Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: jMj3SSquNhE6bkSbDE06E7cWsBY6WsvTH4SEWEBPAtk=
Subject key identifier: DD:A6:B3:C0:82:20:7E:F0:8C:2D:C1:79:6B:DD:21:D5:AC:82:C2:36
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019F8FB521BB03F5CEE6B9471DE820C33E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 16:00:40 +0000
Manifest this update: Thu 23 Jul 2026 16:00:40 +0000
Manifest next update: Fri 24 Jul 2026 16:00:40 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: YPU6/MGY1cLskRIxCZsDkWVdLvP75VDV0scv1QkgoNo=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:21:bb:03:f5:ce:e6:b9:47:1d:e8:20:c3:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Jul 23 16:00:40 2026 GMT
Not After : Jul 24 16:00:40 2026 GMT
Subject: CN=dda6b3c082207ef08c2dc1796bdd21d5ac82c236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:0a:e4:40:ff:8d:ef:a3:91:38:43:2d:19:
01:47:19:50:f0:60:65:51:38:12:92:e2:d3:6e:ed:
3c:86:54:49:e7:91:62:eb:c9:c6:a3:6d:9f:bd:4f:
b5:98:56:d0:0e:df:a8:13:73:99:06:bd:e7:0d:0e:
f3:50:52:6a:5b:3b:5d:57:df:fd:a8:35:4f:9f:65:
c1:fe:2b:22:db:fc:cc:13:e0:bf:c7:16:2b:7e:44:
d4:7d:6c:c0:da:71:93:ae:6d:7c:30:68:8c:78:5b:
48:2b:27:f2:13:59:73:80:f4:8e:b8:85:c9:bc:7c:
39:05:bf:84:a2:6c:11:fc:8c:66:88:19:06:24:f6:
66:3c:7e:47:f9:49:86:00:14:41:bf:c3:1e:fe:ce:
1c:29:cb:64:49:88:22:57:08:5a:6d:2e:ee:c1:d1:
04:9d:ed:90:6d:b4:f4:40:e1:2d:8b:29:7d:26:22:
ba:6d:99:ad:8e:cd:b7:b1:65:f8:c3:dd:00:1e:a7:
47:18:18:c7:f1:96:ec:22:8e:b6:e6:36:90:a2:c3:
22:79:ff:cb:f1:53:81:62:4f:f8:2c:91:0d:c3:38:
ab:fd:16:94:b6:d6:75:26:3a:cc:ff:a2:56:9b:94:
ad:ba:63:c5:aa:d9:ba:9d:63:04:c2:5c:2e:75:1d:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A6:B3:C0:82:20:7E:F0:8C:2D:C1:79:6B:DD:21:D5:AC:82:C2:36
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0e:23:3c:d3:33:a4:db:a4:9b:1e:99:99:fa:c1:0b:24:e8:
35:61:c0:f1:8c:cc:23:9b:51:4b:ab:f2:af:3d:5c:f2:fc:20:
1f:e4:b1:e1:11:17:23:c5:20:e6:80:60:ae:c0:1d:b6:5d:99:
52:61:7b:dd:e3:7e:e8:57:75:5a:0f:81:f7:33:69:39:80:2a:
c3:1b:2f:14:81:bc:c5:97:94:27:8a:b7:6e:21:bf:72:8f:64:
c6:f3:6f:65:40:f2:26:b7:ab:bb:b4:43:59:ef:dc:0d:45:f7:
24:a3:f0:ae:3b:d6:19:28:9d:2b:ed:9a:74:68:22:ce:00:54:
12:ea:2c:6b:28:3b:5f:df:78:5d:99:45:88:ef:5a:bd:bc:5e:
eb:74:bb:25:f2:c6:fc:65:20:a3:2a:78:0f:9e:55:02:60:61:
9e:c6:94:59:8e:ef:ad:bb:79:3e:dc:ff:a0:0e:c7:e5:37:94:
11:d6:32:73:34:a9:92:44:39:7c:7e:db:12:7b:a3:17:a2:f6:
01:dd:90:3f:fb:b4:1c:2d:c4:9b:9c:f9:c5:bb:a0:14:fc:40:
1f:0d:f0:44:1c:27:f5:10:61:ea:7b:f9:c6:ec:18:d9:b6:9a:
85:0b:58:14:de:48:ec:7b:4b:f5:68:b1:3a:ee:87:64:04:64:
4b:89:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:46 2026 by rpki-client