Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: 2WN7FNTEWKUJYnr/Q7rKYRmjfqmK1jdHHaPJX7Ked/w=
Subject key identifier: A4:79:00:E0:3F:05:0F:77:F2:4D:93:2D:58:F6:0A:BB:B5:42:8E:32
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 019FF9119CB216BFF71948352DF5A05534C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 198F
Signing time: Thu 13 Aug 2026 03:01:48 +0000
Manifest this update: Thu 13 Aug 2026 03:01:48 +0000
Manifest next update: Fri 14 Aug 2026 03:01:48 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: yjaS2ogbn64BqWzaKnOorhVciZi97Vcxhz60seU8OSA=)
2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:9c:b2:16:bf:f7:19:48:35:2d:f5:a0:55:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Aug 13 03:01:48 2026 GMT
Not After : Aug 14 03:01:48 2026 GMT
Subject: CN=a47900e03f050f77f24d932d58f60abbb5428e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:05:f5:1e:8e:99:4a:6b:be:7d:3d:64:d4:
eb:73:32:fb:6b:0f:2a:4b:57:8f:78:a3:2a:d5:51:
69:ca:29:95:d4:59:45:1f:a0:ff:4d:79:21:89:f4:
ff:2b:c0:2e:c8:33:84:96:d0:b0:70:47:9e:ad:ea:
c0:3a:5d:e8:ea:df:cd:45:12:53:54:64:1d:1b:49:
6b:87:a5:5a:f0:96:78:21:a7:88:e1:5f:7d:63:2b:
02:37:73:cf:22:57:36:1e:68:e5:30:a0:a9:9d:9c:
b3:26:6b:db:6a:44:13:0d:c7:0c:3a:ad:a1:6f:18:
c7:de:22:82:b5:90:51:c3:0f:dd:2b:bf:83:6c:06:
32:fc:c8:d6:db:fe:16:72:12:50:79:70:b8:32:a1:
50:e8:e3:7b:62:0f:6c:2d:71:59:b3:b9:50:7f:d8:
ca:96:8e:1d:ab:4b:d9:3a:c3:30:51:d1:9b:b5:42:
4b:3c:20:72:30:48:55:70:54:f2:82:66:0c:55:e5:
02:2b:c4:54:72:5c:b6:21:d8:bf:08:fc:ae:a4:74:
d1:04:33:ca:cb:6b:97:6f:90:37:cf:7e:e3:93:d5:
96:96:de:f5:1c:bf:2c:ca:1d:37:e6:03:27:a1:cc:
e3:8e:65:1f:df:ae:b0:40:2e:fc:5f:70:70:06:42:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:00:E0:3F:05:0F:77:F2:4D:93:2D:58:F6:0A:BB:B5:42:8E:32
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:da:86:30:7a:41:fd:49:f2:3e:f2:a3:a0:94:90:43:90:3f:
b1:b0:84:5a:3b:b5:e9:a7:8b:4e:91:bc:11:6e:a6:61:08:65:
26:32:64:7f:70:4f:08:a2:d8:0b:e3:48:3c:d2:1c:52:7e:15:
06:0a:3d:bd:fe:e8:fc:7e:97:fd:c4:a9:45:80:5b:2d:1d:a7:
d7:a8:79:a0:55:9b:88:16:b1:b8:4c:b2:d6:ff:ac:a8:c6:5e:
bc:e0:53:80:c6:b4:b2:07:45:26:a1:91:ba:72:1a:a5:e0:4e:
c8:4e:6f:3e:f8:ba:98:31:a0:28:11:90:20:f0:a4:28:87:69:
62:d7:f3:91:25:2d:e0:17:a5:ce:a4:83:2b:b6:58:44:08:60:
45:68:59:2f:2e:12:0a:b5:09:28:42:37:cb:bd:f8:76:01:49:
25:d6:7e:75:46:1a:da:8e:66:d6:03:81:58:5d:9a:49:2c:f8:
9c:6d:ab:02:6c:8b:13:52:ae:62:e9:f0:e6:38:12:19:31:c1:
3a:e3:2a:79:5b:9c:84:d1:09:b1:ee:c7:41:4d:e5:ee:82:78:
c6:e6:b7:71:d5:a4:af:5e:89:44:56:09:50:8a:75:99:67:1e:
b1:18:5e:1f:50:40:70:8c:92:f4:ff:be:91:e5:4c:73:8b:bc:
4d:1e:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:11 2026 by rpki-client