Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: YrieUDs9AeymSwpDNug1QixuRRALeLakH3/s8Kdid+g=
Subject key identifier: B5:33:63:CE:8C:1E:F9:49:D8:B3:DD:ED:C0:AE:60:74:74:98:55:76
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019F916D5956EF61D92C432EA0D09F79043E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:01:30 +0000
Manifest this update: Fri 24 Jul 2026 00:01:30 +0000
Manifest next update: Sat 25 Jul 2026 00:01:30 +0000
Files and hashes: 1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: DG7EIiGd57BtIa405YeIGDT0izd45A0CwhYGuTJ01C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:59:56:ef:61:d9:2c:43:2e:a0:d0:9f:79:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Jul 24 00:01:30 2026 GMT
Not After : Jul 25 00:01:30 2026 GMT
Subject: CN=b53363ce8c1ef949d8b3ddedc0ae607474985576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:90:62:76:53:47:b3:28:4c:a6:0c:33:e8:
13:71:5f:de:bd:9c:6b:73:08:0b:8c:5d:6c:a4:f2:
67:b8:55:13:53:0f:62:79:f7:b4:a1:ce:eb:27:4d:
23:83:4e:bf:89:42:f9:9d:cc:97:15:ca:72:17:29:
ad:f8:03:59:6c:84:9b:ba:86:2f:91:9c:9b:17:a4:
50:73:f6:dc:b0:fe:06:cd:05:b9:4c:c2:03:24:de:
a3:21:e6:89:60:0b:00:a4:38:f5:17:3a:a2:f8:ca:
18:47:65:da:93:4f:23:6c:94:06:c1:9e:c3:ca:35:
2f:39:0e:1a:7f:c5:a3:d5:46:4f:63:7e:0b:23:b5:
15:c0:83:8c:34:30:77:c6:26:32:f2:0a:24:ff:f3:
60:9c:9a:52:64:2c:f5:a9:22:5a:d9:a4:c9:b6:eb:
a9:fd:47:59:ae:14:2d:9a:b0:22:11:f5:4a:65:4d:
6f:2f:ab:ec:3f:98:88:00:3c:9c:fb:46:40:84:56:
ee:02:07:05:31:9f:04:2b:e3:a1:b4:93:17:bc:b4:
87:fa:55:59:c6:e8:14:86:22:02:01:44:60:e7:42:
83:5a:50:b0:bf:ab:c6:82:59:1f:83:d6:d1:be:5d:
0f:a3:b1:53:74:84:86:76:28:52:0e:43:76:60:6f:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:63:CE:8C:1E:F9:49:D8:B3:DD:ED:C0:AE:60:74:74:98:55:76
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2b:8f:72:30:24:53:5f:1a:b3:5d:b0:ee:a4:df:4c:db:5b:
53:99:94:70:e6:3d:e1:a3:b3:b1:34:0a:b3:64:9e:90:76:7a:
b8:14:63:b3:a5:c7:de:0b:a1:96:b2:cd:86:04:e1:81:19:94:
ec:43:9d:0c:36:92:70:2f:a2:47:37:39:50:57:97:24:03:4b:
9c:11:e6:39:28:8a:74:af:de:b7:8b:82:e8:0c:07:92:c7:e4:
a2:cd:a0:e4:90:60:a4:49:69:b9:c3:3a:eb:db:09:16:ad:bc:
c2:71:59:80:56:4d:40:7e:87:37:3d:66:a7:69:18:69:67:8c:
63:aa:b0:c2:17:93:b7:dd:5a:3a:5d:13:e9:95:c1:93:cc:c5:
9c:cf:68:f1:0b:50:ce:b8:ae:a7:f6:33:a8:2c:28:84:04:94:
75:9a:29:00:75:2a:55:23:10:a0:c6:a0:0c:b0:a5:74:ad:7e:
94:0f:98:e8:64:a7:65:57:ff:ec:fb:77:3b:36:39:72:c7:9a:
b5:aa:2b:ac:bb:ab:55:1f:99:10:7b:7c:dd:3b:fe:de:b1:e5:
d3:75:66:ba:d2:39:38:9a:be:1d:c2:d3:03:62:9a:e9:c6:b2:
d2:d3:de:7b:32:94:1d:52:8e:af:01:30:59:60:3d:39:bd:39:
23:3f:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:17 2026 by rpki-client