Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: 58EqpVAlOn6uCnD7z++LJjHGWqS3LKxjJeCH7GHngu4=
Subject key identifier: 6B:88:29:1F:80:CA:F6:23:94:13:EA:4C:0C:DC:84:60:61:64:20:6E
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019F9022DE72EA1935AB2C345C2C8A81C2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 18:00:31 +0000
Manifest this update: Thu 23 Jul 2026 18:00:31 +0000
Manifest next update: Fri 24 Jul 2026 18:00:31 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: zBeGIwSXVKWUmzE1QlfpQectIyXwGwqe7LgzPtEVxz8=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:de:72:ea:19:35:ab:2c:34:5c:2c:8a:81:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jul 23 18:00:31 2026 GMT
Not After : Jul 24 18:00:31 2026 GMT
Subject: CN=6b88291f80caf6239413ea4c0cdc84606164206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:f2:b2:fd:b0:c8:3d:22:12:ee:ff:0b:ee:
01:f1:5d:14:6b:78:e6:84:fc:fd:7b:94:71:a5:4f:
5b:10:ac:ff:9f:f2:66:b5:04:68:5d:4d:bb:88:c5:
bd:d1:90:31:9b:2d:84:19:50:76:4a:34:24:72:7e:
0b:a9:fb:52:92:b1:6f:be:73:2d:f4:e0:80:64:f7:
3f:00:75:3c:cb:a4:ed:b0:03:71:f7:fe:14:38:d6:
47:08:4a:ea:95:fc:54:0e:58:43:de:76:5d:b5:e5:
8e:81:87:19:93:b0:b8:8e:28:a7:1f:92:4d:da:be:
35:cc:54:bf:13:8f:ff:b7:ac:ec:14:91:02:67:2c:
8b:63:b4:3d:d2:1a:d2:b4:f4:c3:bf:11:95:5f:d9:
0b:fd:da:aa:76:c0:c4:83:9d:4d:ba:fa:1c:4e:48:
43:21:42:2e:e1:87:37:bf:f8:f4:60:d3:d9:28:33:
4b:2e:81:c7:0d:7b:4b:a7:df:8f:21:6c:b1:1d:73:
b0:c3:27:7b:e4:65:29:ba:90:52:69:f3:09:9a:69:
79:96:d5:eb:15:52:b9:8f:b2:2d:bd:8d:d2:af:ab:
44:13:be:b2:1e:20:1d:b3:49:42:0e:ab:e2:d6:16:
cf:2d:cc:18:75:57:ba:bc:f3:94:f2:0b:16:57:4f:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:29:1F:80:CA:F6:23:94:13:EA:4C:0C:DC:84:60:61:64:20:6E
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:98:a4:68:1a:b2:51:47:e9:ea:e8:63:8a:bb:ab:36:9e:a2:
b5:e7:5e:0a:20:66:a2:6c:5c:13:4b:50:7f:af:47:09:ee:36:
54:8c:bb:34:b3:9c:14:51:cd:96:70:7d:b5:94:f6:cb:90:33:
1d:91:3c:05:59:b7:57:b8:7a:07:25:00:79:9a:2f:62:0a:25:
20:11:da:23:90:24:5b:de:84:ea:e2:ed:95:29:70:3e:bc:b6:
38:72:d6:22:5d:83:3e:5b:1a:00:0d:86:46:8a:50:85:10:dd:
75:f2:4b:04:56:64:7c:21:48:a0:2b:36:2e:4b:03:4d:e5:9b:
58:53:ea:ed:62:7d:98:d3:2f:1c:76:41:66:91:69:1a:57:86:
43:39:2f:5a:39:e8:c2:d2:d9:af:74:e6:09:87:6b:ab:f3:43:
07:1c:2d:5d:d1:40:2c:c8:af:5b:1d:b3:60:fd:17:df:10:16:
d9:14:b0:df:29:1d:fb:8d:ec:3c:88:9a:7e:de:67:56:07:c3:
b7:27:73:5f:e5:bd:7a:20:4e:48:1f:c9:ae:7b:e2:f5:3b:2e:
f6:62:15:ca:ea:e5:4a:ed:c6:08:51:c1:14:65:08:bf:82:69:
32:ad:eb:55:4f:e8:35:5b:a3:dc:f3:3b:40:13:15:96:8c:36:
df:c8:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:59 2026 by rpki-client