Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: iDb8Fo49ffCv9PSuVFkezJIzu0KLYtWBxE7JgYanKRI=
Subject key identifier: 02:80:F6:49:36:0C:6C:84:10:48:EC:5F:B5:77:0D:CF:37:78:3C:06
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 019F93240DD7AD13BCAF1B3E4A84DD2F1F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 08:00:41 +0000
Manifest this update: Fri 24 Jul 2026 08:00:41 +0000
Manifest next update: Sat 25 Jul 2026 08:00:41 +0000
Files and hashes: 1: 0_t2wQIokLKY2kmf_7_jfNZXtiY.roa (hash: TGSr63wO3aGHJ7YGz4t10QGo266PAEIyzVMQYeVtap4=)
2: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: yvoivJsG+3hszNfJj1YEPsGZ9AdgsxbWMTuYkXDjqgk=)
3: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (hash: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc=)
4: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (hash: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg=)
5: MJUSGXNaON5-u4HtTmGH6ZtrgHA.roa (hash: NNdIzpFlr2gfckuz7+ZEQiokzWnQGJIcuKaYbw6MC/U=)
6: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (hash: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY=)
7: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (hash: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938=)
8: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (hash: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:0d:d7:ad:13:bc:af:1b:3e:4a:84:dd:2f:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jul 24 08:00:41 2026 GMT
Not After : Jul 25 08:00:41 2026 GMT
Subject: CN=0280f649360c6c841048ec5fb5770dcf37783c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:d5:d5:ed:1d:cb:19:51:74:91:7d:56:66:
9c:89:eb:a4:54:99:83:99:f8:1b:0f:f6:67:3f:8c:
0e:2e:eb:1f:a2:fb:41:64:8e:fc:99:3c:53:00:06:
0d:0c:52:5b:48:12:90:0e:9d:88:cb:f6:b4:8a:ee:
47:ad:6c:2e:8c:09:e4:f6:56:8b:79:28:db:01:48:
79:e7:cd:e3:85:ef:16:41:02:fe:a1:51:20:39:d7:
0a:bf:19:db:64:14:68:ff:9e:07:ab:41:f5:d7:59:
26:46:9e:c7:32:0d:b2:58:3b:62:15:73:ca:23:7a:
02:1c:10:51:11:95:98:8b:12:a6:84:4e:22:c4:d6:
f6:f2:fb:5c:a7:d5:49:86:5d:53:c4:c6:49:f4:d0:
93:8d:3a:ee:79:f2:41:da:f7:f3:84:97:e6:3f:f5:
9f:75:8f:a7:71:3e:ee:d7:8a:be:f0:09:3e:a6:2d:
93:24:9a:5a:a6:55:1f:6c:0f:8f:49:31:f7:0e:52:
b0:a2:da:c6:bf:85:19:c5:64:d9:52:21:47:eb:27:
bb:31:05:4f:3e:08:2d:ff:53:5e:b5:f5:d1:dd:28:
b9:31:4c:55:d5:39:3a:db:b6:59:f5:94:d8:fb:ff:
4c:cc:93:bb:79:37:f9:a7:dd:d9:bd:70:ed:8c:50:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:F6:49:36:0C:6C:84:10:48:EC:5F:B5:77:0D:CF:37:78:3C:06
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6b:2b:d5:90:16:1c:a2:92:aa:31:09:8e:9c:6b:e5:44:63:
2a:8d:98:be:8b:3b:df:c2:2f:92:45:ae:2f:f1:28:70:fd:17:
7b:56:33:35:6e:7c:94:8a:94:de:b3:46:2e:32:a1:a5:e2:bc:
c2:e0:06:9b:05:58:83:24:32:d9:61:d7:47:2d:b3:ac:41:e0:
c6:a6:b9:a0:86:69:18:7b:fa:59:75:a4:39:86:3d:a7:42:cb:
78:16:62:80:d1:58:aa:f6:68:f7:ad:e3:f4:0e:49:74:91:52:
b0:25:d4:f7:9a:b0:dc:4f:1e:fd:a3:19:04:c4:80:d7:be:8b:
36:86:af:6e:08:51:10:a7:cb:64:5c:9c:05:28:fd:58:21:31:
a0:76:06:e4:cc:ba:34:d6:a8:42:c3:6a:69:d5:4c:72:a6:c9:
1d:18:9d:7b:e9:88:19:ab:77:bf:ee:66:68:02:e6:a1:32:67:
4d:81:31:ce:bb:da:68:ba:76:20:d5:31:98:12:eb:06:b2:7f:
66:40:70:09:4a:f1:3b:f8:8d:f8:ed:97:9e:d9:5b:aa:f8:e7:
65:0b:b0:14:6c:42:db:b0:75:f3:1e:a0:14:00:55:f2:be:a9:
47:c0:24:d8:ad:12:21:a6:be:32:da:54:83:04:b0:34:1c:f9:
ff:30:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:15 2026 by rpki-client