
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: Nb1iL60Z01glrAcgUlcFrG4HbvueRwjimtze97tiRQI=
Subject key identifier: 05:AD:43:92:88:6C:F7:5C:4E:03:AD:5F:33:A8:3B:99:37:88:5C:EB
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019F178C4CEF17D4F40D7D54BFECD18AC17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 141F
Signing time: Tue 30 Jun 2026 08:01:38 +0000
Manifest this update: Tue 30 Jun 2026 08:01:38 +0000
Manifest next update: Wed 01 Jul 2026 08:01:38 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: S8CwuUt193VWlqkE1uNHK2ZueOGlWkouaFBKavmso7E=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:4c:ef:17:d4:f4:0d:7d:54:bf:ec:d1:8a:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Jun 30 08:01:38 2026 GMT
Not After : Jul 1 08:01:38 2026 GMT
Subject: CN=05ad4392886cf75c4e03ad5f33a83b9937885ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:02:89:4f:8a:68:60:ec:be:f8:8e:a7:33:
e6:3d:a8:ac:5b:a6:3b:8a:5a:e1:c6:97:64:0f:12:
87:17:ac:25:39:92:d9:9a:cc:65:fc:79:f1:f7:65:
62:79:32:3a:8d:69:7a:ba:9d:30:cd:9b:e5:31:cd:
fe:2a:9c:32:37:d3:54:b5:45:45:b9:3b:f0:f3:fe:
51:79:54:3c:40:9b:78:7e:0b:44:34:3a:97:c1:07:
25:d6:4a:f8:6c:e7:4d:1e:7a:4b:c9:b3:da:2a:91:
63:7e:6c:4e:bb:71:b0:92:89:f4:3d:a8:9a:d2:63:
55:bc:07:d2:b2:0b:6a:a6:8e:0e:42:96:96:a8:d8:
26:0a:f3:81:39:74:0c:6d:bc:6a:73:51:f8:c8:b6:
af:03:49:bb:93:e4:57:e1:2a:ed:47:9a:ff:04:a7:
76:8c:2e:d5:3f:a4:15:7d:b7:28:10:d1:72:e0:9c:
47:77:db:53:75:3c:c9:d4:f9:92:9b:4a:8b:53:9f:
74:8a:45:e1:bc:6b:1f:53:f8:76:65:7a:9f:84:75:
ab:47:04:de:56:17:8c:a1:43:59:06:07:1d:92:e5:
8d:7b:98:69:75:d4:05:ca:fc:b8:20:b3:70:19:f0:
37:bc:53:08:44:f6:39:f0:12:e8:52:00:44:f3:4a:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:43:92:88:6C:F7:5C:4E:03:AD:5F:33:A8:3B:99:37:88:5C:EB
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:b6:d8:43:d9:4b:52:5b:7d:4c:bd:22:35:9c:05:a7:48:
a0:d1:0f:d7:07:df:75:0f:ff:cc:21:e1:dd:6f:1d:b0:e2:7a:
cf:88:96:74:45:1e:a3:77:bc:46:7f:f8:9e:eb:09:be:f0:be:
5c:f6:33:1f:39:2a:a2:44:b0:ef:1c:30:f9:15:09:f8:c8:af:
19:9d:96:60:e1:00:62:45:98:9c:33:fc:c4:db:89:80:72:43:
46:03:a7:05:f5:e2:82:9e:3c:eb:c3:a0:a7:a1:47:ae:f4:83:
fc:48:70:0b:4e:6a:76:8b:cd:44:34:1a:a4:33:c3:02:58:03:
59:a8:88:1f:c2:15:c4:80:8c:c1:05:9f:c7:47:23:bb:b6:5b:
a2:d5:7d:10:e5:bb:0b:46:79:c4:0a:e5:13:49:cb:36:42:c6:
4d:14:d0:d7:5a:75:b2:ea:2b:7a:82:59:35:6e:80:64:1c:f9:
f3:46:f3:5d:4d:ce:a4:6c:26:59:8e:cf:12:0e:98:7c:c6:07:
c5:25:55:f2:cb:43:b7:a0:4f:1e:f1:32:40:99:56:08:2d:07:
fd:16:17:4f:d8:82:40:40:4f:d2:ac:14:a7:38:0b:70:5a:00:
fa:ff:02:d7:d3:b6:8d:bf:63:ce:a2:d8:20:19:b7:fc:37:3e:
f0:8c:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:45 2026 by rpki-client