Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: flN0YeQCZBQ7dKv9hpLoN7RMZHuB1vlfmTks+up8M1c=
Subject key identifier: 32:B6:32:C8:3E:CF:98:99:BF:EE:25:3F:A3:FE:D6:A8:8D:AB:04:90
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019F17C27524A0E69D23928B975B2E9239A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 08F3
Signing time: Tue 30 Jun 2026 09:00:47 +0000
Manifest this update: Tue 30 Jun 2026 09:00:47 +0000
Manifest next update: Wed 01 Jul 2026 09:00:47 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: mhq/fC4iLTm3R0nQoC4agDfAo2H05wvCimUqVbArfkQ=)
2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:75:24:a0:e6:9d:23:92:8b:97:5b:2e:92:39:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Jun 30 09:00:47 2026 GMT
Not After : Jul 1 09:00:47 2026 GMT
Subject: CN=32b632c83ecf9899bfee253fa3fed6a88dab0490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:0e:89:48:ba:de:de:91:c0:ab:8b:dc:b4:
00:61:4f:82:64:f3:06:36:91:bb:55:1d:5f:d7:ec:
7e:ff:82:11:b9:69:87:e2:6c:78:8b:82:a6:2a:ea:
79:af:0b:f0:bc:cb:f9:1e:53:97:38:b3:f6:15:0f:
9c:2f:dc:9d:6d:f7:fb:9b:4a:21:ef:62:28:54:e2:
5b:76:32:01:f7:a2:97:46:7a:e1:21:89:2e:e4:cd:
e8:b9:fd:64:91:ad:72:43:3e:54:24:92:3f:87:f7:
16:66:25:63:97:fa:09:57:d0:25:5d:f0:72:82:b1:
95:0a:fb:23:78:2b:99:b5:4e:06:7e:8d:6f:cf:ba:
4a:95:20:93:24:e1:9a:07:fc:ea:03:22:a5:0c:ff:
31:37:d3:03:e2:79:5d:cb:93:ca:eb:c8:35:ee:29:
1a:8b:66:da:59:2d:b9:96:e9:e4:25:64:83:eb:d6:
10:6c:00:98:12:2a:a1:0a:81:8a:af:c1:89:8b:c4:
bf:a8:f6:f1:b7:c3:2e:b9:0f:17:55:3f:be:4d:ac:
f8:6f:49:46:9f:f1:2e:71:0a:d1:fd:2a:04:15:45:
3b:cf:c5:c2:1f:18:08:68:65:7c:57:85:5c:7e:bd:
3d:19:57:0b:89:58:ef:61:3c:2b:d0:bb:3f:07:b9:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:32:C8:3E:CF:98:99:BF:EE:25:3F:A3:FE:D6:A8:8D:AB:04:90
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:28:f2:a5:82:b0:4e:75:98:b3:70:aa:7a:35:e1:70:b7:8c:
32:91:f3:12:25:b7:b3:98:3d:0c:c4:e9:b6:5a:d2:fa:4f:a2:
2a:b8:51:2d:b0:3e:86:09:32:c9:e2:4a:e1:4a:eb:11:47:69:
2b:52:fb:90:93:7b:76:54:1a:d2:d5:a8:fb:a9:6b:3d:05:19:
5d:12:d8:50:14:51:6b:67:b1:0e:23:df:18:42:18:ca:cb:b0:
76:01:49:6b:72:41:3e:f2:28:32:02:50:be:dc:ac:6c:5b:1e:
3f:40:f5:c9:b5:95:e5:d3:bb:9c:2f:6e:70:a0:91:79:41:ce:
11:07:4f:14:d2:f1:9b:1b:78:bf:ec:0f:b1:b5:cf:c6:53:8d:
ef:0a:7f:ac:50:e3:9e:c0:21:ea:db:51:fd:91:32:dc:aa:af:
e2:2e:c5:c9:44:34:a2:0c:50:8b:c9:25:bd:7a:4b:26:57:7d:
2f:a5:27:db:8f:bf:cc:5c:53:94:18:45:d2:02:81:e2:58:f9:
10:e2:86:4c:ba:f5:39:f0:95:6c:e5:65:41:e9:32:97:61:8b:
6e:ad:a1:85:49:a8:63:37:57:1c:e5:f3:50:26:40:78:9c:63:
b5:74:ef:0d:30:22:e6:0a:97:75:8e:13:a8:12:4d:e0:2f:57:
74:42:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:49 2026 by rpki-client