:a7:b4:14:29:e5:61:a4:b9:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Jul 23 16:00:39 2026 GMT
Not After : Jul 24 16:00:39 2026 GMT
Subject: CN=29f5723ed0eb9cdf293395acb72d066078466a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:0c:b4:ce:04:8e:87:9f:0b:97:b9:cd:d1:
c6:64:d2:20:e6:fa:1f:29:e4:d9:16:81:ac:e3:d0:
e2:d4:0c:ab:1b:0a:c6:68:9d:6d:fe:67:73:4e:53:
39:fa:f4:66:48:2f:e6:97:c1:40:4e:4c:97:de:5e:
a1:7e:3d:b3:68:86:10:70:41:23:2c:78:f0:2e:e7:
c7:74:1b:50:2d:5c:0f:af:a0:cb:16:5d:4a:03:4b:
b4:cb:a4:14:9c:d9:03:58:56:7c:cc:34:ae:27:30:
e9:e4:4d:62:5a:fe:d8:8d:19:c5:34:50:7c:ec:46:
87:5c:ad:dd:22:f9:9e:11:27:f2:4e:c9:89:47:34:
aa:f1:ae:33:11:5c:83:26:7e:0a:ac:ed:61:52:89:
60:ce:c0:f3:b9:2e:f6:e6:7a:9a:b9:b3:38:bb:01:
d1:fb:64:ba:7a:e9:08:23:0f:f9:96:0d:60:b1:e5:
fe:de:da:62:68:dc:d8:10:13:de:85:c4:36:b1:17:
c9:90:74:e0:ae:79:58:34:3c:fd:08:2e:1e:54:9a:
72:59:da:b9:6b:27:4f:49:0a:7d:9b:66:68:bc:29:
25:71:9d:29:fa:cc:2c:8b:9c:0a:3c:45:03:e0:53:
36:78:8e:85:44:a4:82:fa:d4:34:b2:ed:c9:47:53:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:72:3E:D0:EB:9C:DF:29:33:95:AC:B7:2D:06:60:78:46:6A:76
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:2e:f1:50:d6:c4:4a:29:1c:00:1b:27:e2:12:8c:40:a4:
c6:c4:5d:bb:9c:7c:f0:c9:7d:77:7e:8b:b1:88:da:b3:7c:e7:
57:82:2f:42:45:4d:f0:c9:b5:bc:10:05:98:bb:31:93:ab:95:
1a:f0:d7:9c:15:45:cb:61:63:12:6a:02:22:c4:50:56:18:0f:
45:b5:62:0e:77:ac:ca:cc:e6:c3:ec:a6:48:50:74:b0:8a:ad:
d7:e0:4d:9b:9a:90:62:b8:1a:da:61:2a:ed:58:67:36:e5:c9:
55:bd:f2:16:08:37:15:19:50:55:9c:25:fd:92:90:2d:e0:53:
4a:2d:3e:1b:71:0c:78:64:cd:ff:7e:74:c4:8a:1b:e4:d5:ab:
b6:cd:4b:b9:c0:45:39:71:3f:43:f4:6c:71:6a:9c:f9:a6:7c:
94:92:8d:d8:c5:8f:c9:f9:97:ca:5f:7b:04:62:ce:d4:d2:cf:
04:47:fa:83:ae:e3:c1:7d:47:4d:75:9b:c8:f4:f0:c9:a7:c2:
c8:60:34:f7:91:6a:23:53:97:06:12:b9:b3:46:17:65:19:ed:
f5:c4:8d:71:67:a3:cf:23:8d:cd:33:e5:5a:2c:02:78:c0:ef:
bd:26:33:46:f0:6c:bd:21:52:c9:99:49:6e:cf:72:86:41:dc:
7f:df:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:18 2026 by rpki-client