Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: pKUgqNDZ9qnvSK5Bwx6zHEyu7/w+wI5XUtP6y1fi6Tk=
Subject key identifier: 1F:65:41:2B:78:3E:9E:96:BB:C9:11:C6:67:44:D5:98:F8:B0:83:45
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019F90FEBB194AAFFD24900CF4A8AC6D6FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 19D3
Signing time: Thu 23 Jul 2026 22:00:40 +0000
Manifest this update: Thu 23 Jul 2026 22:00:40 +0000
Manifest next update: Fri 24 Jul 2026 22:00:40 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: 7XCJKJ4RbDXQYs3am0AJNfPzH8R2xHA7r76WiWde3jw=)
2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:bb:19:4a:af:fd:24:90:0c:f4:a8:ac:6d:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jul 23 22:00:40 2026 GMT
Not After : Jul 24 22:00:40 2026 GMT
Subject: CN=1f65412b783e9e96bbc911c66744d598f8b08345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:4b:f8:8f:c8:50:27:ff:a6:3b:d1:da:b3:
ee:e1:87:8f:d6:31:b0:6e:2b:ef:a9:e6:a8:00:62:
bc:0c:14:a8:78:d3:56:0c:b0:d2:b0:9f:57:b0:be:
05:a2:16:5e:4a:ec:0c:c0:df:21:bb:d1:21:29:95:
6a:59:1e:77:f8:28:dc:7c:98:a6:ed:73:34:cc:ce:
6b:eb:cc:83:4a:61:b3:30:05:de:ff:23:97:0c:ca:
20:33:c3:d4:2f:38:c2:e1:ac:42:fc:f1:3d:6a:a7:
37:44:b6:3d:0f:18:37:85:43:ef:00:fb:dc:5f:97:
16:08:de:08:38:90:d6:ab:6c:57:02:10:ca:86:df:
13:21:09:9a:34:c3:0e:f0:2a:88:43:72:05:f1:92:
10:38:11:83:7e:96:8e:2b:9e:bf:91:ba:29:43:ec:
60:16:77:1a:8f:54:ee:45:2d:a2:71:5b:b4:69:30:
56:3b:05:85:e6:8c:63:e9:3c:3e:6d:d4:29:ff:44:
61:ed:2e:3d:60:02:56:ac:f9:ba:30:57:c5:e8:1f:
8f:bb:73:4c:ab:77:83:78:9e:d3:dc:40:64:c7:40:
54:f0:0f:0d:1b:79:7b:23:8f:2d:72:bf:09:69:75:
69:2b:c3:0e:7b:79:60:b5:b9:a6:92:f1:6f:60:c5:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:41:2B:78:3E:9E:96:BB:C9:11:C6:67:44:D5:98:F8:B0:83:45
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:ff:79:64:1e:0d:b6:df:5c:67:63:b1:1b:4b:b2:3b:56:
e3:79:86:bd:03:4b:15:99:a4:54:e6:a4:95:dc:6c:c5:30:0d:
94:c4:ca:6f:10:e4:55:60:11:c0:81:92:aa:06:b3:d0:65:84:
ce:e4:a9:e5:b8:d3:55:e3:ba:49:07:70:33:0d:81:43:5e:1b:
56:65:69:26:4d:11:38:64:88:fa:66:b8:45:a9:3a:b6:c1:a3:
48:60:71:2b:79:59:2d:bc:e5:b1:b7:04:44:26:6c:b5:1b:49:
34:e7:03:df:c8:ec:e9:98:4f:3d:a7:e5:21:c8:cb:04:85:93:
62:7a:59:c9:c4:75:83:f3:df:8d:89:cf:4a:07:c0:ca:23:54:
d8:b6:9f:4a:f5:37:dc:29:64:c5:d0:16:d9:4b:e6:0a:f2:06:
3d:5a:f0:24:6c:81:a1:8d:1c:f4:c5:86:62:8d:ac:7c:81:d9:
6d:62:91:c4:26:60:ff:21:1d:2d:f0:12:d5:33:e1:e0:95:68:
b7:19:dd:80:57:25:d8:83:b3:85:a3:39:75:e2:55:27:65:99:
2e:bb:3c:78:8e:e0:db:f9:97:f4:d3:a7:65:c9:38:ba:e7:f4:
d6:ca:67:d3:1c:c7:d1:fc:31:da:8b:0a:78:49:dc:de:cf:49:
b0:f0:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:47 2026 by rpki-client