Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: 33XuJcHICBDXKD82qleulgORktFIQ0CfVKxbUsyQlvw=
Subject key identifier: CD:9E:BA:C8:69:D1:AB:0C:98:A4:0B:4E:C5:D4:E3:C1:72:DF:6B:26
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019F183033EE1571AAC323C24B35974C8033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0BD6
Signing time: Tue 30 Jun 2026 11:00:39 +0000
Manifest this update: Tue 30 Jun 2026 11:00:39 +0000
Manifest next update: Wed 01 Jul 2026 11:00:39 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: lAOmvVSHX5zIdK59sNfZwfU63s1iEsdXsZ5GI1IoKBg=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:33:ee:15:71:aa:c3:23:c2:4b:35:97:4c:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Jun 30 11:00:39 2026 GMT
Not After : Jul 1 11:00:39 2026 GMT
Subject: CN=cd9ebac869d1ab0c98a40b4ec5d4e3c172df6b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:50:06:9b:27:02:94:bb:2a:cf:f1:77:60:
5e:6c:d8:54:44:51:f6:80:68:38:1c:ca:9c:12:34:
cb:27:b1:b4:fa:f0:d7:95:6f:aa:1b:3a:88:95:53:
10:82:18:1b:10:fd:5b:54:b4:3f:8d:4f:c5:b9:a3:
ec:a3:fb:80:7c:be:cf:65:40:04:46:68:ec:64:bc:
65:43:0e:f0:68:d8:7d:5e:2b:a7:de:e1:da:88:18:
56:04:d1:70:ec:0c:a6:17:7e:5b:23:52:33:a0:e8:
7e:d1:66:56:a9:1c:62:75:1b:5c:79:8a:09:71:99:
e3:c8:8e:07:b9:65:ab:b3:6f:e7:44:01:ef:3d:32:
59:64:3c:31:17:a9:4e:78:73:f1:a6:4e:a3:36:da:
f8:91:5b:b7:48:04:da:e6:2e:02:95:12:29:6b:be:
88:8c:d1:9b:1d:6d:3f:ef:3f:67:85:4c:f1:75:9f:
1c:09:67:d4:cc:0e:d1:b5:21:d7:e9:2b:1b:91:ef:
4b:d1:f7:2d:9a:1c:5f:f2:f9:7a:7f:00:07:63:2f:
59:ae:dd:50:87:8a:47:74:ba:97:b7:e7:a0:33:25:
a2:55:68:a9:c9:f0:3a:76:44:2e:68:e1:9e:25:f3:
8a:5f:6e:c2:2e:28:42:2c:64:67:90:a4:b4:02:70:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:BA:C8:69:D1:AB:0C:98:A4:0B:4E:C5:D4:E3:C1:72:DF:6B:26
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ef:cb:6f:18:59:cb:6e:1f:19:61:a3:05:72:4d:06:97:8f:
55:04:13:9c:92:2f:a4:09:fc:0d:66:6c:c5:8d:d1:1a:6a:a9:
51:e4:78:de:56:7b:f2:e4:dd:bf:04:1b:a9:e9:c3:e2:fc:1b:
10:6b:ac:51:92:e0:00:12:5d:ed:ab:60:8d:13:3a:08:4b:2c:
d0:4b:13:af:90:4a:1f:e1:f4:a3:34:6c:3e:06:55:6b:fd:32:
b1:2c:84:6f:9a:72:d1:d1:41:6a:31:df:f7:45:ae:66:93:bb:
70:ac:b5:b3:b4:0a:dd:e0:91:09:9d:57:00:3f:4d:51:da:d8:
e8:cb:5f:d2:69:32:52:30:29:53:b3:c8:05:c6:7a:c1:19:d5:
9d:52:15:09:73:d4:52:b1:5c:11:24:4b:8d:11:dc:c6:6e:d5:
e7:3c:77:a1:e5:9e:2a:1e:d3:8c:f8:9b:01:a3:65:f1:0c:c6:
04:50:ea:cc:8f:ea:ba:af:af:3a:f1:8c:c6:4c:40:e5:d0:e6:
0b:f2:71:db:5b:38:4c:a5:27:07:ef:69:47:5f:e2:58:fb:35:
a4:ab:40:5e:b7:e8:f3:7a:2f:9c:56:1b:61:8c:8a:eb:a0:8a:
5e:39:93:b8:99:a6:3c:83:e2:c0:4a:88:ca:ba:bd:e2:87:8e:
a1:e0:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:15 2026 by rpki-client