Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: U+MW+JogntK+MgmBrxiky5BkPvM6cfi2SbtOZyhni6E=
Subject key identifier: 9E:B2:C8:D8:A9:4D:A8:04:F2:31:9E:02:1E:95:57:33:B5:90:97:E5
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019F10E4B4C54DFFF159D7365D243B0DA919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 018E
Signing time: Mon 29 Jun 2026 01:00:51 +0000
Manifest this update: Mon 29 Jun 2026 01:00:51 +0000
Manifest next update: Tue 30 Jun 2026 01:00:51 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: r6lJj5718fFAbLtbQjpWn4slzSF6yr/GAj7bsfF+LMU=)
2: T5AgIIaFdxy_1Zx7xMWIF5zHoBg.asa (hash: VlDdILGQpNO7PnepZreVOz2IeXfZ/rzSseatg3jF9EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:b4:c5:4d:ff:f1:59:d7:36:5d:24:3b:0d:a9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Jun 29 01:00:51 2026 GMT
Not After : Jun 30 01:00:51 2026 GMT
Subject: CN=9eb2c8d8a94da804f2319e021e955733b59097e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:d2:97:84:7c:7b:93:86:87:02:6d:d5:f6:
05:c2:85:ad:b5:04:2d:f3:97:1a:20:60:33:7a:66:
fb:28:ec:70:78:de:b5:5a:dc:bf:b5:11:f0:43:c5:
59:50:93:64:f6:1f:cf:e4:2a:51:8b:f7:11:25:a8:
56:5a:f9:9e:08:36:39:41:41:81:8f:5d:10:8f:9a:
10:97:47:f3:08:38:c7:86:c4:79:37:e2:37:eb:65:
d6:60:cb:9f:d4:27:cb:06:97:c3:16:9f:ac:b0:67:
65:b5:23:18:9a:0c:76:1b:05:af:c5:86:07:75:2b:
c8:78:f3:eb:4f:37:f4:e8:7f:ef:6a:30:44:4a:54:
75:42:92:75:8c:d8:ec:df:f6:80:e9:71:d3:9a:f8:
82:fe:e4:17:10:c2:71:3b:58:72:85:9f:7e:52:de:
f7:2b:60:f5:85:04:13:96:3d:d8:5d:d0:f6:f1:33:
51:05:07:2a:c1:d9:b6:a9:e7:1a:7d:f3:36:ea:74:
b9:ca:7c:20:05:46:96:05:6d:ef:ae:3c:4d:53:83:
9b:ed:39:a1:cd:1f:94:3e:03:ab:ac:6f:14:5d:34:
3c:d2:ce:7d:33:83:c1:e6:bd:13:32:75:80:c5:98:
bd:4e:b0:3f:31:5f:8f:f2:35:f0:97:1d:03:73:79:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B2:C8:D8:A9:4D:A8:04:F2:31:9E:02:1E:95:57:33:B5:90:97:E5
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:5a:8c:14:b9:6b:fa:af:bd:c9:bf:a8:49:aa:06:e0:24:
8e:05:1e:4a:b1:80:76:c1:60:82:7a:df:3b:60:a6:49:1e:3a:
c6:20:f8:ae:2a:2f:1c:89:33:42:5b:bb:35:0c:cc:4b:84:dc:
13:b3:0a:d2:e7:11:73:62:5b:fb:60:89:5f:10:81:f7:66:69:
02:d0:a9:02:51:95:e9:d3:26:e6:94:e1:03:d0:87:eb:52:b3:
15:05:d0:1d:db:ca:24:7a:24:7b:8c:a8:e6:c0:a5:a5:32:58:
e0:f3:bd:f1:4c:3f:7e:2d:8a:a7:80:9d:95:2b:a1:35:42:65:
19:69:80:e2:c8:e4:4d:25:e6:4d:03:e5:9c:ef:be:36:92:2b:
76:a3:71:d6:c3:54:c4:9c:74:2d:e6:76:4a:be:e6:2d:90:70:
b0:cc:67:3a:ac:c7:a7:6b:09:7b:df:fc:c2:e7:0b:03:bb:15:
e5:5b:23:9d:a4:27:cd:b0:2f:14:9f:df:84:f3:0f:d8:1c:a9:
be:19:f3:ed:af:48:52:8b:ee:51:c6:30:ff:2f:35:53:d4:a9:
89:16:de:ec:56:b0:23:21:64:f0:04:59:35:52:d1:3d:6a:31:
12:3c:cc:33:e3:f3:a8:a3:ed:01:e6:fd:de:0c:3e:2c:75:74:
d8:06:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:42 2026 by rpki-client