Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier: +U5Fh6EZVctFifTipc8NL1sb6xNp0HEkazOON1SCpEw=
Subject key identifier: 63:88:57:9B:12:8F:39:8C:88:2E:CB:37:DC:11:AC:5F:91:73:12:25
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial: 019F197A5452B56C3722F8AA2DE3513CBF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 17:01:15 +0000
Manifest this update: Tue 30 Jun 2026 17:01:15 +0000
Manifest next update: Wed 01 Jul 2026 17:01:15 +0000
Files and hashes: 1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: iFpwzz8bnar25C+V0BG5iOXE9Ecss0QwZwdoMiqBogk=)
2: WqEnKFzBfeJzGRg3q0xQA818br8.roa (hash: p62OMTqeflTKBBGHK0BkC6wtW0ZeWTlpmF+DHVQ50XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:54:52:b5:6c:37:22:f8:aa:2d:e3:51:3c:bf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Validity
Not Before: Jun 30 17:01:15 2026 GMT
Not After : Jul 1 17:01:15 2026 GMT
Subject: CN=6388579b128f398c882ecb37dc11ac5f91731225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:12:68:8b:66:3a:01:49:fe:c2:6c:20:f2:
0f:91:26:56:2d:28:99:3f:ca:ba:c6:3f:d4:28:84:
5c:80:13:c2:b4:0c:51:64:ff:99:89:b3:8c:3f:6e:
6b:86:53:77:c7:97:61:e5:a3:e3:3f:f9:70:1d:e5:
64:91:a7:95:36:6f:9b:7d:d0:25:da:65:4f:32:ab:
71:d9:9b:2e:f9:56:03:40:e8:1d:2c:34:8e:32:63:
a0:19:90:7d:a0:45:20:6d:00:b4:53:a1:83:e2:65:
20:75:8b:c4:52:0f:c3:fe:34:4b:e6:a2:c4:e4:c0:
4b:e6:e9:41:0a:66:37:37:2b:03:92:8b:63:a8:76:
f4:68:66:f5:eb:ac:b5:3b:eb:d6:65:e2:9c:46:7f:
b8:e1:55:5f:51:33:c6:45:73:5a:6a:30:24:c2:93:
1d:42:43:d6:d4:12:dc:78:46:73:28:2a:4d:68:b5:
d7:ca:73:ab:85:e9:b6:a0:52:99:43:c7:23:d1:58:
0f:e2:fa:6b:50:52:fd:24:8c:eb:21:4c:35:18:47:
22:4d:e6:84:8a:52:4c:59:70:d9:45:6c:64:e5:17:
b1:6c:fd:91:ae:85:db:4f:e6:97:67:eb:c8:31:4b:
7d:2a:b8:98:19:d6:e9:62:f0:eb:fb:e6:6b:a9:61:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:57:9B:12:8F:39:8C:88:2E:CB:37:DC:11:AC:5F:91:73:12:25
X509v3 Authority Key Identifier:
keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:d4:b1:f5:66:d7:88:56:e4:2a:fb:3a:4b:ea:ea:73:48:
ff:3f:12:83:36:4d:f4:14:44:9f:17:9b:e0:4d:2d:67:35:0c:
06:03:ee:49:7e:7d:8c:33:f3:db:e6:dc:dd:59:1b:81:96:54:
f7:51:59:4c:db:b0:e4:22:b2:68:17:01:e7:aa:75:1f:e9:85:
f1:af:aa:10:0e:90:74:03:0f:f0:b2:28:3b:23:89:b6:d6:65:
50:bc:71:04:bc:ad:72:74:70:72:3b:ee:2c:ca:00:83:97:ae:
4e:fb:4c:5d:6f:b4:ab:8c:0b:4c:53:ba:d6:29:1d:e9:17:84:
d9:c5:f7:17:df:e9:5c:c9:88:26:4a:91:cb:58:99:6d:cd:f7:
b6:60:ff:50:6b:ee:e4:e3:59:b3:88:99:2a:98:4f:aa:0b:28:
cb:a1:f1:9a:49:4c:cb:bf:8f:fe:62:bd:bf:aa:85:c0:01:1a:
93:cd:89:b5:76:a9:34:e0:07:9f:4c:0b:4d:69:9c:08:60:be:
55:bb:7d:6a:42:13:eb:da:8a:32:07:a1:6d:fb:34:a3:5f:93:
92:6d:1a:95:6e:3a:eb:d2:e4:03:01:00:a2:ea:c1:68:d0:04:
62:c7:2d:64:d2:82:0f:4a:bf:f2:37:73:47:3b:15:d9:c1:14:
c2:93:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:46 2026 by rpki-client