Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: 4YIVAo1iN8C23v/M/28are2jvJjoDKQhhthOpiowI30=
Subject key identifier: 01:90:65:66:CF:4A:29:75:6D:E3:A3:A1:DB:D2:25:A6:49:BD:B3:7D
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019F91DA4810B4D3C264099137B80AE22479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0E06
Signing time: Fri 24 Jul 2026 02:00:29 +0000
Manifest this update: Fri 24 Jul 2026 02:00:29 +0000
Manifest next update: Sat 25 Jul 2026 02:00:29 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 9BeAgmn1moml9ELHFWQYM+iU1f0Y7CJcbTR9kK1O62s=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:48:10:b4:d3:c2:64:09:91:37:b8:0a:e2:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Jul 24 02:00:29 2026 GMT
Not After : Jul 25 02:00:29 2026 GMT
Subject: CN=01906566cf4a29756de3a3a1dbd225a649bdb37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:56:bb:b6:de:d5:e0:0b:43:f0:90:ec:28:
f7:19:e0:1b:52:1f:9b:c9:e3:6c:ef:f6:b2:00:84:
bf:56:18:65:7f:b9:3e:bf:e2:6a:b6:21:a1:3e:a6:
e8:99:04:af:60:2a:ce:c9:8d:1d:fd:b0:89:05:5c:
2f:17:cd:8e:af:3c:99:25:8e:e1:6f:52:54:c2:eb:
3f:84:47:84:f2:c7:d3:b4:e2:22:06:0d:89:a0:36:
36:94:ea:c1:6f:8a:61:ac:4b:25:3e:b9:88:0f:e9:
24:08:4f:f3:fa:05:c3:aa:4f:b8:ed:7e:19:d8:0d:
5a:4c:6e:6e:6c:8b:ed:06:cb:5c:e7:54:8c:46:91:
dd:2a:4a:a2:76:d9:8e:eb:fa:b7:b9:a1:04:64:b4:
27:09:a1:c9:dd:8a:36:82:cb:de:26:20:e3:f6:3f:
c2:02:ed:e5:e1:31:91:6a:15:74:20:1b:0d:3d:3b:
92:62:ec:fa:66:d5:f3:46:f0:ea:3e:76:1a:e6:cf:
c9:d5:88:30:fe:04:40:da:b4:4a:7c:2f:37:c3:b6:
10:5c:e9:8d:78:50:a6:3b:76:30:9d:1a:09:90:02:
fe:4c:78:49:e8:5e:ed:4f:4a:a0:20:52:a1:1d:61:
d4:1e:56:58:eb:13:f3:d6:64:a6:94:f1:af:39:b6:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:65:66:CF:4A:29:75:6D:E3:A3:A1:DB:D2:25:A6:49:BD:B3:7D
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:08:e1:b9:18:21:85:a0:f5:6a:c3:77:85:6c:5d:08:61:
c6:e1:04:d7:49:01:c8:96:5b:64:53:41:3e:03:12:1d:9f:a0:
3a:4e:00:d6:38:f2:48:5c:91:1c:41:e8:b4:dc:72:47:c1:ae:
a6:bb:8d:8b:95:b0:e4:d0:53:8b:48:fc:61:71:e3:79:c3:1c:
1c:20:0d:f3:5a:53:07:b5:3e:a5:48:db:4c:71:ed:b2:2a:ec:
8c:fa:af:ee:c8:41:a3:09:df:ec:06:c8:4b:70:34:ff:5d:93:
7b:5e:74:59:d8:82:53:05:7a:46:01:1a:1f:22:d7:38:6e:56:
35:bf:23:87:db:79:49:56:c2:87:c0:6a:19:fa:cc:b6:ac:a7:
2a:69:75:35:55:67:0c:e8:02:a7:17:1b:4a:92:89:fa:15:db:
81:66:1a:2c:a1:ce:86:6e:c7:42:07:71:a6:20:93:fc:7f:db:
b7:1f:f7:b8:e1:c1:3f:f9:96:1c:2b:f5:17:65:0c:0d:8b:7a:
cf:81:66:c3:a2:60:ba:bd:69:0b:c4:37:b1:ee:d7:ab:e9:2a:
e9:4f:60:48:3b:0d:34:b1:a5:ef:c4:b7:4b:96:ff:f8:d3:ac:
58:f2:84:df:97:59:d9:47:c6:58:d2:87:55:e6:8d:16:29:fe:
bd:9e:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:52 2026 by rpki-client