Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: y2hAJzzDSN/y1cm32U0TDlq5pOzMoY5fLSWLockcsb0=
Subject key identifier: 9A:9F:0F:CB:DE:57:5C:5E:67:18:EA:56:E3:A3:58:A6:25:4A:23:9F
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 019F8F1058ED9F1B62254FA32EE4FBBF4667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1834
Signing time: Thu 23 Jul 2026 13:00:40 +0000
Manifest this update: Thu 23 Jul 2026 13:00:40 +0000
Manifest next update: Fri 24 Jul 2026 13:00:40 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: w4Hs0oBzadgHtVoxgXx+s+yjq8MH7ugzg+XsS2r+OeU=)
2: 2O8krpss1XUBhd1z1aphhjRg5kI.roa (hash: y4ACY414P23FTUASLCD5rS3epsK/nudRTUHUj5PRHCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:58:ed:9f:1b:62:25:4f:a3:2e:e4:fb:bf:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Jul 23 13:00:40 2026 GMT
Not After : Jul 24 13:00:40 2026 GMT
Subject: CN=9a9f0fcbde575c5e6718ea56e3a358a6254a239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:fa:de:4a:0c:7c:10:5d:22:c7:39:98:2e:
34:5e:27:2c:d6:dd:e4:aa:ce:84:85:35:24:e0:d6:
ea:e0:a3:20:38:92:46:b3:a3:40:ec:ad:6e:11:25:
2c:fd:22:ca:14:bd:55:b0:d5:5b:d1:25:2e:b8:a0:
93:e7:2e:7a:83:df:e4:2b:d9:1a:1b:bd:0a:22:d2:
95:ff:53:1c:77:b2:30:25:8e:ef:bd:29:ee:6d:aa:
4e:8c:f9:33:c1:8c:2f:10:28:64:40:60:aa:a7:c8:
b1:b0:c5:62:9d:0d:89:4c:31:b7:a7:09:22:53:2f:
42:e3:ac:30:63:38:16:13:ce:62:28:83:2a:0b:c4:
a6:4f:c7:1e:13:1b:a7:6e:55:cc:6a:57:8d:2e:f5:
91:fe:69:af:0f:14:1a:f0:75:5b:d1:88:6d:8c:28:
a5:0c:b7:74:7a:80:87:e2:b1:a8:1d:ec:9f:5b:88:
45:dc:51:25:f6:6a:22:de:f4:79:fa:e9:ab:4c:b3:
c6:45:1f:42:39:b2:0d:7c:65:8d:a2:72:ff:f1:46:
e1:a7:80:28:29:34:c9:d0:59:0f:1b:c6:72:fa:59:
43:aa:c8:24:6d:98:f6:fc:ee:21:b0:2e:7d:c8:cc:
9d:ba:de:32:55:d3:28:1c:f1:97:55:27:97:ce:21:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:0F:CB:DE:57:5C:5E:67:18:EA:56:E3:A3:58:A6:25:4A:23:9F
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c6:0e:ce:7f:70:41:e9:5a:d5:21:b5:9a:72:65:3c:f6:0a:
49:51:02:f0:cf:d1:2a:6a:71:f8:61:10:c1:3f:14:cd:72:26:
7e:7c:be:96:81:02:bc:45:92:38:c3:0e:d0:ad:f2:e3:cb:75:
23:3a:2e:00:59:c9:35:18:22:91:83:f5:7f:d6:ea:e2:ed:9b:
53:ac:30:be:94:4f:d3:02:5a:f6:12:37:f6:8f:cd:23:0d:cc:
dc:1b:76:70:43:82:f9:16:4e:79:6b:ae:28:7c:e1:80:6c:5a:
3c:ee:dc:d1:45:35:c0:cd:58:27:e6:d9:22:2b:07:c8:fe:45:
ac:d2:5c:36:96:e5:2b:08:7f:36:9b:1c:f6:48:2c:81:41:bb:
76:4f:42:8b:e9:86:a0:4c:e2:bc:e6:46:bc:8f:4f:86:6f:6e:
d8:e0:68:cc:cc:6a:ed:19:e3:77:3d:da:3c:02:ba:ad:c6:7a:
9a:c2:74:ba:89:be:4c:a8:a0:78:0a:dc:14:54:92:97:14:8d:
5c:d4:67:f5:c3:23:5b:9e:b8:e7:d7:c2:76:fa:83:17:5c:f6:
ac:d0:77:37:52:b0:af:db:95:b2:8c:cb:14:b7:c0:35:85:2a:
b7:6c:7d:18:55:d3:72:08:04:3f:3e:7b:3b:fc:fb:0a:1d:2a:
e2:6c:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:07 2026 by rpki-client