Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: pWPX1qQm6bTOM3jFLKEK81c5OqdBgdi1WN8TXOwtWWI=
Subject key identifier: FB:24:13:0C:0A:F6:FC:A9:7D:26:49:21:06:9F:E8:D7:7C:FB:16:BA
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019F189E1A041C558F02FE3F37EB57516092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 17B1
Signing time: Tue 30 Jun 2026 13:00:42 +0000
Manifest this update: Tue 30 Jun 2026 13:00:42 +0000
Manifest next update: Wed 01 Jul 2026 13:00:42 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: 9rYYScA/DpK18lcm7TNx59a+uYxU1qZyEchMKvwBuQk=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:1a:04:1c:55:8f:02:fe:3f:37:eb:57:51:60:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jun 30 13:00:42 2026 GMT
Not After : Jul 1 13:00:42 2026 GMT
Subject: CN=fb24130c0af6fca97d264921069fe8d77cfb16ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:41:7c:f2:9a:7c:c5:24:11:c3:ec:18:51:
14:4a:4f:32:9a:21:a3:6e:55:3b:48:b1:bb:87:e7:
39:7a:07:e2:b6:f6:03:d9:c0:19:8f:65:c2:18:0f:
58:09:04:07:87:f6:ab:91:4b:fd:c1:4f:45:5b:30:
54:e0:66:34:8d:50:d3:ee:c7:97:a1:80:a5:85:bf:
98:9e:7d:be:ee:aa:01:91:f0:9f:a8:11:2b:16:a9:
50:d2:2c:c8:5d:12:5e:16:7d:d1:8f:b4:bf:c9:70:
15:10:56:11:61:1f:05:d5:e4:83:94:d7:d3:ce:57:
a2:ec:fb:4f:11:f9:90:04:a8:19:80:fd:c8:be:45:
e1:cd:d5:5e:63:78:a2:28:b2:3d:5a:e4:c8:ea:25:
7a:7e:25:f8:34:f3:6b:a5:0f:4c:c0:74:d2:db:69:
e1:7c:25:ce:bb:e4:d0:d0:74:3e:bf:6a:80:60:2c:
e3:4e:4b:20:2c:66:18:43:9c:6c:7c:67:3f:7e:f3:
d2:1c:ae:28:0a:cc:b4:21:02:ea:29:7b:45:71:b2:
bc:04:58:d6:8d:4a:78:5c:74:d3:87:3a:c8:a3:8a:
74:39:f0:91:8d:64:42:8f:67:24:41:63:e8:1a:ce:
81:01:db:9e:9b:50:cc:15:89:26:92:c0:0e:29:12:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:24:13:0C:0A:F6:FC:A9:7D:26:49:21:06:9F:E8:D7:7C:FB:16:BA
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c2:97:77:c7:5d:51:71:6a:c9:63:c5:16:3f:02:2d:fc:70:
d2:12:bf:49:12:e4:7e:e9:9d:de:19:87:9a:d6:c4:66:6a:d7:
46:7d:c6:73:8e:93:d7:72:a8:1f:ed:d8:ef:e4:09:58:53:94:
1a:88:f6:39:ae:12:80:55:af:6f:80:f5:81:06:c4:0f:51:98:
f1:93:2f:d4:4d:4c:8c:3a:2d:07:bf:26:9d:20:7e:7a:37:86:
e7:f1:ba:26:67:5c:ab:a6:f7:63:2c:e5:04:8b:91:1e:da:52:
43:ab:6f:aa:66:2c:18:0f:0c:5c:18:87:c4:74:f6:49:bf:31:
76:cd:c2:56:d5:fe:a4:95:4a:75:5b:ac:b5:53:dc:3c:a2:d3:
ec:c3:02:60:63:cd:e1:c0:cd:cf:07:68:5b:41:37:c7:83:16:
55:af:91:d1:02:5c:ae:a2:33:45:1c:c9:61:c4:29:4c:0f:8c:
7a:16:e1:a6:25:20:a4:9c:8f:7e:94:09:a3:1e:6a:07:ed:a2:
03:7f:8e:e4:fd:9d:ed:6e:57:84:3d:4e:47:c8:9a:c0:bc:5f:
a9:23:35:6f:35:f1:7b:dd:c8:e8:f0:0b:f9:61:53:5e:d7:64:
9c:0f:53:89:5f:fe:04:d4:f1:63:cf:82:37:94:12:9a:bf:36:
2f:3d:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client