Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier: KMspO6PycCuVMLAJax7T1+We46NFR2voBD9CoMem3KM=
Subject key identifier: 8A:DD:16:0A:57:2F:0E:F6:CE:11:C5:71:15:3A:B0:D7:77:E9:4D:66
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 019F190C9503FCD48EC80E81BDB99F2C5A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 15:01:22 +0000
Manifest this update: Tue 30 Jun 2026 15:01:22 +0000
Manifest next update: Wed 01 Jul 2026 15:01:22 +0000
Files and hashes: 1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: ehNqForOkiO7jipWVL4Pj6c4RRCFNVdEoMd9o+w+APE=)
2: bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa (hash: ejjZC1z5chW7R3pjzGKPMBf9E9b1c0msIw7AVev8LY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:95:03:fc:d4:8e:c8:0e:81:bd:b9:9f:2c:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Jun 30 15:01:22 2026 GMT
Not After : Jul 1 15:01:22 2026 GMT
Subject: CN=8add160a572f0ef6ce11c571153ab0d777e94d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:40:be:ad:86:03:a0:35:c3:f9:82:5c:f9:
72:22:7e:9b:68:dd:ce:fd:c1:21:c1:5a:25:54:92:
2d:60:26:8d:8c:47:43:9d:93:91:4d:e6:42:b6:7b:
15:41:07:d4:0f:98:a4:d7:2f:49:83:9e:f9:2d:f1:
be:85:51:f4:8e:09:13:14:1e:cc:66:1e:cf:75:3b:
b5:13:d2:b1:cb:f4:f0:5e:4d:df:15:7a:2f:95:e3:
81:e8:f4:bb:d3:ee:21:4c:5a:bf:bb:8e:e5:23:e9:
d3:95:68:5b:70:01:f3:b6:6c:7e:8b:08:26:8f:39:
cf:b5:db:4f:74:62:ee:90:8c:1f:d0:7e:02:00:25:
9e:98:6c:a7:bd:f6:59:9b:fc:54:4a:aa:77:cf:89:
bc:fa:4e:c7:a0:c1:20:bd:96:00:2a:5f:32:0c:dd:
e1:3b:d6:eb:eb:f7:8d:96:63:96:4c:4c:8b:25:8b:
86:4d:19:eb:76:25:1f:2c:61:e1:0e:01:3a:8b:85:
2a:41:a0:85:cb:10:ae:e4:35:a2:29:3c:40:94:7b:
bc:dc:a0:5f:81:c5:f5:59:3d:6b:2e:25:ba:53:b0:
e3:7a:f8:0b:17:76:d2:24:ea:98:93:4e:a3:71:7b:
a5:dd:bb:a1:78:32:3c:bf:0e:d5:9d:18:4f:80:53:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:16:0A:57:2F:0E:F6:CE:11:C5:71:15:3A:B0:D7:77:E9:4D:66
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:ac:b2:05:f0:2f:e7:79:30:4c:20:fa:fa:3b:64:de:11:
c3:aa:46:3c:e2:c6:b1:17:12:d2:8d:fd:04:27:ba:58:f6:ba:
8e:35:12:f1:b2:78:5a:64:6c:17:bd:2c:a1:21:be:44:76:b6:
5e:2b:96:8e:2f:80:57:52:12:c5:7c:e5:40:b6:d4:20:35:82:
42:d6:c2:77:5c:52:48:95:1c:7e:a8:67:a1:57:5f:67:91:44:
6c:8c:2f:d6:cd:5c:d9:a7:49:17:65:94:c2:b0:14:3e:18:6f:
49:6f:d3:bf:36:56:23:e7:17:43:f0:5b:f2:f9:95:1b:f0:92:
02:d5:e9:77:be:09:c1:34:4b:d1:0b:16:97:06:d6:83:f9:91:
0f:51:78:1b:fd:91:ce:57:8f:d1:e6:13:4b:ca:bf:1d:aa:7a:
7f:d4:3b:b6:53:8d:3f:2d:6c:b8:ad:ad:5e:5c:96:49:59:28:
de:f4:33:38:94:d2:d0:13:6f:13:85:db:4d:81:fa:01:cc:23:
76:4a:73:da:b5:13:4a:4e:1d:3b:61:3b:08:68:f9:93:3d:e9:
ff:ef:ce:4e:cf:1e:17:59:3c:6a:9d:f0:f5:ed:01:ea:f0:50:
cd:13:26:9a:7e:96:70:13:63:fb:43:81:1a:21:1a:bd:cf:35:
db:78:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:50 2026 by rpki-client