Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: rurhy3Np4Ttnejw90AidtH0wFc7vyB3ARJRTeT7cfGg=
Subject key identifier: 69:76:A8:E8:93:FA:BD:6A:6F:35:55:D3:29:5C:02:CD:1B:CF:CA:29
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019F8643C5987545F079E27423F6B198C91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 20:00:16 +0000
Manifest this update: Tue 21 Jul 2026 20:00:16 +0000
Manifest next update: Wed 22 Jul 2026 20:00:16 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: Gv3cu/isU2JviGD/kFPR/ghPXXgouFVpVZdbDUipglk=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:c5:98:75:45:f0:79:e2:74:23:f6:b1:98:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jul 21 20:00:16 2026 GMT
Not After : Jul 22 20:00:16 2026 GMT
Subject: CN=6976a8e893fabd6a6f3555d3295c02cd1bcfca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:70:f8:7d:6a:a9:30:d1:73:f2:43:aa:e0:
4b:16:4e:9d:34:47:38:3d:97:dc:0b:7b:f0:c9:4c:
15:4f:4f:08:e0:14:7a:20:a1:fe:a0:8b:2f:4d:26:
5b:3b:bd:ac:e9:08:7b:c5:48:25:b4:22:22:31:b2:
f9:71:37:3b:9c:c1:9c:64:db:c0:11:9c:71:5d:89:
02:c8:49:0f:47:ea:e2:7d:f9:38:3c:4d:3b:0b:c7:
f3:d5:ea:39:c5:06:a3:df:b1:b4:51:87:4f:13:9c:
5e:34:22:9c:c3:c8:3a:30:da:4d:69:1a:4f:3a:26:
31:53:7b:cc:22:3a:15:a1:f9:26:c3:05:14:ea:7f:
2d:51:fd:f7:c9:8e:a5:21:c8:33:f2:42:f0:e8:9e:
08:39:d1:b1:ff:cf:1c:70:06:fd:1a:09:40:0c:7a:
f5:4c:9b:a6:36:8f:78:aa:66:a4:34:b4:32:4b:13:
38:bb:6f:e9:79:90:04:2d:64:b4:fd:cc:d8:84:29:
bc:2b:33:f2:9d:0e:a6:78:7b:b0:6d:5b:56:9b:94:
46:7c:93:8c:f7:6e:bc:2e:b7:21:26:cc:64:93:ae:
0d:35:28:91:75:ed:05:53:c1:cd:c3:39:37:b3:b1:
0e:bf:fc:2f:50:9c:f4:e3:d3:73:99:77:47:53:63:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:A8:E8:93:FA:BD:6A:6F:35:55:D3:29:5C:02:CD:1B:CF:CA:29
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cf:65:e1:d4:6b:13:75:8e:cd:2f:cc:1d:dc:a3:6c:bf:18:
99:30:b5:df:1a:94:8d:7b:10:ab:f6:cf:91:9a:02:c5:da:b1:
21:e4:fd:b7:00:e2:23:9c:c9:78:96:75:03:06:b6:6d:0e:e2:
24:77:5b:a0:a2:eb:07:d4:10:71:71:bf:22:4b:b3:59:18:45:
d0:bb:f8:be:52:39:6a:4e:44:c4:d4:15:e3:bb:84:2b:a5:a0:
ba:3f:9b:0d:9b:a5:2b:91:ac:20:29:d9:87:d9:f2:62:e8:48:
cd:75:cb:a2:a1:0b:18:8a:b5:19:d8:a0:43:10:6b:b5:15:04:
53:5b:8d:dc:86:b2:4e:c6:89:3c:2d:45:52:73:22:18:46:de:
5d:66:e2:17:f6:91:a0:7c:a0:0f:00:70:94:16:43:af:37:30:
07:87:4f:ea:c7:12:10:93:6d:8e:96:c5:94:2e:e2:9e:3d:d9:
0a:b4:52:1a:ba:20:4c:e3:f8:ab:22:49:a0:c3:d0:1d:58:55:
9a:e6:38:58:ed:58:60:50:e6:57:5a:f2:3a:e3:e7:99:d5:a2:
68:e6:c6:b6:3e:9c:9c:a9:c2:68:32:f8:44:93:21:4b:6c:ba:
90:41:a0:84:24:1a:32:a0:41:53:cc:06:2c:0b:82:be:e5:f3:
9d:94:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:02:14 2026 by rpki-client