Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: hHRVjFquGmdyCwOdS+4QYt6iH6G++8dLWU6p14iAS+w=
Subject key identifier: BC:53:C1:07:6F:03:5F:CC:3D:4A:4F:7F:5A:FF:AE:23:0C:1D:F4:0B
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019F190CB582577BB79CC50579ED7A65BCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 120F
Signing time: Tue 30 Jun 2026 15:01:31 +0000
Manifest this update: Tue 30 Jun 2026 15:01:31 +0000
Manifest next update: Wed 01 Jul 2026 15:01:31 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: sXQkIESU5W+pt5tHE+HGiVKujlQ7+VdUCrMMnDdxzPA=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:b5:82:57:7b:b7:9c:c5:05:79:ed:7a:65:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Jun 30 15:01:31 2026 GMT
Not After : Jul 1 15:01:31 2026 GMT
Subject: CN=bc53c1076f035fcc3d4a4f7f5affae230c1df40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:6c:65:e9:8f:59:8e:7b:41:45:0a:5b:08:
fe:ce:ee:d4:55:49:0f:b5:6a:ec:85:2b:b4:08:c8:
66:1a:be:4a:f7:c3:02:0c:64:5c:b3:16:68:0f:bd:
88:e0:a1:f7:ec:f0:92:1c:76:2d:ad:5a:d0:b6:04:
1b:c3:7e:88:59:57:3c:91:5e:e6:ed:30:ed:e1:2e:
6a:d8:0c:f6:1f:d0:07:80:c6:18:7a:c7:a4:46:03:
6d:b4:ad:4e:fd:65:37:ca:91:92:3d:88:d5:04:d9:
cc:4b:93:a4:13:38:43:ca:c6:d2:62:e3:7c:21:1a:
c9:44:5b:3b:b0:47:4b:a1:4f:d8:21:c4:0d:14:19:
77:35:c9:9e:b2:b2:da:e2:37:3f:c6:f2:cd:dc:a9:
88:2a:a0:df:84:59:76:e4:58:a2:9a:08:81:41:e4:
23:82:8d:7a:1d:80:a2:20:fd:84:71:b2:57:a7:47:
bc:d1:29:db:1b:91:d6:9c:d4:6b:7a:a4:74:70:df:
b2:98:bd:33:df:62:7c:7f:88:3d:71:8d:85:dd:b9:
0e:4a:d3:d0:ff:e0:65:9d:2a:53:da:c0:83:c2:0c:
5f:fb:2c:61:f8:3b:74:25:51:b0:80:fa:03:7e:cb:
cd:a3:63:e2:88:c3:e6:22:0e:1b:0a:4a:73:d9:7d:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:53:C1:07:6F:03:5F:CC:3D:4A:4F:7F:5A:FF:AE:23:0C:1D:F4:0B
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9d:87:0a:97:89:b7:5a:bb:77:ca:b9:b7:35:ea:14:48:4b:
09:b9:b9:45:58:b6:1f:ac:02:ca:91:c1:47:90:a5:6f:2a:16:
4e:3d:4b:32:ce:7f:10:00:4e:49:ec:30:73:1f:bb:04:90:b0:
7b:98:86:73:cd:49:1d:0a:91:ce:8f:8c:5f:8e:c5:65:c0:a3:
ac:da:3d:a5:3c:03:be:0e:e0:4e:c0:70:03:4f:28:08:b6:d7:
3b:24:49:5d:eb:ca:11:a6:09:13:33:39:49:f3:02:79:82:6d:
7f:a1:38:87:00:c8:35:a8:31:d9:61:98:ec:a8:56:35:f5:03:
3a:b5:07:58:70:33:57:0c:7e:fa:03:11:a6:f6:cf:15:57:3d:
c8:9c:5d:6b:36:66:f2:30:1b:05:e8:d1:3a:fa:e9:aa:d5:d9:
1f:9f:36:85:a8:07:58:cc:4d:65:96:94:14:d6:fc:74:d4:25:
63:80:d7:b6:c3:ba:45:7d:ba:08:5a:8a:c7:1a:00:48:be:76:
e7:0d:77:92:83:a9:59:93:97:ad:a4:39:0f:5a:d3:46:e0:44:
c0:bf:7a:ea:a3:d5:5e:a6:67:2e:49:88:50:37:bf:f3:09:fe:
2c:87:1b:77:91:ed:00:76:28:e8:1b:d6:6c:78:f0:ad:58:d2:
1b:4f:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:24 2026 by rpki-client