Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: OON/iqGSPxGx4uflDKLm1zU7uaMwnX0ba36/luiOvD8=
Subject key identifier: 5A:34:87:76:7D:3B:1C:89:4F:FC:22:62:89:2E:AF:A4:4F:85:E6:E2
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 019F1830785A9B0082B15A7F9CF321E4CE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0D32
Signing time: Tue 30 Jun 2026 11:00:57 +0000
Manifest this update: Tue 30 Jun 2026 11:00:57 +0000
Manifest next update: Wed 01 Jul 2026 11:00:57 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: VejyqsfHbVwL44n9tgen4Y9A2XeK9csgt62kajcBl/s=)
2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:78:5a:9b:00:82:b1:5a:7f:9c:f3:21:e4:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Jun 30 11:00:57 2026 GMT
Not After : Jul 1 11:00:57 2026 GMT
Subject: CN=5a3487767d3b1c894ffc2262892eafa44f85e6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:d1:8e:33:1a:5a:bb:e2:70:96:e9:9d:ff:
fe:38:3f:1a:65:18:c3:7e:20:f6:66:cb:b8:b2:e7:
d2:b3:34:64:b2:a3:14:ae:59:c0:47:5b:9e:99:7b:
32:3d:c0:82:93:37:35:16:c4:3b:e6:a3:1f:de:43:
3e:44:22:19:f8:3d:d0:7f:56:da:91:bd:38:a3:88:
01:07:8f:67:c2:0d:d6:55:12:39:8a:ed:36:32:17:
ff:2d:c5:d5:25:dc:60:e1:08:27:ed:45:38:2b:37:
45:61:ce:d5:ee:82:68:98:72:55:1a:e1:f3:6f:15:
79:cd:c8:3b:97:01:be:f3:87:aa:13:de:e8:fd:87:
c1:37:6a:dd:a0:b2:07:80:2b:58:9d:26:19:41:52:
b9:d3:2b:60:ae:d2:d8:ea:81:aa:38:e9:35:cf:2b:
8f:19:57:64:76:44:e2:e7:40:48:ac:9b:15:3c:6c:
24:69:ae:fe:df:43:50:c0:3b:e6:f7:33:55:1c:1c:
9a:e8:28:3c:f7:b5:52:80:73:44:5e:36:4e:8c:40:
27:c7:cd:65:fb:f5:ba:f2:c2:87:0b:e3:f6:29:fc:
b5:ff:f9:96:b6:2c:e7:b0:77:f1:b6:22:81:7f:0e:
cb:e0:0a:d2:9a:e7:e1:36:d4:78:fd:0e:8b:2d:db:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:87:76:7D:3B:1C:89:4F:FC:22:62:89:2E:AF:A4:4F:85:E6:E2
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0c:c1:72:e9:fe:27:b7:9d:17:55:b1:21:2a:52:9b:f3:8c:
3a:fe:27:f4:ec:b9:b7:8d:10:5f:61:f1:f0:f2:d4:02:62:1f:
06:d5:9b:ce:ae:cb:28:d3:01:f0:5e:0c:07:57:04:ca:af:6b:
23:7f:4f:4e:e6:9b:a4:7d:de:a6:d0:74:c0:47:44:e5:24:21:
71:99:89:38:5a:51:cd:fc:36:51:9e:8d:c9:e3:43:4d:76:bb:
bc:7e:80:64:e2:87:b0:d0:96:20:ab:60:ae:3e:1f:e3:af:03:
3d:e5:76:13:69:38:47:d3:1e:d0:67:f7:79:53:61:1e:ea:e6:
b2:51:dc:ec:b5:a8:a5:3e:05:93:50:c8:5b:13:e9:58:fc:e9:
48:c0:92:97:75:a2:22:8f:35:f2:97:af:5e:4d:d4:49:5a:4e:
e0:e8:7d:00:5f:da:07:2b:3d:31:5a:bd:ae:ac:8a:60:e9:2c:
f1:12:b9:c5:dd:58:2b:f5:ca:a6:bb:21:86:82:0e:03:13:b2:
21:00:14:df:b6:54:f7:91:83:49:62:08:ca:b5:df:1a:12:c0:
b4:05:53:80:fa:00:b4:8a:ba:bd:09:a1:be:e5:fc:7b:60:c0:
21:fd:7c:9a:3c:8e:b9:33:e0:50:93:6b:cf:d7:3a:3d:c8:11:
54:ce:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:19 2026 by rpki-client