Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: MKVhNNmaj3dqhU4TiOeXIGrK0z1+eOZRcd1xKCoko70=
Subject key identifier: E2:15:ED:0D:BA:26:C5:45:34:1A:10:98:72:EE:DA:1C:79:68:DD:93
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 019F18D6BD6FBBA0117C61D110F1BA072B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 12BF
Signing time: Tue 30 Jun 2026 14:02:34 +0000
Manifest this update: Tue 30 Jun 2026 14:02:34 +0000
Manifest next update: Wed 01 Jul 2026 14:02:34 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: 3XtstSQ6Rcjovh4IBDDleGYnPdq2K06KTKlZH1sFq/o=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:bd:6f:bb:a0:11:7c:61:d1:10:f1:ba:07:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jun 30 14:02:34 2026 GMT
Not After : Jul 1 14:02:34 2026 GMT
Subject: CN=e215ed0dba26c545341a109872eeda1c7968dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:8e:fb:22:82:a1:df:91:1a:46:08:fc:1d:
4d:a6:95:27:88:e3:e8:1b:87:6d:5c:ca:83:f5:4e:
8d:27:04:bd:84:aa:26:75:b5:6e:da:80:80:7a:e2:
93:cb:7c:08:3a:26:88:6a:2a:6c:03:8d:6f:9e:27:
44:00:05:cc:77:90:1b:08:58:6d:50:32:4b:73:7a:
64:02:14:a5:64:a6:14:31:7c:8d:38:b8:37:3d:98:
5d:af:e3:53:40:5e:5a:0e:91:f3:de:36:f9:7a:cd:
39:52:b7:1e:6f:80:71:b1:a4:07:6b:8a:30:c4:e9:
91:88:cb:f4:9b:72:bd:fb:fc:dd:c0:65:9b:d7:75:
df:4f:33:e6:af:39:f8:4e:05:80:df:79:ae:a6:9f:
e0:73:0c:43:a1:77:db:1f:96:ff:39:0f:40:b3:86:
a0:24:67:67:93:39:8c:a4:6b:78:fa:8e:a9:38:c6:
1b:17:96:0e:a6:94:90:0e:80:7d:a0:ea:68:67:7d:
ae:13:b9:20:e7:71:7c:fd:23:9f:13:28:85:86:cf:
bb:0a:24:a8:d7:15:aa:52:f4:0c:09:3c:fa:a8:61:
c5:ae:00:fa:f8:74:14:52:04:a2:10:79:07:fb:4a:
94:e9:cc:19:20:cc:34:97:e0:f8:89:56:3b:eb:20:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:ED:0D:BA:26:C5:45:34:1A:10:98:72:EE:DA:1C:79:68:DD:93
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:8e:31:d1:4f:aa:f2:0a:54:da:6b:64:ac:af:4b:f5:69:
cc:8c:ce:fb:48:35:dd:53:a5:8c:b0:ca:09:a4:b4:3c:35:cf:
18:c5:2f:2d:74:30:58:27:4d:b7:9e:01:34:67:7a:79:a8:8a:
6b:70:21:d3:e1:aa:b1:c4:c9:c6:ff:1b:16:f9:69:90:80:d0:
f8:28:c6:bb:ad:92:50:cd:21:6a:8b:a8:13:0b:fd:53:5e:d5:
c6:76:f3:f8:7f:9a:d6:95:55:01:73:d8:b6:11:d7:cd:41:ce:
9d:04:9c:79:fe:f0:97:5b:da:36:5f:cc:59:ed:dc:98:a1:4d:
53:8f:30:d3:9a:29:30:0d:e9:87:33:18:b5:f8:9a:16:4e:91:
36:d9:4b:a3:27:00:59:a9:05:80:46:64:86:81:ba:35:56:dd:
6d:8c:49:29:a6:a5:bf:4e:17:f8:6c:f9:25:83:8c:60:4b:74:
0f:78:3b:c1:b4:39:07:b4:2b:27:ab:af:05:ea:64:c1:da:db:
7e:1d:e8:e6:8c:2e:a5:8c:6d:1b:3a:59:51:43:78:88:26:ae:
a5:f7:ba:f2:20:fc:c9:d3:cc:08:39:bc:c4:d4:00:70:f0:b9:
81:a7:47:e1:da:8b:57:bb:2c:05:15:a6:52:97:a0:50:55:98:
84:3e:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:55 2026 by rpki-client