Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: gF11DRAKf22ICRAvEep+16C+QS2YpK9mFY1s6z+VuLo=
Subject key identifier: 71:09:55:4E:1B:22:93:39:12:12:70:91:31:7A:0E:56:79:50:23:3A
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 019FA0043D6A11A7C104E8E104BC8AEF187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 04BB
Signing time: Sun 26 Jul 2026 20:01:00 +0000
Manifest this update: Sun 26 Jul 2026 20:01:00 +0000
Manifest next update: Mon 27 Jul 2026 20:01:00 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: Jp7rh8AZ2cYV7b3BdxFXN7GV4/kGYKGKAc/E1BSPX8w=)
2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:3d:6a:11:a7:c1:04:e8:e1:04:bc:8a:ef:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Jul 26 20:01:00 2026 GMT
Not After : Jul 27 20:01:00 2026 GMT
Subject: CN=7109554e1b22933912127091317a0e567950233a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:e8:ec:df:f5:ad:3d:0f:94:7c:7a:5d:43:
d3:7d:79:59:7e:f4:86:4f:66:ea:2f:6b:91:42:ff:
09:82:f8:b9:50:d9:34:fb:eb:8f:53:df:92:c2:d0:
c6:ef:65:36:43:19:93:8e:c5:f3:37:ed:bb:02:3f:
22:ff:44:49:65:a2:78:f9:f0:c6:ae:0b:63:90:a5:
10:a5:82:09:ad:77:81:06:9b:91:50:dc:d8:e0:a0:
02:19:73:20:46:00:af:49:5b:0a:e7:3e:9c:41:3e:
f1:d3:9c:13:92:57:a8:30:c3:09:fd:d5:4b:b9:51:
34:a0:ec:92:b7:bf:bd:8d:92:31:64:03:ae:31:7d:
16:bb:7b:c6:86:8d:75:97:f1:c5:7d:35:23:8a:6d:
e4:eb:a0:8b:18:1a:73:2a:5e:60:3d:8d:41:7c:70:
5d:ce:b8:91:da:7c:cf:a8:a6:c1:16:b6:f8:2c:25:
20:19:85:0c:a6:a1:a4:c5:7f:85:c3:14:fd:2f:cd:
03:ce:3f:7e:4d:01:af:05:d3:d9:f9:f8:9e:a0:2a:
1c:29:c1:15:e3:f5:9a:ff:97:2a:27:97:14:aa:56:
26:84:45:58:cb:ee:53:c9:2a:a6:7a:5f:b1:85:d8:
3a:0f:dc:c3:25:ce:58:9c:57:9e:4b:83:a2:c3:e1:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:55:4E:1B:22:93:39:12:12:70:91:31:7A:0E:56:79:50:23:3A
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:c5:e1:86:eb:07:a4:44:48:c8:c4:58:1e:81:dd:3c:e1:
03:a3:bc:82:f9:ff:80:04:7c:b1:2e:99:96:5b:d2:44:74:fe:
61:50:43:e6:48:21:d5:6e:bd:1f:d8:45:d5:78:88:4e:49:e1:
68:32:b5:78:bc:26:28:6c:c9:25:de:cf:d3:8c:05:03:b2:68:
f9:46:d8:d1:0d:15:b7:17:54:6f:89:03:f1:b9:33:b9:12:3f:
b2:21:7d:a8:45:f3:ee:6e:35:e0:89:de:ed:6d:39:d3:9b:75:
5a:49:ca:0c:74:73:c2:34:55:3d:94:2e:58:5e:9c:b4:67:f6:
d7:71:a3:df:7a:a7:93:56:57:3e:2a:29:dc:c5:d9:b2:7e:2a:
99:5b:c9:32:b3:e9:92:8f:be:0c:1b:30:27:70:c1:ca:23:da:
cd:48:d8:0f:8a:be:65:c1:dd:df:3b:a1:df:f3:06:8d:79:de:
b5:6e:8f:b9:06:7b:4a:a0:29:f3:57:d2:88:8d:be:c1:52:f3:
25:4f:e6:4e:2f:dc:fa:b7:e7:4d:fc:1a:54:4a:41:e1:25:a9:
28:f1:1f:4c:bb:f0:96:af:30:4a:6e:e4:c1:9a:51:d5:0e:7b:
7b:23:c7:bb:ae:a9:b8:2c:ab:0a:d4:41:7f:43:a6:d5:81:70:
b1:5a:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:12 2026 by rpki-client