Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: /XbjzK6TzDplNwAtuuegaSLkDOdX0/HOgxiTKKFnKzg=
Subject key identifier: 90:2A:57:AC:84:D2:E2:54:17:59:16:AE:A3:E5:36:35:D8:CF:01:67
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019F8E6B7BAB1327E29616B8D3286A3C9CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 10:00:36 +0000
Manifest this update: Thu 23 Jul 2026 10:00:36 +0000
Manifest next update: Fri 24 Jul 2026 10:00:36 +0000
Files and hashes: 1: B-jaTDzXYnAiep0dkM4HKHAtDtc.asa (hash: 6/cBN/kOMU8ZsZKSZ6ypt6jtXqwALKvq4t6gWl3kd0k=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: VjG5TODWY689TPXgD5msDaRfD8pI9Cx+WG999E3sh7o=)
3: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:7b:ab:13:27:e2:96:16:b8:d3:28:6a:3c:9c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Jul 23 10:00:36 2026 GMT
Not After : Jul 24 10:00:36 2026 GMT
Subject: CN=902a57ac84d2e254175916aea3e53635d8cf0167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:22:e4:e9:e8:67:01:0e:1e:d3:83:6a:40:
36:e7:39:cf:ae:3f:3c:d3:4d:d6:80:e4:94:15:53:
78:78:d2:73:9d:c8:16:f0:50:0d:62:f2:60:fa:8c:
01:e5:22:a4:d0:c3:d5:ae:c8:42:46:8c:f5:d1:d5:
4d:1c:7c:19:4b:4c:23:98:d1:92:b4:31:9c:50:09:
35:16:0b:c1:8d:cb:c9:55:e5:73:4a:c7:21:79:e6:
2b:da:63:4d:9f:13:dd:14:b4:28:61:0f:0b:9f:12:
a5:a3:8a:8d:fb:c6:5c:67:76:fa:e9:e2:2a:62:35:
0b:91:67:34:b2:8c:3f:2b:8e:7d:a6:13:b2:f5:2e:
c8:25:d5:9f:5b:f5:a9:f1:0c:34:32:b5:79:f5:26:
79:cb:27:97:7b:03:48:38:ad:77:3e:50:c1:70:61:
67:a2:7b:69:1e:d5:c6:77:74:04:ab:c3:7d:ca:62:
d7:82:ec:46:20:e0:22:fb:f6:6c:1c:54:61:c1:08:
84:bc:95:3c:b1:c0:04:dd:3e:89:56:af:0b:54:c5:
a9:1c:82:70:81:91:1a:4f:78:93:38:e0:c2:74:ab:
89:2d:42:02:de:18:40:d4:22:b0:15:7f:9c:ed:3d:
c1:d6:b1:ef:e5:05:a6:e5:08:89:10:6a:e8:d9:7c:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:57:AC:84:D2:E2:54:17:59:16:AE:A3:E5:36:35:D8:CF:01:67
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:a0:62:e2:04:fe:80:54:9e:96:f8:57:32:73:bd:2c:dd:0d:
16:38:98:6d:5f:ec:a1:4a:80:08:34:cc:02:f2:07:a0:a3:fd:
f7:c7:e0:2a:c6:e1:54:4f:2d:0c:ce:de:7c:fc:f2:43:a5:75:
8a:90:e9:1e:fe:1e:70:18:08:94:81:62:ba:4e:f0:35:08:10:
02:3b:64:84:48:b7:cb:9d:fa:82:51:6d:87:d0:bb:58:fd:32:
6f:56:cb:4e:3f:fe:c3:e9:e2:0e:47:e4:b4:8b:52:53:4e:aa:
56:af:ef:68:96:ba:22:5b:94:8f:3d:e8:26:98:c5:32:44:d6:
c4:41:2f:76:8f:27:c0:72:48:31:d4:ea:7e:53:56:cc:2b:b8:
a6:9c:59:38:0b:1e:5c:52:56:c9:06:44:0c:9e:93:e9:75:74:
f2:5f:bc:19:75:be:62:ed:50:8f:79:b2:7c:08:19:34:3a:8c:
69:88:db:57:6a:cd:62:7a:d9:26:bc:6d:6f:53:52:83:fb:23:
13:8a:87:7b:21:f0:5c:32:2c:94:d5:d7:bf:e8:4d:d2:07:4e:
24:87:37:62:e1:92:9d:41:21:e7:87:a2:83:f2:89:51:c6:a8:
d3:cd:78:75:9f:30:0a:5b:e8:54:40:f3:ea:fb:53:b5:92:90:
b5:30:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:59 2026 by rpki-client