Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier: shXPaqEbYhAmoEZfDnhoIjwWCQTHqlOwgToGFXhN8FU=
Subject key identifier: 0B:F1:F3:16:84:16:88:76:87:1A:92:CB:16:62:D6:1E:94:1D:38:DC
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial: 019F90598DF43FC6BC0A08897F99827E5223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 19:00:15 +0000
Manifest this update: Thu 23 Jul 2026 19:00:15 +0000
Manifest next update: Fri 24 Jul 2026 19:00:15 +0000
Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: af5tA16JjQXyQd3ZsIMEsbY8SlIv8J090qyQAboUPB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:8d:f4:3f:c6:bc:0a:08:89:7f:99:82:7e:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
Validity
Not Before: Jul 23 19:00:15 2026 GMT
Not After : Jul 24 19:00:15 2026 GMT
Subject: CN=0bf1f31684168876871a92cb1662d61e941d38dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:d4:ff:8d:f7:01:eb:89:ea:0d:e7:f8:9d:
00:dc:d1:64:99:21:a1:aa:5d:46:d1:f5:c6:4b:96:
f6:7b:8a:a3:67:a4:aa:70:90:f4:92:7b:5d:7b:f3:
9c:45:0c:8a:59:f5:27:e0:b5:25:ad:e2:dc:04:1b:
3e:47:77:71:c3:ef:08:91:75:5e:6c:56:44:8c:0b:
82:cb:bd:9c:3c:04:9e:7b:92:28:1b:9a:6c:bf:7b:
a3:10:52:3a:6b:35:b4:d7:c6:01:af:80:4a:10:33:
5a:2f:be:8e:e2:9d:83:41:7f:c2:0e:94:f4:20:29:
7f:f0:59:8d:af:b0:9a:90:d3:1c:8b:be:bc:83:4b:
ae:a5:1b:0f:4d:f2:e4:7b:2f:3e:eb:e1:2d:f9:c5:
6d:56:30:a4:a6:23:8e:96:0c:a9:5b:3e:05:51:1d:
5b:c4:2f:14:d5:e4:be:19:0e:66:1d:2a:14:a4:f3:
bc:aa:f2:35:ff:e1:9a:c2:a5:27:88:b4:4f:fa:e1:
cf:50:fb:ca:25:de:84:68:55:35:71:1e:0c:eb:91:
69:02:ec:c7:e7:ce:54:4e:95:14:7d:f8:ca:ab:d1:
37:b6:6e:7a:75:9a:40:53:d6:3d:4d:9a:8d:4a:e1:
92:ed:6c:eb:65:35:fe:17:b4:b2:62:b1:bd:ff:09:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:F3:16:84:16:88:76:87:1A:92:CB:16:62:D6:1E:94:1D:38:DC
X509v3 Authority Key Identifier:
keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e0:15:93:e9:17:0e:b3:e4:78:30:5c:59:0f:33:9c:b4:a4:
cd:bc:8e:f8:8b:eb:ce:7d:71:f8:0b:4c:8d:80:e2:4b:44:9b:
38:79:29:10:86:21:02:1d:67:c9:b0:00:0e:48:f6:05:df:20:
b0:b2:76:a6:76:c6:a3:8f:23:c3:d3:09:a4:f1:27:53:5b:3c:
69:f7:f8:ad:55:54:29:94:dd:e2:83:62:97:91:8e:a6:bd:33:
a8:6e:26:aa:47:4c:36:ec:d1:22:cf:16:71:ea:88:25:7e:81:
43:14:52:72:57:95:e5:24:a3:51:3e:d1:94:5b:c5:4c:7e:34:
5e:7d:70:8a:e3:cb:cf:a2:8c:b9:7e:db:ba:ea:06:ec:47:44:
13:b0:19:95:3f:9c:ec:43:9c:1e:3f:73:4f:9f:26:cd:4f:e0:
9a:ef:e7:ce:66:5b:cd:45:5c:9c:90:00:3c:60:c3:1a:9c:9c:
04:16:7f:c9:e8:18:82:7e:e5:a3:a5:91:f8:3f:49:5e:52:a7:
aa:5a:27:37:43:f7:f5:a1:1d:db:c2:50:26:33:98:05:34:2c:
a0:31:23:18:a3:3a:0a:4b:98:f5:d0:23:f3:14:29:3c:53:92:
58:d2:e5:6b:13:84:6a:ea:dd:da:14:03:c0:3a:7d:2c:19:40:
10:c5:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:14 2026 by rpki-client