Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: 45zro5egGXvcL5I3yig1ZHvAU86prFbu/EWZhvVbhfY=
Subject key identifier: AC:9C:F0:4A:5B:C2:72:CE:E2:C7:30:DC:CF:26:94:BD:BA:FF:72:59
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019F8F7EA027E64CF9B7514A75060EE937B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 07F6
Signing time: Thu 23 Jul 2026 15:01:08 +0000
Manifest this update: Thu 23 Jul 2026 15:01:08 +0000
Manifest next update: Fri 24 Jul 2026 15:01:08 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: aiX3QHIFWdC/u1GpIFc17PqKv1u4Mw1rM+6ek7kpj+I=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a0:27:e6:4c:f9:b7:51:4a:75:06:0e:e9:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Jul 23 15:01:08 2026 GMT
Not After : Jul 24 15:01:08 2026 GMT
Subject: CN=ac9cf04a5bc272cee2c730dccf2694bdbaff7259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:d8:62:35:95:95:e2:50:4e:4a:b5:45:5d:
20:47:3a:41:60:67:d2:d0:e6:ca:cc:f5:64:fa:d9:
27:32:14:37:63:90:da:c3:20:2a:23:1c:46:0b:31:
e5:aa:e5:d5:95:67:76:fe:17:74:bf:3d:45:f7:25:
4f:fa:a3:2c:2a:cd:bb:b6:b4:53:dd:ba:60:7b:26:
97:a3:5a:c9:c2:67:d3:fe:63:b3:03:a9:d8:cd:a7:
07:e5:cc:6a:51:ee:0c:0b:64:44:89:7e:1b:01:d5:
05:58:2e:40:95:5e:03:e5:82:f4:f4:1f:b6:e3:15:
af:f1:fd:de:a7:e1:28:c9:bd:ae:2f:f8:b7:1c:4c:
58:d2:65:be:ed:57:98:cb:24:53:ad:c3:bf:70:e8:
ce:76:6c:56:1d:96:e5:57:ea:6e:4a:fb:e5:b9:2b:
8f:1c:65:23:19:65:5f:0c:f0:16:f5:32:9a:a0:f8:
4d:36:3f:3d:79:04:a4:70:24:c5:ce:ca:50:18:c9:
77:8f:fb:a2:50:70:6a:36:60:d8:97:4c:3d:4e:45:
75:2a:cb:32:50:b1:d6:26:72:5d:67:94:5f:01:d8:
97:76:83:0c:b3:e3:c0:04:17:32:ea:a9:8f:84:b3:
30:df:64:c8:6b:8e:f7:6f:07:f3:01:47:ee:ce:0e:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:F0:4A:5B:C2:72:CE:E2:C7:30:DC:CF:26:94:BD:BA:FF:72:59
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4a:13:80:fc:47:47:3d:0f:a9:8c:5c:3d:4b:e4:93:03:06:
5a:dd:e7:a7:19:b4:3a:b9:4d:bd:47:19:e0:61:01:22:28:3b:
e6:86:41:15:4a:8a:da:81:6c:32:be:0a:12:a9:36:89:88:46:
0a:95:e5:58:7a:f2:c4:87:eb:37:88:1e:a4:2f:a8:56:74:7a:
29:0c:d9:99:41:52:fe:51:58:3d:e3:79:0a:f5:eb:21:df:3f:
f8:aa:32:7d:0c:84:a4:eb:0a:0d:c9:a0:ba:07:35:a5:75:c3:
95:22:50:3c:a3:45:e8:45:78:6f:ee:d6:e7:78:54:7d:8f:3c:
27:c4:53:67:f3:5d:ec:80:e6:f9:1a:b1:a9:fd:e2:13:8c:d1:
2b:8d:b4:88:25:6f:c6:65:26:b2:41:7e:c9:9e:c7:31:4f:35:
fa:e2:0c:8d:1a:fa:7b:62:ea:ea:a1:cb:ea:46:19:a1:e8:c4:
ad:f7:2e:9a:a8:c3:d0:d0:cc:0d:44:78:d8:20:bc:4b:5a:4b:
f7:a4:0d:27:ee:f5:1c:f0:78:28:31:6c:79:38:74:fa:a6:c9:
c3:00:14:bf:7a:4c:fb:9a:6a:7f:5a:e8:ea:06:27:be:f5:e6:
54:3b:b3:a8:c6:f3:a6:87:82:fd:18:d6:af:b1:39:c1:8c:3e:
d6:ea:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:54 2026 by rpki-client