Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: JqHtvPuW1xpWMjtN6B4bKjjhcGkrN0qvAf5c9A6DfxA=
Subject key identifier: B0:6F:9F:F7:0B:0A:BF:EE:5A:B3:41:5C:5B:30:89:14:75:80:85:6D
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01A001DC9CF3230F0C88E4BF5885E79B18ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0C4F
Signing time: Fri 14 Aug 2026 20:00:30 +0000
Manifest this update: Fri 14 Aug 2026 20:00:30 +0000
Manifest next update: Sat 15 Aug 2026 20:00:30 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: 7TMeD71bQp26S+ZimaMzkBC4ITXftjl+P+x3Dp1Ks9s=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:9c:f3:23:0f:0c:88:e4:bf:58:85:e7:9b:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Aug 14 20:00:30 2026 GMT
Not After : Aug 15 20:00:30 2026 GMT
Subject: CN=b06f9ff70b0abfee5ab3415c5b3089147580856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:9d:f6:b8:a4:47:24:c8:1b:69:e0:a6:a4:
ef:a1:f2:92:c9:75:be:ad:91:3f:13:d7:b6:d6:85:
40:15:9a:5e:cd:2c:61:82:71:62:d4:d7:65:47:01:
31:19:a5:8d:1a:00:a4:7b:3e:6f:5f:9d:2c:a6:af:
6f:32:18:0d:35:2e:f0:17:13:24:a6:23:60:89:2e:
12:ce:e4:19:bd:d7:c5:52:1a:80:06:be:26:a3:ed:
ad:a1:15:9c:85:df:a2:2c:72:f3:5f:44:ed:3e:1a:
0c:a7:32:31:8b:61:a7:aa:da:8b:06:9f:99:7f:2a:
4e:0b:58:6d:ce:e4:df:c8:65:a3:80:3c:3d:c1:2e:
30:5d:9e:29:90:80:23:cf:1e:21:6e:c4:af:c7:4d:
ae:b1:9b:24:99:9d:10:29:ad:76:8d:c4:af:9e:0c:
74:5c:cb:e2:cf:4c:21:42:5c:d4:96:f5:de:ab:ec:
86:2f:f5:d4:4f:40:ff:2e:2e:bb:f1:aa:25:d6:1a:
14:95:a7:79:8c:55:9e:90:f9:10:22:01:c0:bf:35:
f0:de:e9:99:c5:07:1e:ff:e7:e6:49:5c:ad:63:81:
1c:0a:1c:1a:b3:04:74:ad:e5:b8:01:c5:5b:67:bb:
71:2b:51:ba:6b:e2:14:6d:0d:25:e5:89:0c:47:4f:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:9F:F7:0B:0A:BF:EE:5A:B3:41:5C:5B:30:89:14:75:80:85:6D
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dd:70:08:5a:57:ae:4d:e7:b0:56:49:8a:f1:2d:bd:8c:fc:
d0:3b:2b:2e:e3:7c:4e:8d:35:2e:39:d5:3b:7a:db:f8:d5:23:
4e:26:e4:27:05:94:3d:43:ee:b1:f1:ad:0c:74:86:c9:63:17:
3d:7f:f6:84:1a:ad:7c:ad:28:12:64:5e:17:77:e2:30:9e:c5:
f4:22:58:77:a7:5d:82:a1:73:b8:4f:78:28:d9:e0:54:ad:db:
10:15:d5:87:54:1d:89:4e:6c:2c:db:0a:e9:b1:ef:26:60:d9:
7e:1d:85:5c:b3:bc:4f:e0:18:fc:88:c8:fd:92:43:02:c7:a9:
6d:1f:b4:35:3d:52:37:ee:a3:27:a0:01:91:95:e7:b0:34:bc:
ab:da:fe:bf:c2:b4:69:d4:08:97:6a:4b:0a:2b:00:42:2b:04:
e4:f9:84:2b:06:5d:62:ad:f7:02:8b:06:be:20:34:21:a7:97:
fb:15:cb:00:29:0f:ba:8b:02:09:3b:90:f7:86:50:de:3c:cf:
9c:23:73:4e:08:84:14:bc:91:94:d7:b4:65:97:4e:b0:1a:7e:
72:f9:cf:e3:22:c9:ac:3c:dc:c0:63:15:3d:4d:a5:23:f8:7b:
39:38:f9:7a:e3:a6:ca:a4:0f:cb:15:4b:79:e7:94:ef:77:4e:
6f:a3:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:21 2026 by rpki-client