Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: dXGJLJBy6DUjjPDbp528ySPp979iIMl6qETFEqvYECI=
Subject key identifier: DF:9C:E9:8A:64:DE:3E:94:3A:E3:31:DD:F4:BC:87:85:E8:FD:19:00
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 019E3117891B95CCB69DF50EA91ABA690B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 1247
Signing time: Sat 16 May 2026 14:01:26 +0000
Manifest this update: Sat 16 May 2026 14:01:26 +0000
Manifest next update: Sun 17 May 2026 14:01:26 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: +z8sosoF+1jRclFXrtA0AvNTZMJX8kR1Z+ogMYeE8/w=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:89:1b:95:cc:b6:9d:f5:0e:a9:1a:ba:69:0b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: May 16 14:01:26 2026 GMT
Not After : May 17 14:01:26 2026 GMT
Subject: CN=df9ce98a64de3e943ae331ddf4bc8785e8fd1900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:65:b1:d3:d6:9d:13:80:15:52:2d:dc:b3:
22:a3:9e:a0:c0:e8:a1:74:94:05:3c:f6:b2:09:88:
2a:a1:2e:07:29:66:18:17:4c:0c:5a:52:e7:ef:0d:
03:03:38:19:e5:a2:38:fd:9d:e4:27:63:61:fd:46:
41:31:f4:40:e3:93:38:bd:23:10:8e:84:da:dc:19:
b2:0d:fd:d4:e8:fb:ce:be:62:ff:7e:c9:76:6e:4a:
55:bb:0e:a1:9f:5f:0f:bf:0b:13:78:62:59:a4:12:
1e:c9:fd:55:80:93:7a:fa:9c:9a:3f:78:33:ea:3b:
78:5a:67:83:ea:48:ed:85:94:13:0f:2a:30:75:70:
fb:62:06:e8:f0:54:1c:84:ad:d5:eb:3b:10:64:7a:
3b:77:14:2e:91:91:56:d9:9c:c5:3d:ea:22:b0:4d:
88:cd:80:f4:e9:55:72:ac:39:0f:3e:cd:b9:2b:ab:
24:c7:b6:84:79:b1:42:ff:ba:92:74:17:c2:5c:9a:
b4:03:99:7e:6d:0b:c8:41:c9:96:a0:2c:6f:78:44:
3e:81:46:0f:8f:54:fe:1c:81:45:73:9e:60:9e:3e:
eb:56:ed:a7:10:77:e2:8d:0e:77:e5:ea:59:b0:42:
80:59:c8:18:57:d7:00:7c:38:99:64:91:a7:03:db:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:E9:8A:64:DE:3E:94:3A:E3:31:DD:F4:BC:87:85:E8:FD:19:00
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:58:0b:20:e2:d0:0b:37:61:c1:0f:c8:b9:e4:b5:88:6c:cd:
5b:54:96:71:88:8b:2c:01:ae:1c:53:49:a5:73:30:e8:40:6b:
d9:9b:70:f3:c8:a9:15:be:90:c6:fa:b5:11:d3:07:d0:3d:f8:
e1:d6:c2:6a:5f:7a:14:48:4a:ff:5a:13:31:3e:15:3e:50:71:
93:2c:d4:92:76:ae:0d:58:5c:05:9b:fc:f7:78:60:17:fb:bf:
8e:8e:2b:e0:84:a7:16:8e:80:94:17:95:27:9c:94:95:30:bd:
49:21:a4:6e:67:9d:d2:be:6c:e8:1d:2f:ad:22:19:56:63:22:
d5:bb:3a:86:45:dd:3a:ec:aa:16:4f:85:10:58:da:28:f9:63:
95:12:b3:b3:53:c7:de:d8:63:a4:39:60:f6:f0:78:12:59:e6:
f2:1e:81:c7:9f:a1:f8:4e:69:71:61:a6:98:14:76:20:e3:f1:
f7:b4:f1:30:9d:45:03:f8:ba:21:85:e2:52:02:63:ac:24:ca:
9d:4b:ee:e8:a8:7f:bd:b6:7e:e4:8d:d0:3b:b4:bc:27:7b:9a:
76:61:02:3e:fb:02:e6:2f:be:f8:d6:15:03:f4:be:dd:b9:b0:
d4:32:8e:6c:e1:36:8e:9f:df:b1:c8:af:3e:7c:d3:66:df:7e:
01:de:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:27 2026 by rpki-client