Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: UF83GZj2nRLOvyVo8WTkjNsJRNQW89V1IF8Ezd4ES8g=
Subject key identifier: 46:9A:5F:23:4D:BA:C0:5F:90:17:B2:4B:67:ED:77:B4:B1:FF:8B:53
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019F12650330E2952A620C1D34D446126F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 16C2
Signing time: Mon 29 Jun 2026 08:00:37 +0000
Manifest this update: Mon 29 Jun 2026 08:00:37 +0000
Manifest next update: Tue 30 Jun 2026 08:00:37 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: JtZNSoaeG9ZfQoyjoQEo1TdOqv1x9XYyHydU3mNeqZI=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:03:30:e2:95:2a:62:0c:1d:34:d4:46:12:6f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jun 29 08:00:37 2026 GMT
Not After : Jun 30 08:00:37 2026 GMT
Subject: CN=469a5f234dbac05f9017b24b67ed77b4b1ff8b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:c9:3d:19:b4:57:62:b0:3d:f3:8a:18:3f:
4e:50:13:20:99:34:89:a4:bc:07:38:e6:12:9f:6b:
d9:63:3d:9a:8e:84:65:4c:e7:d2:96:d3:a5:3e:5d:
b4:df:89:7e:75:ba:3e:c6:98:e6:8a:ba:dc:4d:f2:
59:4e:4b:0d:c7:e4:cc:10:63:10:89:dd:90:15:0f:
d7:65:b5:c7:c5:71:74:c7:c2:ba:77:d6:37:1a:f9:
7f:26:cc:e7:34:0e:c5:61:98:1b:c3:74:35:29:cc:
7f:50:8f:e4:97:b4:55:7f:e9:2b:7c:b4:87:cb:9a:
83:af:84:fd:1f:62:e6:d6:38:01:a4:1e:17:1b:07:
5b:3e:d2:45:c2:ce:6b:6e:1a:8b:c5:7f:ee:c7:5d:
11:17:26:7e:2f:76:2a:a8:06:9e:14:dc:7a:2a:19:
cf:48:27:d1:21:49:ff:cc:5b:ad:6f:35:aa:87:2e:
31:a7:b0:ff:12:4b:58:4a:30:89:87:e8:a3:a8:03:
a0:3d:b0:92:c1:a7:68:68:ec:34:0b:60:47:5e:13:
20:3c:9e:45:d7:66:33:3e:3f:ae:d3:d8:01:b0:af:
34:90:e4:e8:bf:81:62:df:64:8e:6c:c3:18:e7:a0:
c7:51:2f:47:3e:06:7b:ee:f5:94:b5:a7:de:c7:6a:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9A:5F:23:4D:BA:C0:5F:90:17:B2:4B:67:ED:77:B4:B1:FF:8B:53
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:dc:f6:0f:a9:22:83:3f:df:21:ff:0c:21:98:fb:3f:99:
11:af:a8:fd:bf:36:7e:f8:5b:4d:6c:95:85:0d:df:d6:a3:de:
20:6e:d6:a8:62:96:70:ad:90:5d:12:30:e4:77:12:bd:8d:74:
77:8c:1f:51:94:40:dd:5f:e3:17:af:31:0c:14:ad:91:53:62:
d2:a6:61:66:3e:3a:cb:14:ce:da:8e:df:e9:05:7d:fb:5d:32:
ac:a8:62:a3:24:92:33:82:ce:7a:8d:ef:70:e7:e3:01:0e:1a:
37:5b:d3:a3:3b:14:5c:28:1b:ef:44:7c:d3:d1:4c:f2:3f:1e:
ab:b1:11:06:c3:8b:f7:74:e4:7b:ae:a5:c9:5c:8c:8c:04:d0:
6b:ac:0a:6c:5d:0f:45:29:ff:d7:e4:1d:dc:81:4f:a1:5b:eb:
98:0f:ac:c5:f5:ec:2c:0e:34:38:09:c1:6e:a4:ef:4a:3e:82:
9c:c5:f7:0f:c8:30:0c:29:39:a9:a2:9f:bb:b9:6e:6f:26:90:
6e:4f:e9:3b:90:1f:f2:9a:f4:d2:47:bd:29:c1:32:ce:9c:cd:
7a:0f:66:df:26:cd:3e:71:56:aa:cf:66:0a:9c:b0:bb:fd:fa:
41:4a:be:b1:b2:68:44:1a:a6:12:3e:bc:fa:b7:1a:d1:e8:3b:
02:ac:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:28 2026 by rpki-client