Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: nLf8/+PqIq0BMNLYQEkfPUJah6QN7dc2OTtYeu1pXTc=
Subject key identifier: A2:C0:26:14:FB:17:38:8F:29:57:C2:47:2D:CC:C3:B8:0B:95:71:CE
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 019F70CF377EDA9D39D3FEFFDC543C8600C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0C85
Signing time: Fri 17 Jul 2026 16:00:55 +0000
Manifest this update: Fri 17 Jul 2026 16:00:55 +0000
Manifest next update: Sat 18 Jul 2026 16:00:55 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: 82Kh02Xr4x1IzvnjwsqpmtJMzXOsw74Ij8y8grqOQgo=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:cf:37:7e:da:9d:39:d3:fe:ff:dc:54:3c:86:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jul 17 16:00:55 2026 GMT
Not After : Jul 18 16:00:55 2026 GMT
Subject: CN=a2c02614fb17388f2957c2472dccc3b80b9571ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:69:b4:85:f4:f6:7d:fd:97:d4:8f:dc:cb:
5d:0b:e9:f7:c8:6b:93:8f:db:58:47:18:d5:79:e6:
47:e2:a8:99:52:22:45:04:45:2d:aa:a9:9d:06:5b:
62:6d:36:45:7f:2e:7f:91:b5:01:cd:55:b7:49:90:
07:71:80:3a:b2:3d:2a:10:9e:9d:24:09:77:a8:c6:
7e:ec:b5:f2:df:73:5b:3e:30:34:ba:4c:99:54:d8:
0f:9f:c4:c4:d3:e3:ab:ef:42:92:2d:40:55:4c:ab:
f1:d0:4e:67:27:88:64:23:31:34:7e:f3:1d:b4:a5:
e6:92:c2:bf:dc:24:f1:ec:e8:6d:e1:66:c3:f1:c4:
52:2a:1c:5d:a9:a4:a8:52:27:70:4d:3a:6e:bf:84:
dc:52:52:7a:4f:68:0b:2f:87:3a:04:60:fc:90:1e:
91:ba:e0:9c:b5:92:4c:a6:0f:94:b1:ce:40:0f:d7:
68:5b:fb:89:f7:09:88:13:82:9d:28:d3:c7:bf:8a:
b5:0f:97:f6:23:53:a0:5a:a9:2a:19:d2:7c:63:a6:
af:8f:b3:37:e1:b9:ac:38:22:a2:48:20:53:99:ff:
f7:eb:3b:1b:d4:06:b6:58:95:ec:f7:bf:b1:f1:92:
ff:6d:94:b1:7f:1c:5a:b3:7c:85:76:8c:78:e1:3e:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:26:14:FB:17:38:8F:29:57:C2:47:2D:CC:C3:B8:0B:95:71:CE
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:45:96:8a:1a:26:66:90:a5:b3:ab:fb:9b:28:00:06:d8:
93:78:09:d9:e0:62:29:84:ad:97:d2:19:c0:d0:db:b6:8d:3a:
a5:fd:a2:1c:04:2c:4b:4e:c8:86:f4:68:f1:c3:61:09:80:d5:
49:8d:fd:db:f2:fc:49:c1:3c:6c:7b:a0:50:9b:ea:2a:39:8e:
ab:36:01:ec:3e:44:76:8d:a2:e5:10:e6:25:61:2b:59:d4:32:
20:04:b5:33:5b:b1:fc:42:ca:63:71:17:21:f6:7f:94:d7:a3:
dd:c3:fa:b9:cf:f5:03:27:d6:38:ce:05:69:b1:d8:74:c3:7f:
da:92:c6:23:9f:41:db:12:ae:5b:1a:42:83:d7:33:a4:47:f3:
c4:ea:20:e7:24:33:fd:ed:5f:00:73:91:15:06:07:9a:b9:94:
70:d2:09:96:df:72:3f:67:a0:2d:0a:7b:2c:51:18:e5:5a:1c:
bd:7a:6b:4b:19:7d:2e:7e:85:c2:5d:dc:34:dc:3a:1a:ac:b2:
e9:33:2a:c3:02:d1:9a:81:83:8b:7f:8d:0a:5e:18:46:54:8b:
7d:f9:c2:23:f7:a7:fb:ac:0e:59:ed:88:d0:a8:ac:3a:76:be:
38:1e:69:ea:d9:ae:a8:da:f3:6c:e0:d6:42:75:01:ce:cc:e2:
62:72:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:51 2026 by rpki-client