Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
File: a1WP5oiolIXilt8dMYgHe1peVSU.mft (raw, json)
Hash identifier: dXjFcDD7I1y3FkghM6kGQTPIewgpLMctsIFIEnYcvH4=
Subject key identifier: 46:76:07:5B:51:C2:D8:E2:71:85:AE:13:A8:B1:92:FD:A2:7D:F6:76
Authority key identifier: 6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25
Certificate issuer: /CN=6b558fe688a89485e296df1d3188077b5a5e5525
Certificate serial: 019F1265EEE5D44C25C8DB21F6171C1EB18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
Manifest number: 33
Signing time: Mon 29 Jun 2026 08:01:37 +0000
Manifest this update: Mon 29 Jun 2026 08:01:37 +0000
Manifest next update: Tue 30 Jun 2026 08:01:37 +0000
Files and hashes: 1: 4l7AdsvuDNCFzMTKccCzXtq5Hgg.asa (hash: uJpW6PmO1PIQPXDywb3ezuYgylXtcxqJBTeAIq8ncAU=)
2: a1WP5oiolIXilt8dMYgHe1peVSU.crl (hash: +hZpPryN7CeHbjpliFKhoYJNZL6356Dj9IYECEJkbCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:ee:e5:d4:4c:25:c8:db:21:f6:17:1c:1e:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b558fe688a89485e296df1d3188077b5a5e5525
Validity
Not Before: Jun 29 08:01:37 2026 GMT
Not After : Jun 30 08:01:37 2026 GMT
Subject: CN=4676075b51c2d8e27185ae13a8b192fda27df676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:77:16:f2:6f:c2:85:e1:03:c4:37:80:78:
d9:07:46:34:0f:74:50:c2:96:7d:e2:06:ea:84:98:
7e:a2:95:46:2a:3d:78:07:3e:e3:0e:72:d1:f1:0f:
23:ff:b4:fc:ea:09:8e:9e:10:6b:7b:6f:f4:b7:2b:
6e:7e:34:06:5d:73:05:01:1d:8f:05:34:a0:22:8f:
61:1e:fb:cb:1e:e2:15:34:a6:5f:5b:00:d6:ce:04:
a3:34:77:c8:d0:60:4b:7d:7b:b6:d7:d1:6e:33:1e:
d3:59:e4:5e:84:b6:c6:4f:8f:fd:85:ab:19:90:eb:
a0:0d:a1:a7:cb:9c:f9:a3:d3:36:4e:5d:cc:dc:13:
ff:5e:d6:2c:5d:91:a9:28:e9:6a:d8:15:ce:b5:d5:
cf:05:32:ce:c8:61:f5:18:0a:46:41:a4:a3:48:ed:
fe:84:cc:73:11:24:68:a9:8b:75:98:ea:ed:b5:ca:
63:15:10:ac:19:dc:9d:02:5d:96:de:ef:93:d5:64:
ff:30:e7:4f:a1:e0:c8:38:48:50:54:62:4f:d0:9f:
1a:ea:26:2d:c4:e5:34:23:30:dc:ee:4b:66:69:0a:
4d:b7:ea:0b:83:dc:c6:44:a8:a8:39:e1:d6:58:61:
44:c1:a5:d7:b8:86:51:88:8f:3a:2d:be:70:1d:a7:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:07:5B:51:C2:D8:E2:71:85:AE:13:A8:B1:92:FD:A2:7D:F6:76
X509v3 Authority Key Identifier:
keyid:6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:bc:02:19:db:ff:1d:c5:2d:9f:5a:51:e7:4f:f5:3b:81:
a9:99:be:69:d2:f2:29:9f:e6:a5:fe:6c:9d:b4:79:6e:04:e6:
e6:a2:3f:60:8b:95:19:43:18:12:98:2c:a6:35:68:76:38:c5:
10:0e:fc:ab:ae:f1:3b:b4:49:4f:6d:71:69:d7:ba:84:0a:40:
e1:32:69:59:f6:d1:49:97:46:e5:b9:13:1d:a0:d2:0c:60:40:
a2:ef:f9:f5:49:a7:2c:cb:30:1a:49:c2:a0:b4:82:6b:e5:30:
04:66:8c:09:e3:c2:64:2e:4f:3c:df:18:fe:a7:d8:4c:2c:2e:
7c:2d:14:54:47:91:40:4a:ee:ef:82:0c:14:5a:4b:88:10:e2:
a0:17:40:24:9e:0d:48:6c:a6:b1:66:97:5b:3b:b1:7f:6c:8d:
b8:b3:d6:42:4d:c0:ba:32:b0:cb:f4:fc:1d:c2:3a:33:d3:79:
0e:33:d2:79:5c:c3:42:eb:2d:f0:84:e1:c1:9d:c9:eb:02:25:
e3:5a:2f:a0:2a:e0:8d:14:76:62:b9:7b:ba:1e:95:ed:ee:12:
6e:46:3a:d3:d3:b7:c9:88:bc:5b:cb:a9:31:f5:0d:5e:56:36:
4d:a5:60:16:cb:5a:bd:f3:21:6d:b7:b9:6b:0d:3c:06:a5:04:
f1:14:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:39 2026 by rpki-client