Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: Y8hC+VTckAlaxTX/hibOzSOycCKcKl6EWtCG4oieozg=
Subject key identifier: D2:56:52:7D:D0:26:13:8A:79:71:D7:3D:33:FD:1F:B1:2D:71:C1:81
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 019F17F97942BB2281167BED073E7AE7DFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 10:00:52 +0000
Manifest this update: Tue 30 Jun 2026 10:00:52 +0000
Manifest next update: Wed 01 Jul 2026 10:00:52 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: HKEpOrLbMvAYKQ199LNtbfyoYJ4uhP6Yqfpo/QCUnUY=)
2: 3OShaLp1tgG0w6F8SnVFUGGGJJU.roa (hash: 6F9cP81CAB2z6kxGDavpoTqFUUII+JeGSAu6vLBGSQA=)
3: aSq4kwpisiyPqp-dHXzcfCq_VbE.roa (hash: W/mYGGv/Jtea8oXyonioU+JGGz0ezZ8tWqj2IvUsfjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:79:42:bb:22:81:16:7b:ed:07:3e:7a:e7:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Jun 30 10:00:52 2026 GMT
Not After : Jul 1 10:00:52 2026 GMT
Subject: CN=d256527dd026138a7971d73d33fd1fb12d71c181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:7e:b3:cd:3f:7b:6d:ec:d1:57:2c:97:a5:
81:ef:cc:92:58:b9:72:ee:7c:53:da:ee:8a:b8:e0:
d7:62:c3:ad:b5:30:e1:03:40:9f:92:25:47:10:00:
5a:9c:60:6f:cc:d6:ee:75:d2:a1:ad:35:3a:89:53:
69:5a:ab:82:4b:0f:ca:26:5a:cd:d7:11:71:2f:c3:
b1:54:b4:b4:b9:23:24:d1:1b:02:78:50:86:11:92:
ad:79:eb:6d:9a:6c:e1:89:c2:c1:7d:84:11:03:a1:
dd:87:d6:c7:cb:6f:28:66:b2:c5:37:2e:53:8b:40:
cb:3d:f9:05:e1:fb:f5:e8:39:39:b3:6a:21:3f:46:
ff:6a:1f:40:16:94:59:98:89:19:c4:8d:5e:7d:94:
9e:46:43:ea:38:e1:6c:7e:14:7b:be:ae:29:39:93:
7c:c0:80:fd:bc:a1:f7:5d:c9:e4:c8:9c:12:21:bf:
3e:5a:20:0b:84:59:de:ef:09:76:15:da:f8:28:1e:
34:c3:ad:d0:6b:25:47:50:52:01:b4:82:ba:16:08:
72:54:a0:0a:6f:61:35:80:67:fc:38:c0:f9:b8:a8:
7b:30:9c:82:65:6b:8f:12:0f:0b:39:34:55:84:0c:
a4:ee:dd:20:fe:02:bb:5e:69:47:e7:36:38:e6:80:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:52:7D:D0:26:13:8A:79:71:D7:3D:33:FD:1F:B1:2D:71:C1:81
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6a:56:bc:ef:21:94:bf:9e:75:42:bd:c2:9c:ef:85:81:a3:
9a:9e:2a:1d:73:e8:a5:5a:69:af:4a:46:7e:84:8a:06:bd:22:
e1:5d:a9:ee:90:48:45:6f:5c:fa:f8:29:2c:ea:6a:8a:a9:71:
3e:10:39:3c:6c:4d:47:1c:a1:18:f9:52:ff:dd:9b:09:d9:f2:
83:b2:36:8c:f4:06:12:80:bc:73:85:2b:c0:51:44:d1:f4:75:
dc:78:d4:bb:b0:ed:79:00:8a:77:fc:66:8f:60:6b:6d:88:d0:
06:b0:96:52:b0:bf:b5:ff:d5:8c:f2:53:0c:38:48:60:71:3d:
b8:3d:c5:cc:a3:75:6a:80:ae:97:10:7e:ed:d4:6a:1a:aa:f6:
28:27:b7:20:b2:71:68:de:8b:a6:f5:b0:8f:71:0b:cd:48:2a:
ff:78:e7:ed:db:ef:de:61:57:62:a5:fa:80:e0:1c:1b:4c:3d:
64:c3:ba:d0:cc:8c:bb:ad:a6:91:3b:2f:36:c1:79:f7:38:a9:
c3:32:18:50:a6:b9:49:4a:00:2a:b9:6f:9a:4d:1f:6f:83:fe:
b6:22:aa:d7:a1:d8:7a:53:6f:15:02:57:45:e6:23:cd:07:8b:
86:c0:f0:fb:d8:00:fc:eb:ab:04:7c:e8:db:3d:8a:34:27:96:
c5:cc:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:23 2026 by rpki-client