Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: z1Gy8oFNYpSMwscfsaq8LN2XXJMog6pfTTPP6XvZlqg=
Subject key identifier: EB:41:02:71:B3:2C:AA:15:A5:B8:80:02:0D:3F:5D:C6:F7:71:4D:DD
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019F927F4430B0EBA2406FF22CF6F0D7FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1986
Signing time: Fri 24 Jul 2026 05:00:41 +0000
Manifest this update: Fri 24 Jul 2026 05:00:41 +0000
Manifest next update: Sat 25 Jul 2026 05:00:41 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: NJ+E3xLC3pPd+1AYPDd5mmNv2Ald9wIJif07jy/m7ds=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:44:30:b0:eb:a2:40:6f:f2:2c:f6:f0:d7:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jul 24 05:00:41 2026 GMT
Not After : Jul 25 05:00:41 2026 GMT
Subject: CN=eb410271b32caa15a5b880020d3f5dc6f7714ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:f6:48:70:dd:60:35:a1:3b:dd:76:13:4c:
48:af:a4:1b:cb:f7:9d:f4:20:8b:79:46:54:6a:9d:
9a:89:e0:31:ec:1c:49:5b:81:2f:26:e8:62:3a:3e:
0c:0e:2f:4f:a8:a5:3a:70:c6:de:f4:0d:a1:f2:11:
48:cb:52:00:8c:29:82:83:d0:40:60:f1:7d:6d:b0:
25:73:53:cf:ba:3e:fc:c6:53:b6:9f:ec:19:6b:87:
8a:20:84:20:67:79:8f:12:84:21:c3:93:16:46:72:
fe:66:0f:74:6d:bd:8d:c7:ae:8e:d6:67:7d:52:e9:
44:80:d7:46:eb:a5:30:9b:f4:84:61:73:4e:2b:05:
6f:a4:e9:df:22:86:f7:4b:02:a5:f3:23:20:b4:b6:
0c:59:1e:d7:39:55:1f:98:df:2e:d9:84:29:f0:f2:
45:c2:19:72:21:8d:81:2a:97:4c:d2:b9:92:69:7a:
3b:0a:ac:60:41:6a:8e:1c:e0:bc:1a:d4:fa:db:38:
37:82:36:2b:61:28:67:1d:be:c8:eb:78:35:ca:58:
4e:2c:25:24:bd:ea:0e:cb:c6:ab:ff:90:22:ab:6b:
8a:bc:0a:37:ba:80:67:ab:ac:e0:d6:a5:41:59:d1:
a6:86:c7:04:46:9d:7e:bc:cb:3d:52:27:a7:7a:1b:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:02:71:B3:2C:AA:15:A5:B8:80:02:0D:3F:5D:C6:F7:71:4D:DD
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:ed:9d:22:2d:42:e8:c8:1f:03:7b:fe:49:bd:6a:12:fa:
7f:38:4e:b5:0e:45:fb:5b:3f:71:d3:05:e8:0c:6b:bd:e5:d4:
f3:47:a2:4e:c0:51:22:f5:42:8a:a2:d1:c8:13:c3:af:0a:ff:
ad:55:09:58:7d:eb:b0:71:cd:47:92:d1:b2:b6:ea:97:59:44:
c1:b0:f8:9a:0b:c7:94:c3:0d:dd:98:fc:ae:26:f6:5f:9e:4a:
95:9b:21:a9:b2:d5:71:08:9b:14:af:31:71:62:34:3d:9c:c2:
4e:bf:82:a8:bc:9a:07:df:6f:fd:9c:e5:cb:94:af:75:43:5a:
2e:6d:c3:89:03:ca:ac:1d:a0:6d:8e:d9:37:1a:1a:c8:88:cf:
9a:e3:47:86:5e:20:92:a0:a9:d0:54:cb:67:8f:8b:63:63:b3:
f3:4f:ee:e7:9b:2b:8a:78:53:8f:af:54:1c:25:6e:b2:32:f4:
02:b1:3b:f2:f2:19:7a:71:40:06:db:75:89:c0:32:5d:bf:59:
bc:68:0f:f5:97:ac:57:a9:0d:c8:df:32:c4:e1:33:7d:bf:fd:
0f:79:59:3a:0a:24:99:ac:86:ba:94:c3:18:ad:a2:5a:5e:57:
fb:f5:98:e8:cb:46:d2:96:53:88:8e:f6:9f:6d:dc:8d:28:f6:
0a:e6:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:53 2026 by rpki-client