Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: MfmvxHinYBqkq1P/zYYbCR1/xmmWRech1JBy5Q7cF+M=
Subject key identifier: 55:92:C9:B0:EE:D8:C8:8C:B0:54:0C:1E:19:AB:C7:80:95:FE:D8:EC
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 019FA229146C7746D8795A1B7C52DDC5C1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 06:00:28 +0000
Manifest this update: Mon 27 Jul 2026 06:00:28 +0000
Manifest next update: Tue 28 Jul 2026 06:00:28 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: FhNvFQA8rNspDwINdGaiSjWd3914aMlqAS4fuUI4Y7E=)
2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:14:6c:77:46:d8:79:5a:1b:7c:52:dd:c5:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jul 27 06:00:28 2026 GMT
Not After : Jul 28 06:00:28 2026 GMT
Subject: CN=5592c9b0eed8c88cb0540c1e19abc78095fed8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:61:b9:73:88:47:9d:ca:de:f5:d1:03:94:
2f:96:64:da:a4:55:86:54:0f:47:cc:c6:0c:e5:5d:
0c:6d:39:d7:b7:de:59:72:71:65:31:4e:34:91:ef:
a2:f7:d7:ac:8b:be:ec:7c:e8:1e:5c:a4:ca:e4:42:
ff:2b:9a:87:b5:fb:a8:e5:ce:30:3a:1e:53:df:95:
a5:5e:3c:89:36:39:53:ef:b8:ff:93:70:07:e1:f0:
64:bd:5f:3a:c1:92:ff:26:96:3b:36:24:6b:ea:d1:
a1:ca:b2:86:24:70:78:08:57:a5:b8:30:06:38:47:
4f:f8:cd:43:52:ae:19:c7:79:90:bd:9d:f9:c1:c5:
66:f9:7b:a1:18:0e:34:80:63:cf:94:21:08:6a:fc:
03:d8:75:4d:1d:2b:53:85:be:f5:00:41:0d:05:b4:
2a:62:16:ae:b9:71:57:98:c7:fa:bc:1b:7d:c4:64:
90:93:3a:cf:2a:39:34:bc:ea:b4:a2:64:ef:62:3c:
09:51:98:8f:3c:79:16:42:0d:70:e8:d8:fd:3c:dc:
75:f6:1b:df:d1:28:ba:9d:2a:ad:e3:16:12:ae:d7:
e2:57:34:f4:f7:15:37:82:79:ae:f4:24:7f:6f:cf:
19:4b:84:db:a7:64:7c:81:da:1d:24:35:36:8b:7e:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:C9:B0:EE:D8:C8:8C:B0:54:0C:1E:19:AB:C7:80:95:FE:D8:EC
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:20:8d:ef:2a:91:50:e5:7a:6f:81:c5:c2:2e:49:6c:c1:e5:
3a:16:f8:f4:3c:2c:0e:81:b7:13:36:dd:e5:86:ec:3e:81:bc:
f2:29:93:fa:6e:e9:84:3f:02:46:bc:15:5b:6d:4f:86:eb:db:
c8:de:50:78:b6:92:79:13:14:d1:06:8d:a0:3a:be:b1:eb:14:
ef:47:a0:d4:a2:fa:5f:74:ac:ff:b7:3b:7b:a6:bb:80:b6:88:
66:64:89:65:67:63:fc:5f:c7:9e:a1:62:a9:2f:93:7f:48:ca:
87:c2:17:27:28:5a:e3:a9:90:64:c5:32:f6:3c:7c:e0:2a:1b:
90:9b:31:09:08:0e:51:23:33:a0:ce:a2:66:40:e7:7e:cf:20:
00:e4:00:3f:dd:c6:12:6a:33:8a:ee:78:65:37:73:92:43:e8:
f1:10:03:cc:7b:20:ed:7c:a2:c1:95:06:98:d3:48:d2:73:ec:
14:6b:b4:6a:1b:fe:07:9c:c7:6f:db:e4:3b:6b:04:a8:32:02:
89:d6:17:02:bf:ae:c5:80:03:e8:29:80:df:e4:07:ee:56:35:
3b:6a:2a:a8:5c:2b:ab:b4:f5:f7:49:6c:ba:51:86:52:ff:54:
00:2f:d2:0e:4f:df:ea:aa:a2:cd:8e:58:cf:41:ec:83:9a:55:
17:fa:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:35:40 2026 by rpki-client