Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: KC2HMHEkdElxnRULxN4MO2NY6XRjkjgUxHPP1a1kDi0=
Subject key identifier: 18:33:CE:32:7B:D9:7C:7A:78:F1:42:30:3A:C2:EC:76:20:9F:A8:F4
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019F9F95C4FE03C8EC5B8406339C47DA0198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 1963
Signing time: Sun 26 Jul 2026 18:00:20 +0000
Manifest this update: Sun 26 Jul 2026 18:00:20 +0000
Manifest next update: Mon 27 Jul 2026 18:00:20 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: 3+IoIHFdeIupLoIS/KCxqpdJH5dchRBW8KhJ2+VWSyw=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:c4:fe:03:c8:ec:5b:84:06:33:9c:47:da:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Jul 26 18:00:20 2026 GMT
Not After : Jul 27 18:00:20 2026 GMT
Subject: CN=1833ce327bd97c7a78f142303ac2ec76209fa8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:21:ad:db:a0:92:0d:ef:4b:56:cd:25:e6:
26:06:69:51:fc:64:b2:30:f3:d1:da:65:56:38:82:
55:ba:b5:f4:8a:b2:ea:1b:1a:14:82:9f:29:04:00:
fe:12:02:2d:76:e5:fe:c6:6b:e8:b8:d6:96:03:62:
6d:e5:e4:c6:52:e0:c9:43:43:eb:65:f6:ed:52:21:
fb:98:f1:65:f6:53:89:84:7a:2d:03:8a:f2:60:a8:
f1:0c:84:83:c8:2e:cb:82:bc:06:a6:10:5a:4a:e5:
b0:b7:44:61:44:04:3a:88:7a:cf:79:fb:50:66:ae:
a1:29:dc:6c:5d:d9:08:4f:cd:4a:7d:54:37:28:29:
f1:43:96:a6:aa:91:28:6d:b4:2b:f6:41:77:8f:a6:
40:2a:40:87:50:56:15:49:ef:eb:11:b5:c4:24:82:
41:2b:0b:c2:9f:32:68:cd:40:83:c7:0e:2c:08:a5:
08:88:ac:e5:f6:3f:8c:22:37:14:a6:04:43:39:40:
46:8d:79:b5:41:6b:58:2d:24:eb:c9:c4:6d:d6:1d:
5d:ee:75:ff:f9:e6:6b:2f:57:9e:9b:86:8c:e2:e6:
f6:be:e1:a5:07:0c:4c:2d:1f:0e:79:cb:c6:45:14:
2a:57:4d:2e:c4:92:63:fd:95:95:83:73:a4:47:bd:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:CE:32:7B:D9:7C:7A:78:F1:42:30:3A:C2:EC:76:20:9F:A8:F4
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:65:a3:b6:5d:5f:33:ac:f4:69:c3:6b:69:b2:68:ba:a1:
11:55:a4:75:6c:65:38:df:30:d6:ab:f7:55:ed:7f:4a:11:49:
ac:e5:df:66:ce:16:4c:47:7c:bc:83:d2:a2:b9:66:e4:97:95:
6a:7e:1c:48:41:39:3f:f3:1c:ab:7c:ed:a8:4e:2f:31:a4:3d:
46:96:77:f5:4a:06:7a:69:0a:3d:9e:08:0e:7f:9b:2c:43:b2:
93:73:54:f7:64:be:c3:50:b3:4f:29:f9:2b:a8:3b:2a:a1:e0:
1d:80:8f:0a:d5:16:b1:94:26:8e:9c:c9:1f:9b:63:36:a4:1e:
d6:fc:e2:db:83:66:0a:7f:b2:5e:7f:a0:a7:99:57:eb:16:a9:
4f:c2:ea:d9:a5:bf:27:7f:7e:53:17:3f:1c:04:b3:5f:f6:8e:
fb:e5:c7:a0:97:e4:de:36:d5:5a:f1:d3:78:b7:0a:49:03:f8:
f9:b4:d1:e7:61:c5:ec:34:40:b8:e7:02:14:90:96:73:91:29:
5e:27:20:74:1e:f4:53:08:a0:4f:4c:52:7b:35:23:f9:25:72:
76:77:ff:75:2a:09:6b:e3:ef:7d:ca:a2:35:ba:4f:fa:2b:8d:
01:1b:92:06:b4:0d:9a:de:eb:9d:5b:76:83:b9:9a:d3:08:b2:
53:21:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:08:33 2026 by rpki-client