Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: 9iv9eH4QhJY1IhJUc3Bg6ZvASglb7uZLhEJNFxsefJ8=
Subject key identifier: 4F:FE:BD:9E:1D:8C:87:8C:E9:41:44:23:9C:58:C4:FC:CB:60:FF:35
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019F8F472BBB271A88921E2EC0F5D82274F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 14:00:33 +0000
Manifest this update: Thu 23 Jul 2026 14:00:33 +0000
Manifest next update: Fri 24 Jul 2026 14:00:33 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: qxhUDxRFmI8IScpNspfPB9m9ALpePJJ+8VCIZijI0HA=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:2b:bb:27:1a:88:92:1e:2e:c0:f5:d8:22:74:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Jul 23 14:00:33 2026 GMT
Not After : Jul 24 14:00:33 2026 GMT
Subject: CN=4ffebd9e1d8c878ce94144239c58c4fccb60ff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:6a:72:0c:6c:6e:bf:32:35:21:8a:11:94:
54:3d:12:9d:a3:02:68:c9:a5:39:97:52:7b:20:b0:
6d:a3:20:32:73:0c:dc:a3:72:98:5d:5d:26:a7:e5:
e8:69:dc:7b:b2:ec:67:6f:41:93:f2:db:22:dc:18:
85:9b:e4:4c:2c:0a:a6:4c:be:64:44:50:42:25:20:
45:b0:e0:ae:a6:3d:06:f5:1b:99:11:0f:17:37:7d:
b4:eb:6b:61:a2:55:d3:79:2f:2f:a2:0e:2f:dc:72:
8f:91:14:97:df:ea:f4:df:79:6b:6d:b8:e4:e0:1d:
1d:54:a6:98:c5:73:ce:63:0e:93:30:10:7a:93:87:
81:b1:ad:51:ce:ab:cf:82:66:89:bb:90:a3:55:36:
02:86:b7:c9:4e:31:97:14:47:69:36:f2:ab:9b:b3:
ce:8b:91:d1:5c:bd:ff:5e:c6:e8:87:b3:bd:ba:d9:
b6:81:9d:9f:74:5c:36:97:fc:ce:8b:7c:ea:94:52:
aa:4d:9f:81:32:08:03:13:af:92:17:7f:64:8d:80:
91:4a:4c:42:d6:f4:78:04:82:a2:7c:89:59:e7:14:
81:ed:ab:2e:1b:f0:7a:12:c1:6d:28:14:78:f0:a6:
f1:b8:9f:99:fb:29:0f:da:2a:4e:cc:ca:15:44:74:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:BD:9E:1D:8C:87:8C:E9:41:44:23:9C:58:C4:FC:CB:60:FF:35
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:21:89:43:23:f0:00:50:6e:7d:a2:b6:2b:0d:bb:9d:55:
47:17:19:c8:a4:11:a3:46:d5:0a:62:99:19:41:2c:8d:ce:ec:
cf:ea:72:ce:d8:6f:b7:fc:6e:0d:0d:5a:0d:0e:e9:e3:7f:e1:
08:9f:da:ee:92:99:c8:b0:66:72:76:fa:0b:a2:1a:d4:c3:58:
50:0e:fc:a9:47:8a:9f:b1:74:2b:40:d5:c5:54:65:46:17:3f:
45:c0:0a:d7:27:44:f3:f2:0e:59:e7:bf:5f:67:fb:79:d6:1e:
98:f3:81:c7:3e:3c:88:ff:d5:69:65:18:1b:82:7f:41:a4:43:
93:fb:03:fd:0a:56:1f:2f:5b:89:3b:5a:6d:fa:2b:d6:07:62:
7f:24:72:74:46:f2:bc:e4:65:b5:ae:71:6d:be:8c:09:26:fa:
1f:99:d6:42:00:31:78:1c:8d:bb:5e:29:e8:aa:80:bc:21:65:
08:0f:44:fa:22:25:e8:b4:2e:72:8c:3d:9a:0f:13:93:0f:07:
d0:53:23:fe:98:24:d1:54:86:40:fc:fa:79:56:db:75:92:ea:
70:e4:46:22:4f:0b:b6:5b:67:9a:65:32:bf:02:d1:bb:18:db:
8d:7c:aa:02:20:18:bb:e2:84:43:6b:3c:37:00:c8:fa:d2:09:
90:6d:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:51 2026 by rpki-client