Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: gU1D+Ct3n6sStmwgACbBegSyfrMvX38cfyr5HyBC8lU=
Subject key identifier: D1:51:44:DF:7E:3A:0F:75:48:59:F1:D0:4A:D0:98:37:13:1D:22:7A
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 019F91DB14EF079BF9AF5356F3A7019466A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:01:21 +0000
Manifest this update: Fri 24 Jul 2026 02:01:21 +0000
Manifest next update: Sat 25 Jul 2026 02:01:21 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: oiBNNFAipzbjQ+0VZ6OSRRK1BDkp0yY8uny5NPQtChU=)
2: A0zEfLP6aje6siYVgtOIFTUv-gA.roa (hash: U3yH+f7j1agPNZjyy4FkXU1kfVyaRAeAIT0ypJqPwSA=)
3: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:14:ef:07:9b:f9:af:53:56:f3:a7:01:94:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Jul 24 02:01:21 2026 GMT
Not After : Jul 25 02:01:21 2026 GMT
Subject: CN=d15144df7e3a0f754859f1d04ad09837131d227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:66:85:23:9e:0a:fe:10:31:71:ed:6d:ca:
c8:c3:19:65:07:db:42:30:58:5a:2d:66:bb:46:ff:
e1:99:68:eb:53:87:5f:6a:c1:e3:7d:b4:5d:fe:50:
b0:e1:6d:47:ae:74:65:04:05:8b:ea:b1:4d:ca:bb:
d1:d2:1d:e1:2d:d5:69:13:a4:e5:b5:45:58:94:18:
07:55:40:14:fc:be:fe:86:a9:b4:d8:9f:c1:9a:03:
3e:d8:da:4a:d7:65:3c:65:9c:05:4b:3c:d2:88:73:
ed:e1:e2:a7:6c:e0:a5:85:3d:3d:7e:f1:6c:65:03:
6a:98:a7:d3:a7:f9:51:31:49:13:0b:39:2e:59:41:
96:3f:c1:d8:3b:12:a1:43:02:57:d3:b5:82:b2:24:
1f:33:40:44:14:3e:b7:95:15:59:d8:d2:7a:48:1c:
96:f5:5a:96:93:c4:a4:c3:69:35:25:51:60:e9:fd:
95:64:5d:5f:b3:e6:92:74:f8:4f:73:99:e1:6d:55:
80:9a:c0:11:ab:79:3d:b9:4e:70:09:6b:05:86:94:
06:a0:6b:11:f3:c4:77:45:d9:d7:0d:61:ed:8d:b9:
f7:96:c2:33:bd:b1:72:34:7a:20:f4:d3:1d:f8:18:
81:06:2e:60:78:5b:b3:0b:5f:2a:da:fc:70:09:3e:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:51:44:DF:7E:3A:0F:75:48:59:F1:D0:4A:D0:98:37:13:1D:22:7A
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:db:a7:d2:cd:6b:ae:7c:f0:0d:26:20:f9:c0:79:ac:0e:
d4:8d:94:a0:c8:91:21:d4:48:3b:76:7e:59:01:ce:3a:68:bb:
4b:73:6f:d0:b9:7d:70:8d:8c:ae:d6:0a:85:b4:f2:f0:31:28:
c4:0f:91:83:9a:50:fe:ed:77:5c:3e:49:bd:c7:da:18:67:48:
71:2e:c8:48:bf:c3:e9:94:a4:7c:46:8e:4b:c3:70:de:b3:b5:
e5:4a:31:2d:11:3d:a5:de:c1:22:a7:e4:fa:cd:f8:2e:20:2f:
dd:ed:88:34:a3:7d:f4:4b:98:19:9c:3d:44:59:23:3c:33:51:
da:e9:59:61:75:03:5b:02:b3:db:2f:d6:e9:a4:c0:b5:09:79:
cf:fd:26:b8:cb:9e:2d:84:ca:86:52:85:77:b5:4b:69:8a:26:
79:63:50:d1:c7:24:bf:40:2f:a4:af:2c:2f:93:5f:8e:d6:d7:
37:c8:50:0d:9d:f4:57:59:e1:b3:d8:f0:d6:95:1c:b8:a0:13:
be:bb:74:a8:e4:84:18:af:73:3b:f9:81:b9:a7:75:ce:21:78:
c4:c0:2c:60:46:5a:f6:18:96:b2:b9:b0:23:8d:c4:ab:90:bd:
50:35:c5:2b:3e:4e:0c:64:c2:ca:c8:52:c8:a9:65:2f:41:f9:
33:7e:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:50 2026 by rpki-client