Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: 8WwELSF9XGJkq1/3xDKm80Ki6LqCF9jX+HjO8S6bsTU=
Subject key identifier: 19:40:9F:E1:AC:4C:C3:CC:42:00:25:D9:0D:B9:32:FF:DE:66:46:17
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019F916D981C1FE568729D694A18BD004323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 00:01:46 +0000
Manifest this update: Fri 24 Jul 2026 00:01:46 +0000
Manifest next update: Sat 25 Jul 2026 00:01:46 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: 6JZSsdCnfqbSQh9wxLKlcWSGGDYODql1YOSmGlb75vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:98:1c:1f:e5:68:72:9d:69:4a:18:bd:00:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jul 24 00:01:46 2026 GMT
Not After : Jul 25 00:01:46 2026 GMT
Subject: CN=19409fe1ac4cc3cc420025d90db932ffde664617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:12:e9:4e:3c:cd:e1:7b:f4:a9:34:15:93:
b9:5e:fb:54:1d:d4:a2:27:47:ed:a1:00:3d:cc:3e:
0f:0b:96:5a:3a:ca:8c:59:01:fd:d5:01:81:cb:3d:
05:95:fe:41:98:c4:d7:c5:16:58:1b:09:74:52:ca:
1e:07:1c:e7:9b:1f:0d:3f:8a:87:25:11:fd:2a:91:
d2:1c:b5:17:79:1f:b4:f1:c6:66:45:2e:6a:cf:c5:
79:fc:b4:11:2a:25:c3:a8:6f:a9:2b:e2:e2:84:3b:
99:f0:ea:44:15:a5:52:f5:15:8f:65:c4:e1:0a:c8:
04:e1:6b:e6:7d:ca:66:ab:e9:ca:d5:2b:49:65:a2:
8c:8e:dc:4b:17:86:78:70:4f:50:b7:cf:4a:72:5e:
7e:31:49:d8:7c:69:cc:41:ac:0f:03:fe:ca:ee:69:
94:3d:a0:15:af:06:9c:2e:4a:e9:20:34:2a:eb:22:
65:9c:5a:17:5a:8e:90:ab:38:b1:4f:e2:24:77:66:
50:1b:19:a2:75:31:5d:03:e8:12:ba:f1:ca:29:3d:
9c:f2:1e:43:f4:2e:60:2a:bc:a7:ec:b5:70:8e:69:
4c:5e:54:81:f7:8e:d8:4d:0d:25:44:df:43:d4:cf:
d0:9f:de:de:df:65:66:34:39:b5:45:f5:f0:df:f5:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:9F:E1:AC:4C:C3:CC:42:00:25:D9:0D:B9:32:FF:DE:66:46:17
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:b0:91:fc:23:9a:4e:92:46:d6:69:cb:70:c4:ba:60:d5:
7b:e3:7e:1e:c4:07:bc:61:64:ea:e7:18:59:e7:4a:46:11:a4:
32:b9:1a:09:e6:e8:fa:1c:57:88:ac:55:87:71:83:32:a2:2c:
7b:44:47:e0:64:91:13:0f:d3:dd:63:88:29:71:0c:28:5f:6e:
df:ae:85:56:ea:d5:14:ac:90:f1:f0:48:e0:5f:27:d2:3c:49:
30:76:0f:24:05:14:91:cc:cc:ed:b7:e6:e4:c6:8b:24:31:61:
db:47:33:df:4b:ef:74:be:a1:99:6d:52:ca:d9:c2:f5:dd:4f:
da:20:08:3d:bb:a0:96:21:94:f3:24:65:02:12:56:df:7e:79:
22:97:ce:ca:0c:7c:e9:d6:d1:02:e0:94:1d:4a:81:0b:44:d3:
a9:66:8a:7f:d1:bd:49:70:52:e5:0d:af:f5:c7:f3:70:16:e8:
2d:31:f0:4e:7b:e8:92:5c:7b:14:c1:5a:b0:5a:62:05:d6:1e:
c4:fc:a5:5c:20:d0:c1:c1:9f:5a:c6:c6:36:83:19:80:fa:be:
4b:5f:c0:f1:86:b4:d3:d7:2c:26:91:1a:82:0c:f5:03:76:0a:
2f:af:f0:fc:80:a6:c9:ee:d5:7b:48:d0:43:ff:ac:a0:83:03:
25:e6:c5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:41 2026 by rpki-client