Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: WeyyCQRNxlTsJM/ELcgYLXr4eLpWMvZPgnl/vcnUSdw=
Subject key identifier: EF:04:FE:5F:DA:1A:F7:77:EA:19:BC:89:60:AF:E5:CD:0F:0A:C1:55
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019F17C2DA118545F24979141F271884F332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 09:01:13 +0000
Manifest this update: Tue 30 Jun 2026 09:01:13 +0000
Manifest next update: Wed 01 Jul 2026 09:01:13 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: XAoO9ywa76bMa6PuDapIk6pj4/mRD/EWCTvWhSl6Ubs=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:da:11:85:45:f2:49:79:14:1f:27:18:84:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jun 30 09:01:13 2026 GMT
Not After : Jul 1 09:01:13 2026 GMT
Subject: CN=ef04fe5fda1af777ea19bc8960afe5cd0f0ac155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:48:6c:0c:fc:0e:db:05:76:e0:c4:2b:4c:
7b:25:11:ee:f0:56:e4:c9:8f:36:73:9e:83:68:26:
d9:36:35:c0:eb:ff:c7:71:d1:69:d1:f1:75:43:28:
63:dc:6d:1f:5d:34:f1:0e:66:76:16:83:85:40:f3:
0c:cf:32:9c:e8:7c:60:f3:f4:d9:5d:ee:40:55:88:
f3:0f:d6:c9:e7:56:da:62:cc:e4:d8:d0:e0:e5:f7:
65:b4:a0:e4:ea:66:ee:cc:31:eb:d7:9e:99:6f:1b:
e8:13:9b:c9:18:54:00:36:4c:97:35:16:5c:fc:a8:
81:0a:db:39:d1:c1:60:30:8e:8a:c7:e7:51:f0:30:
ba:cc:c6:d0:99:f8:8d:cf:7b:f2:3a:2f:83:31:b3:
01:0a:77:85:0a:79:fd:21:43:6e:3a:37:be:1c:04:
e3:f6:f6:98:9a:3f:e7:08:e8:cc:f6:28:12:c2:f2:
22:fb:ac:08:73:a9:af:eb:6a:33:09:e9:db:03:e7:
43:9b:db:09:ad:7c:8a:ea:43:e5:be:82:b3:f9:68:
13:e2:85:25:52:ec:3a:4b:2d:46:2c:22:59:43:3f:
96:84:9d:bb:c9:6c:7f:4f:1a:d4:d4:28:68:3d:79:
59:43:30:78:dc:8f:e9:70:77:a5:34:3a:77:f4:0e:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:04:FE:5F:DA:1A:F7:77:EA:19:BC:89:60:AF:E5:CD:0F:0A:C1:55
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:ef:12:50:48:75:e2:1e:2f:b6:26:c5:e1:ee:51:34:4a:
19:9d:e3:13:26:9c:ab:c4:89:14:52:7d:76:d1:17:51:9c:96:
51:dc:fc:80:3e:dc:48:a6:a1:81:b5:dd:0e:e1:a7:a6:63:ac:
c9:38:00:c4:36:dd:53:b6:63:d9:b9:bb:d1:0b:df:b2:79:64:
ea:30:92:42:31:4a:ca:69:8f:08:03:f7:16:03:1f:7b:68:d4:
70:3b:db:a3:86:b6:24:c9:65:8e:a6:73:76:5d:89:20:d8:ec:
30:90:81:f3:92:80:bf:45:a5:62:aa:38:9f:2d:07:16:93:7c:
f4:2f:6f:bf:77:9b:7e:e1:6d:61:76:0c:22:cd:3b:c3:ef:2b:
a5:7e:3c:ae:45:12:bf:df:95:84:8b:4c:94:bb:40:16:6f:b8:
f7:1f:75:2d:cd:83:0c:c1:48:67:e7:7a:b1:ca:99:6b:02:dd:
56:0d:c4:81:8f:93:20:3e:c3:03:8c:cd:4a:f7:6f:b1:47:a5:
3d:ab:1a:59:b7:78:bd:ee:7e:00:99:40:08:3b:a2:4a:de:7e:
13:07:de:35:62:13:7f:92:11:7e:54:b8:28:7c:f1:7a:37:f4:
6e:e8:f3:f2:9b:65:d4:7c:a8:d3:25:65:13:68:73:21:ef:32:
22:5b:ca:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:43 2026 by rpki-client