Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: 3wCoR22H3XtjaY7MyzWjv8jTR8GdeUvlrDxQ3S1/Xyg=
Subject key identifier: B6:9A:35:80:FF:22:F6:1A:9E:2D:D5:69:73:9B:66:CE:CD:8E:49:B3
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019F19E88F12C468FD9040DC1670A1511A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 1019
Signing time: Tue 30 Jun 2026 19:01:39 +0000
Manifest this update: Tue 30 Jun 2026 19:01:39 +0000
Manifest next update: Wed 01 Jul 2026 19:01:39 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: NO9LRSJESp3sXynVWgD5C8Zn2hXUyAAYlgX4YKyD4BE=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:8f:12:c4:68:fd:90:40:dc:16:70:a1:51:1a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Jun 30 19:01:39 2026 GMT
Not After : Jul 1 19:01:39 2026 GMT
Subject: CN=b69a3580ff22f61a9e2dd569739b66cecd8e49b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:5f:6c:c7:05:00:50:61:83:00:7e:84:e0:
fb:86:25:cf:cb:bc:ec:15:46:a8:62:04:e3:06:6a:
b6:6f:32:f8:04:93:e9:0e:73:e1:9d:f3:27:94:4a:
eb:71:1e:71:99:0b:de:11:ed:3d:d6:52:09:61:42:
39:07:0a:18:f9:37:46:be:6d:58:e1:0c:7c:42:21:
ec:d9:5b:8d:9e:1a:99:b1:01:c6:39:22:b7:32:f1:
4f:04:80:23:4c:86:8d:d0:a1:0c:3c:1f:f1:a5:19:
df:4e:96:2a:4d:3a:bd:76:12:71:82:18:14:17:7e:
ea:54:9f:db:10:76:f9:c9:73:7a:e8:60:42:8a:2d:
d3:a5:6f:43:67:29:64:ae:8a:f8:c3:78:cb:81:5e:
e8:80:8d:2b:5e:d4:e6:c0:b9:26:0b:7b:bb:dc:6b:
cf:4e:3d:19:6d:ac:0d:ea:7f:6b:f1:4d:89:95:70:
a2:e2:d7:bc:46:5c:a6:d3:77:5b:7c:77:65:10:e3:
91:e5:e3:1b:e9:f5:0f:4c:8b:fe:77:9d:7c:dc:33:
9a:7e:5b:c1:7b:43:34:df:9d:8e:5c:e4:c0:2f:5a:
a8:89:59:df:bb:4a:fc:d0:a7:76:d6:62:49:e1:14:
5b:bc:8c:80:e9:90:24:4d:00:bd:22:68:52:ec:b1:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:35:80:FF:22:F6:1A:9E:2D:D5:69:73:9B:66:CE:CD:8E:49:B3
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:0c:73:15:af:73:5f:d9:6a:d3:f6:77:54:a7:55:22:26:
df:a0:e4:88:a8:90:a6:b4:22:29:20:0b:87:da:56:37:ef:f7:
fa:aa:cd:0c:2d:c1:56:e7:f3:46:4c:a9:fe:d9:8d:51:b1:c8:
3f:07:0f:35:f2:f4:24:83:21:05:d3:11:4c:0e:da:50:29:f1:
c7:45:85:c4:e9:66:c7:13:7b:34:79:34:1b:77:1d:ec:78:a0:
ff:d0:6c:e0:32:46:9f:fa:32:cf:3e:4f:54:a8:22:a2:60:83:
91:89:15:8b:e8:d2:85:a7:2a:75:0c:0c:ad:49:f3:2c:68:62:
c0:b0:e7:b1:64:d8:49:22:f2:1c:8b:50:51:c4:9b:17:ef:15:
4c:d6:87:66:2c:d4:ce:c4:5a:0b:c7:8a:10:62:11:c8:81:b4:
33:33:8e:26:69:0f:7e:a2:28:d1:26:fb:02:3f:4e:d1:a9:54:
e6:53:cb:45:34:3a:fa:e9:42:b6:ce:2d:53:80:18:2c:a8:10:
5b:72:6d:fc:70:80:ab:56:bb:bd:01:ef:46:f3:ad:bd:f8:7b:
8a:c9:b0:13:d5:3f:ad:07:55:78:d8:0e:8a:cf:26:e5:2c:17:
1e:04:f6:49:9f:01:17:80:12:83:9f:90:f3:8f:c5:4e:58:27:
47:e2:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:45 2026 by rpki-client