Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: V8PUfhZFPEKmc8BPKPwuBhppSE6omxFMHrLUuDD0DpI=
Subject key identifier: 61:D5:17:36:2D:A9:B9:03:AE:16:BC:9D:4C:8A:7D:40:19:D2:11:9F
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019F1867A1F71C485A547BDD40785F15655A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 12:01:12 +0000
Manifest this update: Tue 30 Jun 2026 12:01:12 +0000
Manifest next update: Wed 01 Jul 2026 12:01:12 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: O19rzvqDhJEwEwSWN3BvH2ylMe3v9rKqp9PnYghGWWo=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:a1:f7:1c:48:5a:54:7b:dd:40:78:5f:15:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Jun 30 12:01:12 2026 GMT
Not After : Jul 1 12:01:12 2026 GMT
Subject: CN=61d517362da9b903ae16bc9d4c8a7d4019d2119f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:3b:e1:af:4f:d3:d2:83:e1:94:98:6d:3b:
15:e4:d4:3c:0f:82:d2:b7:c5:ca:17:9f:b8:2e:80:
d9:c6:74:54:b2:a6:7e:eb:ea:06:21:80:32:30:63:
e3:fb:7c:8b:15:8b:8a:a3:12:4f:1a:fe:03:26:d9:
e8:21:db:4c:11:f3:59:36:c1:8b:e2:36:1a:f4:5a:
af:b7:42:3d:f9:5f:b3:fb:6e:b2:d4:79:15:55:2e:
a1:37:cf:a0:0b:42:79:dd:63:02:83:0c:2c:fc:46:
94:d7:bf:85:27:ec:ff:73:c5:a4:d2:a8:fd:6b:1d:
42:7b:1d:00:0e:b5:fe:6f:14:c9:02:7e:ea:41:76:
2c:88:4c:87:29:22:f6:07:f5:6d:4c:3b:0c:b4:59:
c2:95:17:04:94:c1:45:de:cb:7b:b1:af:1a:71:df:
56:84:ff:86:c7:66:f0:d4:bc:8c:57:fd:8a:10:7a:
3b:0c:ec:ea:cc:df:56:80:a2:91:cb:fc:65:c7:cc:
d4:df:d7:c6:83:f3:fb:ea:14:8a:80:db:c0:10:f0:
e4:6b:4d:68:df:07:06:fa:b3:aa:ac:c2:e2:b1:3b:
76:d8:ea:ef:02:40:3c:32:83:b7:a0:a6:21:27:08:
09:1e:2c:a7:7c:a4:c5:49:56:12:6f:65:e4:04:58:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:17:36:2D:A9:B9:03:AE:16:BC:9D:4C:8A:7D:40:19:D2:11:9F
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:96:0a:25:3c:a5:38:b8:cb:3e:47:eb:57:b2:4f:7f:97:a1:
d7:28:c7:0a:cb:9d:69:59:e5:94:fd:7a:b7:ea:63:a2:96:6d:
e0:5d:3f:31:88:3e:1e:68:91:72:f3:c3:e4:82:b9:4b:1d:ed:
8f:17:a7:97:cb:a3:81:a7:0d:95:e3:ba:f7:4e:60:16:c3:6a:
e0:4a:89:e5:33:0d:1c:da:a1:9f:74:ce:2e:40:77:5e:05:2a:
ee:aa:af:4f:14:ac:c3:c1:a6:ef:3a:d6:2d:64:98:d2:41:94:
60:2a:bb:f5:3a:e7:32:16:7c:c9:19:9a:e3:59:61:60:61:95:
54:f8:7e:b3:c6:91:08:68:17:ba:26:e9:4b:72:4e:4e:a7:de:
99:29:61:3a:1f:df:08:df:b1:f8:12:b7:ac:3c:a4:fc:33:44:
ff:a2:e7:6e:28:aa:27:75:18:3d:31:fb:0e:f2:0e:07:c2:2a:
ff:1a:77:74:b3:3d:aa:6c:60:59:fe:a3:46:e6:f0:aa:52:73:
00:ba:26:5f:59:1a:b0:76:1e:a1:3c:0f:6f:89:0d:2f:87:08:
d2:6e:d2:f3:04:6a:da:a3:2c:23:d0:1a:ba:b5:a6:55:38:d9:
84:32:06:02:55:a8:c2:9e:9e:62:e3:27:5b:58:96:18:69:aa:
9a:86:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:11 2026 by rpki-client