Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: dCa496QSUUBbmsk9gHRcJjkrLAyxZUurDwRz0dzECvc=
Subject key identifier: EB:61:B7:7B:57:C9:30:25:0F:DD:84:3D:80:00:2E:A4:E9:36:4D:F3
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019FF7C8288D234076B6BFA3BF393CF04F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 02CD
Signing time: Wed 12 Aug 2026 21:01:57 +0000
Manifest this update: Wed 12 Aug 2026 21:01:57 +0000
Manifest next update: Thu 13 Aug 2026 21:01:57 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: mRIOboxFEurZ6h/u9KnLLN3gm9NIC7K+h0+N6dCBY64=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:c8:28:8d:23:40:76:b6:bf:a3:bf:39:3c:f0:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Aug 12 21:01:57 2026 GMT
Not After : Aug 13 21:01:57 2026 GMT
Subject: CN=eb61b77b57c930250fdd843d80002ea4e9364df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:67:b5:88:df:29:21:e5:2e:2a:a9:81:49:
24:ca:58:1a:1e:da:66:2b:83:2f:f1:7a:07:d7:57:
6f:68:50:36:f3:10:a2:f1:8c:5f:1c:3b:c0:10:7f:
24:62:a2:d7:e4:48:0d:d1:ff:70:8b:2a:ce:dd:b3:
9b:f4:6e:9c:b9:32:f5:1f:67:ab:e5:e8:bd:bf:d5:
c3:4c:41:a1:72:01:b1:1a:d2:28:dc:9d:d7:ba:1d:
0b:5c:71:42:be:de:d3:10:b8:98:8d:d8:a6:f3:7b:
28:6b:24:fd:91:6b:2c:f8:9b:8d:16:93:41:93:a9:
c8:ec:b8:48:66:69:e5:df:13:07:cf:c6:a1:b2:82:
88:27:a0:c8:7e:bc:b4:9f:ad:10:c5:af:02:87:63:
89:2e:aa:19:e5:fd:4e:a2:20:ea:5b:da:4f:b9:5a:
88:38:69:d6:db:ad:00:d7:e2:48:4e:76:0e:f8:ca:
e9:de:63:b4:13:77:23:65:24:37:20:69:61:5e:07:
0c:12:5f:48:dd:cb:8c:67:9a:d0:62:a9:74:72:c7:
15:f8:f5:09:ea:dc:46:e7:c6:5f:fb:09:40:ee:81:
fc:5a:d0:08:40:29:6f:d9:ec:82:bb:90:53:1a:c6:
f0:a2:51:0e:af:da:41:5f:6a:4c:74:19:35:ed:25:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:B7:7B:57:C9:30:25:0F:DD:84:3D:80:00:2E:A4:E9:36:4D:F3
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:6d:63:77:27:d6:82:e4:cf:ab:08:95:c1:c0:1d:1f:b2:
42:d7:f3:98:5a:0f:1d:39:38:dd:05:1e:95:8b:5b:3a:a1:4b:
5e:af:be:42:37:96:83:46:2d:f9:4b:8a:a7:ed:49:c3:38:8b:
55:7d:ed:64:d7:21:86:ed:1b:a8:a8:e5:86:f5:58:7d:3f:c7:
c3:09:2c:8b:fa:74:33:c2:fe:79:64:a3:f1:de:1b:a0:f4:0b:
12:93:79:0a:fe:89:17:72:b7:c7:1a:09:f5:b8:03:e8:f2:79:
20:8e:12:03:56:50:15:a2:ae:58:4c:b2:1c:ff:89:81:eb:6a:
88:91:c4:e6:b8:15:4c:2a:5f:a1:70:17:72:3d:32:c6:26:bd:
3a:29:77:c9:a8:23:0f:7b:d3:03:86:82:b4:5c:01:80:4d:fc:
7a:0a:82:ca:99:d4:67:c2:23:a2:8d:55:19:bd:b0:42:d6:9d:
99:ba:6c:c5:df:33:e4:3f:3d:16:b2:59:29:4c:d0:69:b4:cc:
72:e2:45:10:c9:f9:dc:54:63:59:9b:af:71:16:8b:c0:1d:8b:
39:17:e9:39:08:46:e8:00:cf:5c:bd:91:8e:d2:f5:8f:40:88:
e6:dc:44:19:a3:97:58:fb:da:6a:cf:e7:3c:2c:d1:91:a3:48:
e8:a3:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:34:35 2026 by rpki-client