Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: 75d9BFkn368hKCLLn2bNKxb6HSFa3lsQgh4D0nppvJ4=
Subject key identifier: A1:9B:6D:E3:82:C8:96:6D:25:E1:CA:B8:60:38:C4:1E:21:98:11:C9
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019F1867F95FDA20F23B00FB2F1BE1E754A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 186F
Signing time: Tue 30 Jun 2026 12:01:34 +0000
Manifest this update: Tue 30 Jun 2026 12:01:34 +0000
Manifest next update: Wed 01 Jul 2026 12:01:34 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: 9Rj/Fprc1yhlcbEEzbZLdiB6BGvbQLTfRlonUrVe8SY=)
2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:f9:5f:da:20:f2:3b:00:fb:2f:1b:e1:e7:54:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Jun 30 12:01:34 2026 GMT
Not After : Jul 1 12:01:34 2026 GMT
Subject: CN=a19b6de382c8966d25e1cab86038c41e219811c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:9a:d8:49:f1:2a:0d:6d:09:e0:6c:d3:36:
78:28:d9:db:b0:b1:c1:59:6e:a3:f4:dc:47:15:c5:
40:b2:dc:c5:55:be:66:cd:49:5a:fd:8d:7e:59:fd:
be:7a:65:6f:05:01:a6:be:f3:da:42:2d:c4:e5:5b:
3a:55:47:4e:80:7c:94:8e:01:68:76:b0:e6:30:95:
15:a5:25:ea:a9:8c:ca:57:36:17:a8:95:d5:78:87:
0d:e0:4d:b8:03:38:79:74:3c:d0:41:11:db:a5:32:
93:1d:f0:ce:c8:f2:53:c1:cd:83:a8:93:a5:18:31:
c0:3c:98:bc:dc:22:ff:4b:ac:1d:53:0a:cf:41:b6:
2a:bf:ac:38:19:0e:af:f4:20:2a:7d:a7:71:0b:72:
e7:ae:87:84:29:1a:b2:de:e3:5f:68:ed:66:34:38:
be:c5:81:55:90:7b:8c:39:e3:dd:fe:26:c7:b8:25:
f0:b1:8b:13:7f:70:74:7d:8d:74:d2:ec:ed:2f:0a:
b3:1e:b3:17:aa:74:73:ff:59:d4:a8:04:41:e5:c6:
30:63:a9:d8:70:de:4e:1f:75:36:99:0a:c1:f7:13:
65:32:76:07:05:4d:ad:7a:7a:f1:d3:4d:50:75:43:
c2:26:c8:f3:51:f9:ca:99:1a:52:56:47:d7:57:19:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:6D:E3:82:C8:96:6D:25:E1:CA:B8:60:38:C4:1E:21:98:11:C9
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:dd:f4:df:5c:bb:7d:e8:88:7b:19:cf:15:77:d3:b0:04:
d5:f0:a3:68:e4:10:2e:99:0a:a4:e3:8d:50:f5:b9:be:e4:61:
39:44:9a:66:d7:49:13:da:8a:21:00:26:29:54:33:b2:33:cd:
48:6e:05:a9:c5:c2:11:90:23:ab:83:9f:05:39:b8:de:1f:97:
0a:39:c9:ab:e0:6e:04:93:46:fe:2f:01:fa:8e:c6:1b:2e:30:
47:ff:d0:5a:e9:f8:1b:f8:eb:ed:33:95:02:4b:7a:c2:0b:80:
5e:74:73:44:7a:30:81:f6:99:ca:bf:d6:b1:a1:63:1c:75:b3:
47:24:8a:a3:ff:61:f6:88:03:fd:72:ad:42:ad:f2:fe:8b:3c:
c8:a0:79:69:3f:0c:32:1a:8c:59:15:de:aa:86:1e:b1:d1:c7:
28:fc:b7:4c:a0:c2:75:e6:f5:4d:f0:70:0d:45:ed:fe:5c:76:
08:59:82:9c:9e:2b:ca:47:45:d5:ef:79:76:c9:02:ef:85:ca:
86:b6:65:6f:f9:79:67:c2:ea:8d:ef:71:18:df:b2:84:c3:e6:
39:ee:2c:74:78:33:b8:16:3c:35:a5:c0:3a:cf:45:9b:90:c0:
36:81:51:d6:25:d4:13:9e:b9:26:fa:b0:f2:7a:b0:82:5e:cd:
20:e5:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:43 2026 by rpki-client