Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: DK1rtdQFubyaWg1D7FVWeElGlBfTbHO4jQImry5X/D4=
Subject key identifier: 85:F0:95:D7:BA:5B:DB:C6:2B:49:BC:06:CC:36:13:C0:03:8E:A5:0F
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019F1830EC12900884C544286B5D04B0BC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:01:26 +0000
Manifest this update: Tue 30 Jun 2026 11:01:26 +0000
Manifest next update: Wed 01 Jul 2026 11:01:26 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: MNHMFZF1B8pM9Wq0XCv0f9nl7EsUEVX66y9toKDFno0=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:ec:12:90:08:84:c5:44:28:6b:5d:04:b0:bc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jun 30 11:01:26 2026 GMT
Not After : Jul 1 11:01:26 2026 GMT
Subject: CN=85f095d7ba5bdbc62b49bc06cc3613c0038ea50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:99:e1:f0:73:33:3b:98:c8:eb:bf:74:d3:
08:02:22:cb:c7:f4:fa:0d:7e:5c:bc:f4:75:78:bf:
76:9c:ff:ae:c4:6d:8b:a2:1d:7a:87:9f:75:c3:ad:
4c:0f:b4:09:9c:16:40:e2:7a:77:61:35:8c:aa:08:
e6:45:a4:28:89:25:b8:af:11:2a:26:e6:3e:a5:b6:
34:62:a5:6d:3e:4e:fa:6c:cb:f9:b5:50:b4:84:81:
0a:3f:d2:e8:16:69:f4:81:69:1d:10:14:53:84:7d:
66:3d:b0:87:42:cd:04:09:7f:b7:8e:cf:8c:1b:98:
a8:f4:3f:98:ed:30:7d:2a:c5:5e:09:35:25:5a:1b:
e9:27:eb:8e:83:04:97:16:a7:bb:03:77:93:76:f8:
3f:33:6a:d9:35:aa:0a:39:1a:53:29:4f:b0:ff:5a:
af:27:ce:e3:96:1b:48:7e:6d:82:f3:f6:63:36:ca:
7a:7e:8b:25:fc:d3:9f:7a:5e:95:3c:a4:72:c7:6c:
17:40:da:ef:31:f6:86:03:a9:88:85:a4:e5:4e:90:
f8:08:80:63:6e:af:35:c3:95:a9:e6:93:d2:2c:81:
9d:62:71:0a:7b:94:02:f8:c7:57:df:56:a2:57:ed:
aa:a4:7c:3f:e5:76:a7:78:38:db:ad:64:66:aa:8f:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:95:D7:BA:5B:DB:C6:2B:49:BC:06:CC:36:13:C0:03:8E:A5:0F
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:41:9a:d4:db:47:d4:a6:d4:c5:63:b0:61:98:73:c2:83:12:
18:43:a5:5e:bb:31:d2:fe:8c:02:96:56:63:fd:67:f3:19:90:
15:ac:29:f0:40:d2:9a:a5:16:aa:7e:2b:b7:69:83:a6:47:90:
9b:8f:aa:44:48:cd:29:ab:d2:5a:cb:70:6a:d5:c8:c6:02:02:
ec:77:c8:34:27:cd:6c:27:05:33:35:74:c4:3a:28:63:ac:4b:
46:11:cf:5b:7c:a2:d9:de:55:32:ea:ca:e9:20:24:0a:ea:b1:
2d:73:6b:c7:36:8e:8f:f6:a4:91:7a:d2:3b:24:d9:1a:59:2c:
4e:e2:0c:39:45:4a:1b:56:f8:7c:5a:58:d6:56:cc:1e:d0:4e:
b3:6b:58:2a:7d:1c:1a:8d:17:cb:10:ee:39:b5:40:ca:ed:f5:
f0:26:b8:15:c4:bb:31:50:e1:c7:9f:be:43:9c:0e:f6:bd:81:
7f:8a:25:c2:fe:1d:e4:a6:28:fc:e5:3e:f5:7b:44:42:74:25:
73:6b:79:86:97:4b:80:9d:a1:34:af:c0:c6:04:df:af:b5:7a:
fc:44:87:24:e9:07:fc:14:48:1a:95:96:c9:0d:16:96:69:c0:
96:b0:d2:9a:e2:35:5d:99:e8:2f:15:ef:e6:b6:f8:e8:4e:9b:
cf:9f:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:46 2026 by rpki-client