Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.mft (raw, json)
Hash identifier: DoLqJuk/awOXLu545fFDxZXEXjGQBekO/tnTV5ezSiE=
Subject key identifier: 44:DE:54:63:30:9F:CC:F7:FD:7A:51:49:B7:43:37:EA:31:89:0E:02
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 019FA0E068D46FCAADE25D0A1232E1745B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:29 +0000
Manifest this update: Mon 27 Jul 2026 00:01:29 +0000
Manifest next update: Tue 28 Jul 2026 00:01:29 +0000
Files and hashes: 1: 8HAXP0NYuNkh6EyoveYUGpIkxSg.roa (hash: GuE049OXvSIVDUXmahqcqeUvOGnhrhD008vD02DXH2w=)
2: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (hash: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=)
3: c1S29BRaevUNxcEVUDt9KN4bDEQ.crl (hash: qQSWLYNufLQwLhj1R5+c+yxyr5wy6tWivKYDB7I8vA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:68:d4:6f:ca:ad:e2:5d:0a:12:32:e1:74:5b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Jul 27 00:01:29 2026 GMT
Not After : Jul 28 00:01:29 2026 GMT
Subject: CN=44de5463309fccf7fd7a5149b74337ea31890e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:fd:e2:6d:fc:35:2b:69:ee:06:f9:fc:bb:
d4:7b:c0:a5:3a:31:54:da:e5:de:61:05:10:11:39:
14:c8:72:27:8a:54:4e:5b:b1:87:27:7e:cb:a5:18:
2f:df:06:a8:77:80:84:e3:e1:d9:84:6b:95:2f:3f:
4a:c3:fa:43:a9:e9:49:87:36:71:6b:27:4c:20:9b:
09:3e:32:e8:e9:99:7c:ed:0c:1d:8c:da:a7:72:85:
53:a2:00:04:de:2a:4a:bf:a7:9b:ba:77:74:79:d2:
74:82:1e:c9:41:fc:42:44:36:76:d4:af:28:58:a1:
3a:df:d2:66:9d:3e:ee:1d:72:0e:de:8a:c8:94:bc:
fe:2c:5a:1c:88:65:00:72:e2:10:28:87:3f:fc:f4:
0c:81:11:98:ff:4a:8b:7a:34:da:4b:fb:87:24:56:
45:f8:99:ee:f4:a5:1f:0f:17:ac:dd:5b:56:d0:aa:
13:78:21:8a:2d:8b:1e:54:69:f1:f0:f4:0a:a1:55:
f7:cf:d8:ca:cf:bd:eb:ed:68:c4:9f:62:72:3e:ec:
af:4f:ba:97:95:48:fa:bc:3c:79:87:a7:68:92:06:
34:33:58:1c:cb:92:d5:51:1c:d9:b3:f3:bd:ea:5f:
85:c0:93:2d:e7:dd:ab:3f:9e:e5:15:35:76:9a:7b:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:54:63:30:9F:CC:F7:FD:7A:51:49:B7:43:37:EA:31:89:0E:02
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:43:d8:c6:5d:10:2e:fb:01:bb:73:50:c4:7a:1e:09:f7:98:
cc:3f:43:e2:23:d5:9e:5a:36:77:86:ca:58:e9:bf:61:65:5b:
f6:3e:df:b1:b2:fc:1e:de:d7:9a:09:e4:d8:30:29:ea:e9:88:
a3:72:f3:4a:ae:ed:17:ef:fc:1a:6d:12:3a:a1:65:97:f1:ad:
0b:19:9d:87:eb:68:97:f7:96:cf:ec:52:f7:25:71:ca:3c:a7:
10:94:05:cb:4b:9f:a5:7c:04:89:33:50:58:60:70:71:e4:b9:
a4:28:68:e2:ce:9b:7f:cf:b5:93:db:39:4c:2f:98:b5:1e:dc:
b8:47:65:a1:af:65:77:ed:1e:dd:75:46:67:d7:74:93:ad:98:
21:95:51:c7:54:a8:1f:2a:09:c2:36:85:bf:a6:2b:04:57:f8:
b4:92:98:30:d9:ee:e3:d8:60:bb:54:e0:40:66:27:63:0c:61:
23:52:15:7c:7c:9f:45:fa:00:f8:10:28:ca:b9:6e:ae:ec:48:
06:0b:70:74:68:70:fb:f7:7c:ff:03:ed:ef:33:75:51:87:9f:
d4:14:40:79:62:eb:4d:b1:55:d0:f1:92:5a:b4:ff:83:04:8c:
11:ae:82:86:25:5f:85:4c:89:a4:10:2c:60:e7:d1:f6:83:cc:
e5:53:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:56:47 2026 by rpki-client