Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: fk/ld+86hmMnHJtAwr+nwbJZl8wVVXjegdXgfqeIqSI=
Subject key identifier: E9:BB:5E:7F:B2:D2:C3:B5:4B:6A:7F:40:1D:6F:AA:95:45:7C:94:E6
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 019F9FCDBD1E1DCC180CD3CCEDDCB0DB7C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 19:01:28 +0000
Manifest this update: Sun 26 Jul 2026 19:01:28 +0000
Manifest next update: Mon 27 Jul 2026 19:01:28 +0000
Files and hashes: 1: H_QluTcmBXymBQ4nPpf21yCtfgs.roa (hash: uEZOVXv78aiCLR9+dOv0TDG+ndJ8sKw5tweYmG3KtMQ=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: cLOHIMRjqiCymAAjcrRgagNYCpH3dVlvQ3jk16dH4jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:bd:1e:1d:cc:18:0c:d3:cc:ed:dc:b0:db:7c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jul 26 19:01:28 2026 GMT
Not After : Jul 27 19:01:28 2026 GMT
Subject: CN=e9bb5e7fb2d2c3b54b6a7f401d6faa95457c94e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:dd:54:00:64:e5:01:41:41:39:51:41:60:
7c:2d:41:26:00:44:8a:61:c9:ea:49:e1:19:f6:79:
2b:a7:07:aa:d8:fe:be:ea:0e:a6:92:2f:cc:0c:cd:
29:6c:d1:be:88:70:ce:be:f0:01:33:c4:e1:f4:08:
7c:9f:45:49:1b:33:f3:02:4e:3e:0c:ad:7e:b5:30:
9d:27:61:e4:45:54:28:b3:98:1e:19:30:a4:3f:76:
76:d5:09:6e:c9:55:ad:75:19:13:d4:e7:ce:dc:a8:
e4:7f:ed:e7:d4:fd:ed:5b:48:12:be:b1:e6:e4:e6:
bf:39:a7:93:51:b0:d9:6d:17:e7:42:88:3a:71:09:
86:03:c6:32:02:14:21:4b:3c:32:8b:80:e3:3f:36:
24:84:19:a7:99:d4:9b:df:7f:a0:7f:11:fb:0a:09:
e4:2f:d6:cb:0c:14:1e:a2:f4:a1:27:af:bd:30:9a:
3f:67:bc:e7:57:31:1f:35:3a:3d:36:e7:0d:81:31:
7a:ff:92:03:95:a8:c8:2b:f1:33:59:74:c7:ea:96:
01:b8:2d:5c:1a:2e:de:74:d8:a1:62:e1:c6:9d:72:
a6:7c:2b:89:f9:b5:c8:0c:5c:56:62:e4:66:cf:90:
b6:1a:5e:52:ca:7e:a6:69:08:8c:16:78:27:90:c2:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:5E:7F:B2:D2:C3:B5:4B:6A:7F:40:1D:6F:AA:95:45:7C:94:E6
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:fe:d2:62:76:98:72:ce:eb:3f:02:7c:e1:3e:2d:8e:84:
97:ee:4c:d2:12:c5:dc:3e:6e:a8:3e:a4:cb:3b:b6:4f:27:ce:
31:21:6a:da:ab:09:27:f4:68:e9:db:b8:dd:99:78:24:55:47:
38:6f:00:47:25:60:25:6f:01:b6:20:e4:e5:37:5b:53:40:c8:
42:d9:35:f1:53:b6:4c:50:32:38:0c:36:c4:da:8c:3e:e7:d9:
d1:e2:bb:9d:d7:bd:eb:de:13:85:7f:30:88:12:d7:05:f9:4a:
9c:f1:28:a9:17:bf:5b:d5:0f:ac:93:05:a6:ab:7c:27:35:6c:
17:3f:43:74:f6:73:16:bc:c6:6a:95:2c:b8:0c:b7:e9:a4:99:
4f:9b:b7:e3:0a:46:73:c1:03:d4:40:e7:08:cd:d8:cf:ab:c2:
60:bc:f5:ca:b2:e0:38:6a:c9:fb:72:79:aa:25:88:8a:e4:8b:
17:13:be:f9:1b:3a:5f:4b:60:34:9a:18:81:c7:ae:73:e0:b8:
81:bb:a3:dd:86:98:d1:5c:78:9a:05:c3:84:0c:59:20:08:fb:
bd:31:d4:c5:42:96:aa:f6:18:35:69:f9:30:b3:0c:87:6a:0d:
79:73:14:3d:3f:c0:ce:78:cb:8b:c5:92:53:f3:04:e2:f0:7b:
34:c5:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:26 2026 by rpki-client