Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: cMN5Au1Zw8/Rzp9PWGrXfJ1ZncaCJIemUVqFA4KdYvs=
Subject key identifier: 3E:5E:40:BC:63:55:02:03:BD:B0:45:E1:B9:56:F2:27:D6:A2:EF:25
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019F90234B7A181738E399D23879EB4FABE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 18:00:59 +0000
Manifest this update: Thu 23 Jul 2026 18:00:59 +0000
Manifest next update: Fri 24 Jul 2026 18:00:59 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: Pb7eBJBhKViHUDDXkFy/iWefHVto3FdzHUv6ojjV2Is=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:4b:7a:18:17:38:e3:99:d2:38:79:eb:4f:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jul 23 18:00:59 2026 GMT
Not After : Jul 24 18:00:59 2026 GMT
Subject: CN=3e5e40bc63550203bdb045e1b956f227d6a2ef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:a5:a8:74:85:f0:53:cb:b8:98:95:d3:04:
67:a6:77:84:a0:88:6d:20:a4:d3:e3:c8:57:37:5e:
7b:bd:ff:3b:38:11:1c:f1:59:44:6b:2f:6b:27:17:
83:2b:61:4a:be:b6:2d:79:04:7e:35:24:ce:2a:3a:
e4:9c:c1:2d:25:f6:60:34:fa:16:ee:2e:f9:b8:84:
ca:b3:19:a3:52:9a:dd:ff:f7:65:38:df:33:e0:8a:
90:07:ef:ec:a3:38:73:88:30:80:1d:56:71:7e:9d:
67:b4:7c:1f:76:a1:55:c5:ae:1f:47:c5:c6:7a:5b:
98:4b:4d:60:c8:2c:b2:77:9b:60:ae:67:1b:83:9f:
8a:0f:92:7a:0a:41:a3:29:45:09:6e:30:25:b2:bf:
50:a3:84:01:e0:22:37:b4:67:52:01:bc:bf:f9:0f:
29:28:e2:91:4d:d3:9a:34:78:a3:47:50:8e:21:72:
03:b1:63:03:5b:b1:2f:e4:e1:a7:d2:a5:3c:03:d1:
bb:62:8d:87:38:67:95:aa:97:56:a2:2b:bc:25:8c:
6d:c0:65:c5:d5:c7:4b:a0:aa:9f:d3:31:ae:7d:0f:
63:c8:e4:e9:da:6c:13:84:44:7a:5a:99:8b:1a:cf:
7d:36:09:30:db:91:1f:7e:a8:7d:3a:36:80:2a:ef:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:40:BC:63:55:02:03:BD:B0:45:E1:B9:56:F2:27:D6:A2:EF:25
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7f:df:79:63:50:b5:c0:89:3b:40:5f:59:52:4e:c6:f2:8d:
e0:aa:75:2f:d0:8c:fb:fe:60:f9:bf:c6:ab:8c:97:93:c6:ca:
2a:96:33:b2:25:e4:da:0c:ac:02:e2:53:d4:fc:e1:5f:63:ae:
a1:6a:73:3c:47:25:32:fa:ce:9b:33:db:d1:6e:63:49:4f:93:
54:07:6e:47:03:20:78:73:b8:0c:e3:5c:3e:f7:c7:c0:45:80:
b8:c9:46:4a:80:5a:ab:d7:27:3e:15:39:18:e6:4d:19:ad:b9:
f6:4c:43:6f:bc:f2:18:29:c1:1d:76:c4:fe:cb:2f:c4:71:8d:
65:d1:e5:63:b0:d0:37:a6:05:d8:6c:6b:96:54:a2:c6:0b:00:
47:ed:6d:cd:67:9f:b7:9c:35:fb:c0:89:ae:08:78:68:9b:8a:
bf:17:e7:fa:21:d5:4e:b2:83:7d:52:dc:3f:3a:d5:8b:a5:d3:
ec:de:e3:ff:22:07:c0:e3:9e:20:3a:77:9f:e8:53:7c:0d:e1:
23:54:11:88:66:96:2f:c2:ec:bf:32:d7:52:47:bb:24:43:a4:
f6:d8:33:a9:e1:1c:71:13:f1:36:b6:38:a7:71:10:ef:e5:92:
aa:d3:0e:6f:9a:23:ff:f5:53:2f:7c:4e:1d:5f:a9:f1:67:07:
ca:8d:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:54 2026 by rpki-client