Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: fmYcw/JZ+ITR6NiAH4IFRQTyT55OIQcR+VddYkmeKuI=
Subject key identifier: 25:25:7D:4C:DE:8A:8B:1E:87:5E:E8:7B:AA:F5:FB:8C:03:B4:CB:A7
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019F547C15A326F72236C1C03C40F33A9472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 01A2
Signing time: Sun 12 Jul 2026 04:00:45 +0000
Manifest this update: Sun 12 Jul 2026 04:00:45 +0000
Manifest next update: Mon 13 Jul 2026 04:00:45 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: 40LqjpKFIHGyQUZVXLX7Pz5Zvf2qA5wPYkeyCI8g3s0=)
2: RkMX5Ozt-aBvg83tpif5dYWlIs8.roa (hash: sE97AqRK+jdlW0OvHBvltFQHWQ2HKYV5m9H+8L8sv/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:54:7c:15:a3:26:f7:22:36:c1:c0:3c:40:f3:3a:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Jul 12 04:00:45 2026 GMT
Not After : Jul 13 04:00:45 2026 GMT
Subject: CN=25257d4cde8a8b1e875ee87baaf5fb8c03b4cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:6b:a9:13:f1:08:30:62:32:6f:25:9d:84:
f7:f6:92:34:c1:24:3d:d1:c3:cb:02:f4:b4:a9:33:
fa:a8:5e:e4:44:53:3b:8c:d4:87:35:67:56:36:e6:
48:16:ba:7f:7d:06:12:a9:81:d3:c7:d9:53:68:e5:
d4:53:ec:9d:91:19:b3:f8:49:bc:11:4b:38:df:78:
77:e9:f1:2a:55:be:f5:09:4f:13:74:1a:8e:04:18:
91:ed:ff:e7:5f:e2:7f:ab:5b:30:f6:e7:0f:53:bf:
c4:3d:a8:e7:43:71:c1:37:54:76:5b:02:0f:06:c2:
83:32:92:ca:c0:c4:bf:92:fd:ea:5d:fd:00:27:64:
fb:47:e2:66:04:c7:75:5f:09:bd:73:31:e7:86:72:
14:38:9a:ce:e2:ae:a8:13:6f:27:88:d2:a5:e3:50:
66:69:bf:09:2b:45:05:88:1c:a7:8a:d4:3a:f6:64:
a0:a0:5c:3c:09:1d:df:9e:8f:ee:a5:3c:a5:9c:ab:
c4:7d:cf:2e:59:f3:a8:8e:cc:2f:ab:b2:7f:5c:4a:
6a:e3:1b:75:2f:2d:a5:b4:3b:58:c1:9c:f5:66:dc:
f9:55:ca:9e:73:2d:24:4f:d5:f6:65:17:5e:f6:89:
26:68:c8:57:df:ce:19:9e:a2:3b:e5:5b:3f:21:e3:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:7D:4C:DE:8A:8B:1E:87:5E:E8:7B:AA:F5:FB:8C:03:B4:CB:A7
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:13:48:ba:bb:a5:87:3f:1f:bb:43:3f:14:6e:b4:99:e6:5d:
7b:d3:0a:a3:bb:d7:8d:da:c1:e8:97:7d:86:c1:1d:ee:f1:9f:
c7:d7:c9:19:11:13:1e:7f:12:1e:94:23:1a:fc:2f:35:cc:44:
c0:cb:42:c7:28:1c:e4:f4:28:a6:53:d2:49:3d:58:3b:91:1a:
65:a6:1b:5d:a6:5f:b8:9b:a1:d0:c5:89:8d:cd:47:98:d0:ab:
0b:e1:6c:f6:8b:4a:30:f7:98:82:e1:ff:46:0e:07:44:c2:02:
b6:ac:ee:ad:59:a7:1f:d1:9d:6e:33:a6:c2:68:70:79:d2:7d:
ad:20:3d:1f:2d:09:58:13:65:a5:a5:3c:32:a4:17:89:94:c4:
fe:ab:92:06:a8:0a:a9:b7:1f:49:b7:ae:14:41:77:c3:3b:e4:
96:4e:62:6c:6d:24:fc:1d:50:8c:a4:57:ad:fd:f4:91:37:f3:
a6:ab:ee:df:83:f4:ac:03:8d:9e:f8:ab:3c:ab:c5:b7:0c:26:
89:29:e4:db:35:32:88:24:47:d8:a6:aa:a5:de:7c:c2:87:fe:
07:8d:60:de:3a:08:33:a4:5c:5a:b9:be:e3:82:61:81:8c:50:
41:19:ec:6a:db:0d:d5:dd:9d:d7:22:17:65:08:31:da:82:ce:
af:d7:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:07:46 2026 by rpki-client