Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: m0rrvVkBiGKIh9L4esMQDXRumbzBuetBaa0KfrC9HIs=
Subject key identifier: AA:88:0C:7F:0F:9D:69:9D:79:D9:BD:EE:51:B4:96:A6:30:57:9B:BB
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019F1867F073A1492528E4423F08876DD333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0949
Signing time: Tue 30 Jun 2026 12:01:32 +0000
Manifest this update: Tue 30 Jun 2026 12:01:32 +0000
Manifest next update: Wed 01 Jul 2026 12:01:32 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: WoOMEraceKus+c16eZw2xSGmwNius6UCG7shdtIurXQ=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:f0:73:a1:49:25:28:e4:42:3f:08:87:6d:d3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jun 30 12:01:32 2026 GMT
Not After : Jul 1 12:01:32 2026 GMT
Subject: CN=aa880c7f0f9d699d79d9bdee51b496a630579bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:fc:74:67:bb:2d:dc:a2:14:3a:86:c6:8a:
8d:9b:9d:4a:b9:84:03:23:46:d9:47:39:76:6b:8d:
6c:d9:ab:31:07:6d:d8:08:e5:06:b5:af:28:be:53:
7d:dd:ba:f3:64:f1:9a:c2:dc:73:47:c2:3f:fb:3a:
50:43:c8:50:9b:87:2c:44:74:70:74:dc:07:99:64:
e4:bd:f5:f1:6d:dc:c1:88:00:ca:05:86:e4:e9:b9:
7e:51:69:8f:05:0f:0f:79:e6:06:34:4e:6e:b0:53:
30:9e:7d:4e:3c:cb:db:a1:85:46:f8:f1:39:88:1f:
81:d9:b9:61:87:ff:fc:5e:0f:59:f2:5b:52:c4:9f:
b6:77:56:0c:08:4e:d0:3e:31:f0:a9:f4:27:8c:4a:
7b:a5:19:e4:8c:72:4c:69:be:13:0a:16:dd:da:09:
56:37:ec:b6:45:02:9c:2f:34:18:d1:00:e5:8c:75:
e9:49:bb:a5:1a:08:8d:f8:18:fe:99:92:ca:12:55:
b1:93:c8:0b:20:db:0b:f0:18:e9:20:76:2c:d4:5a:
03:fa:6c:64:13:e4:78:e1:0e:bb:0f:c1:14:e3:47:
44:3a:00:a6:f5:f3:95:10:cd:0b:65:57:c6:84:50:
19:9b:64:e3:24:68:42:ac:39:e3:a0:5f:28:94:df:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:0C:7F:0F:9D:69:9D:79:D9:BD:EE:51:B4:96:A6:30:57:9B:BB
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a6:cb:97:23:00:0e:03:46:28:76:25:8a:b4:38:c8:d0:a8:
ec:6d:16:bc:e1:43:ff:93:fa:47:a4:06:42:7d:c8:af:6b:fc:
23:ca:e8:5f:1a:70:bf:28:f8:d3:5e:16:90:16:b3:fe:a7:81:
bb:6e:93:b7:ba:5e:db:51:4c:bb:43:00:18:89:f0:c9:75:e4:
95:ad:b1:15:dd:94:a0:ef:a5:5c:6b:23:1a:c5:79:da:49:97:
78:ae:c7:c1:e3:f1:10:54:0c:6d:ef:01:4d:24:27:4f:89:ec:
18:99:ea:6e:2d:1e:e6:7c:5c:2a:76:11:2b:28:0a:41:ce:ed:
b4:fd:49:f4:93:30:69:17:10:29:a6:3e:e9:76:ae:7a:ef:c3:
8e:17:07:11:90:0c:8f:8d:1f:0e:ff:34:2b:c6:43:3a:b6:d7:
5d:f4:7e:cd:5a:d6:3a:11:9b:fe:aa:14:88:c6:34:99:4e:48:
dc:1e:f9:57:f7:9d:b1:fa:49:53:95:24:ab:29:a0:9f:b5:ec:
af:0e:34:43:1c:06:ce:6b:df:98:b3:84:34:ec:fe:fb:73:ab:
ab:9a:4c:a1:53:4a:c5:44:1e:60:e0:87:e5:2c:ff:cf:ff:26:
8e:53:e5:df:07:e2:6c:cc:1b:b4:21:9b:c4:29:2f:47:a4:59:
94:6c:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:11 2026 by rpki-client