
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: 189/BEkQplMw0BUZjl5mPX9Qqk+sjH+Wmw2bzmQS7qM=
Subject key identifier: 26:A1:B8:25:AC:56:BB:40:67:62:45:E2:46:7A:69:80:47:8D:A5:74
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019F18309193A759712C60B755DC526F45C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 18CC
Signing time: Tue 30 Jun 2026 11:01:03 +0000
Manifest this update: Tue 30 Jun 2026 11:01:03 +0000
Manifest next update: Wed 01 Jul 2026 11:01:03 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: W/NxPHkzIKs1li5Gv9A/9rGKN6NwRhtRMdmoF0b8FXM=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:91:93:a7:59:71:2c:60:b7:55:dc:52:6f:45:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Jun 30 11:01:03 2026 GMT
Not After : Jul 1 11:01:03 2026 GMT
Subject: CN=26a1b825ac56bb40676245e2467a6980478da574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:08:6b:1a:67:44:22:e7:c0:63:e8:61:4b:
fc:52:fa:81:2b:d6:5c:e3:40:8f:fe:97:5c:e6:a2:
92:b8:8d:1a:14:ee:de:38:70:6d:97:7e:d4:a8:10:
09:6c:c6:b3:ee:51:78:73:d8:ea:1b:12:75:dc:62:
66:2e:e5:d2:56:54:97:15:fa:3b:9b:b5:ee:4d:45:
d4:1b:ec:54:f2:e9:91:ca:ea:43:35:3c:c6:a1:06:
c5:9b:4d:6c:d6:79:9c:d7:40:fd:18:c9:11:f4:28:
0b:ff:4a:9b:14:5c:40:70:87:29:46:f8:fe:0f:a3:
4c:03:5b:eb:aa:1c:bf:0b:ea:49:df:3c:f0:2c:67:
c1:d6:19:42:e8:72:44:2a:5f:83:76:bd:28:94:74:
87:bc:22:72:b0:2a:73:ce:65:32:9f:59:e2:52:a7:
57:e9:35:78:64:64:36:81:3d:a7:8e:a4:b9:73:74:
2a:b4:02:84:e5:a7:3b:23:c3:21:b6:39:32:1e:75:
24:62:74:e6:e6:c9:c1:19:11:6b:89:e3:4b:58:7a:
d7:80:68:90:02:de:53:34:60:33:78:ab:0b:a9:1c:
eb:9e:b8:0d:22:cd:c7:5b:25:ba:d5:c7:7d:71:1e:
a0:ba:2e:78:3d:04:ee:ba:54:a7:b4:d6:56:c4:ca:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A1:B8:25:AC:56:BB:40:67:62:45:E2:46:7A:69:80:47:8D:A5:74
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2c:a5:2d:58:db:5a:03:a8:02:c0:5e:b1:e1:1f:ab:7f:52:
d7:05:e2:40:4e:66:1b:3c:51:1f:af:27:f6:6b:92:28:74:45:
36:97:72:59:f3:39:dc:43:6c:cb:b4:f8:4f:e8:f2:92:a4:6f:
f5:91:37:9b:3a:15:d0:2e:f9:a2:e0:d0:bf:92:75:55:43:a5:
d9:b7:22:cc:b1:8f:a6:4f:1b:8a:62:6e:52:e8:65:49:fe:0a:
f8:4f:1c:63:ca:d0:b8:18:6d:77:77:55:c2:fe:9d:18:67:d9:
5f:27:af:7d:a1:2c:c5:8c:d0:7e:d6:07:9c:42:b9:a0:65:a4:
bb:2b:16:6e:f2:df:0d:ec:b9:27:4d:34:fc:94:61:92:9c:0c:
6f:99:f9:72:d5:1d:2a:38:50:8a:eb:b9:47:ad:0e:b6:5a:4c:
b9:71:a7:d9:ab:4a:05:f6:38:7f:96:1d:81:42:24:29:fe:ec:
aa:d1:e8:e3:ee:f6:e4:ae:e4:9f:9a:c6:42:0c:92:be:38:d1:
27:7d:e3:94:d2:53:de:c5:c1:91:bc:f2:e6:3a:26:87:6e:0f:
10:1e:b6:59:f6:a3:ac:a4:f5:56:50:84:97:bb:cf:c1:60:0b:
7d:07:b7:6f:68:78:4a:9b:1f:0f:0a:e7:78:d7:14:91:49:75:
5f:0b:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:57 2026 by rpki-client