Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: osNmrph+UAmidVYkQFwDggHwd3qH2WsgsFk/QNqDjo8=
Subject key identifier: 10:A1:2E:4D:CF:BF:BF:85:90:DD:96:B8:20:9B:D1:90:D6:E0:70:F2
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019F860D85CB73E94C108438163D0F95F16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 19:01:00 +0000
Manifest this update: Tue 21 Jul 2026 19:01:00 +0000
Manifest next update: Wed 22 Jul 2026 19:01:00 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: ViqneSr9KAN+Y+RO1PVfEemg6KniU/ug33/8/FCzD8o=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:85:cb:73:e9:4c:10:84:38:16:3d:0f:95:f1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jul 21 19:01:00 2026 GMT
Not After : Jul 22 19:01:00 2026 GMT
Subject: CN=10a12e4dcfbfbf8590dd96b8209bd190d6e070f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:79:27:b4:e9:4f:19:74:b2:3f:bf:43:13:
c1:f4:78:b6:df:f2:3e:9f:c5:f0:ba:67:a3:84:13:
cd:91:e9:20:f0:c9:c8:cc:82:84:4c:04:65:af:54:
89:02:3b:1c:9a:40:e1:31:fa:0c:f1:6f:12:79:bb:
6d:dd:c6:9b:68:a1:f0:22:41:85:05:a7:e7:f5:8c:
15:76:78:fa:9f:1c:7b:a4:78:cf:23:1c:c4:ad:d5:
c0:56:37:fb:86:c8:12:0b:3e:76:e8:02:47:83:d0:
c8:31:aa:27:98:76:13:91:01:4d:c9:43:23:d6:e1:
c7:47:24:7d:b4:90:2d:e8:a6:8b:a1:99:c1:b5:e6:
dc:8b:86:2e:fa:83:78:75:17:41:23:fc:03:e6:de:
3a:66:73:2b:0d:93:4b:33:0d:e1:02:bb:ee:96:de:
12:c6:ea:76:8f:c6:96:2a:fe:46:4f:8c:5a:64:6f:
49:45:47:39:a4:7d:08:ea:14:e3:09:2a:df:11:6f:
50:b5:2d:c2:51:3f:22:16:8f:04:fc:c9:47:04:9f:
97:64:9e:93:8c:58:21:2e:94:fb:12:fb:ac:ef:99:
1c:70:3e:4f:87:ba:cd:bc:0a:be:dd:49:a2:08:fa:
f4:cc:69:22:88:f5:8a:ae:06:6a:67:40:db:d0:6e:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:2E:4D:CF:BF:BF:85:90:DD:96:B8:20:9B:D1:90:D6:E0:70:F2
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:bd:5f:97:a2:d0:78:62:07:e3:11:32:5e:b2:fe:ff:ab:
d2:75:80:dc:35:7d:df:71:e5:4a:4a:5b:31:48:95:69:89:36:
0d:5c:e2:32:f3:f8:58:b8:97:49:f1:49:2f:d9:77:da:3a:48:
c5:fa:17:d3:44:e6:13:c0:15:62:a0:db:28:55:f2:75:54:1e:
b4:b1:7d:9a:5d:ee:54:79:6c:d8:60:b9:fa:0b:3c:bd:11:0a:
44:17:de:21:1b:a2:5f:00:3c:67:bc:58:3b:e3:41:00:3c:06:
fa:43:b8:e9:de:1e:ab:cc:6b:a7:e1:bf:a3:47:5d:5a:8d:d1:
49:cd:34:d1:17:53:66:a4:bb:bc:a4:e5:c3:78:6c:2a:78:db:
1b:93:81:b9:f1:35:cc:4b:6e:59:79:13:d3:d9:d5:06:c1:9a:
9f:5a:df:9d:5c:d9:25:4f:16:f6:d0:d4:a5:0a:dc:2e:4d:51:
ae:d4:86:56:3c:c3:e7:27:ee:fe:91:97:5e:2f:10:62:54:39:
b6:3c:05:49:6b:0a:70:51:49:b6:7b:14:bc:11:a1:ce:aa:aa:
5c:0c:62:db:a7:30:27:7b:ed:37:f6:b9:55:f7:26:e2:73:df:
5d:9b:d7:48:e4:5e:60:02:e0:c0:c4:dd:db:2b:63:10:39:84:
24:e7:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:39:09 2026 by rpki-client