Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: HvtScsO08qewoL2OdJTw28tGMJlZC/kHYGPay47Imt0=
Subject key identifier: 74:8E:10:25:29:2F:25:05:46:2C:0F:0C:23:0A:7E:EC:1F:24:CE:C9
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019F18D64AEE93B11786A96CEBFDF3CE7225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 01D8
Signing time: Tue 30 Jun 2026 14:02:04 +0000
Manifest this update: Tue 30 Jun 2026 14:02:04 +0000
Manifest next update: Wed 01 Jul 2026 14:02:04 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: 8OTL1n3+zAPzRv/C1bWfUsKv56vW1Htee3NfzRcci8Y=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:4a:ee:93:b1:17:86:a9:6c:eb:fd:f3:ce:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Jun 30 14:02:04 2026 GMT
Not After : Jul 1 14:02:04 2026 GMT
Subject: CN=748e1025292f2505462c0f0c230a7eec1f24cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:8a:23:66:4a:c8:af:f1:76:bd:f7:1f:d2:
a6:4a:27:e1:a3:0a:14:39:2b:fb:3a:b2:36:cb:f9:
dd:4f:83:b0:5a:57:b0:79:43:22:74:95:54:d0:25:
10:c2:19:a0:e7:4c:f7:39:1b:da:1a:36:79:10:1e:
51:20:55:b4:2b:ac:b3:f6:f3:14:9b:c1:84:dc:70:
78:c0:fd:5c:bd:83:ac:a6:b6:b1:c8:32:c3:1a:e0:
3f:4d:8c:53:62:e6:c9:80:d5:8c:d6:93:3a:35:9f:
79:3a:3c:34:cd:de:f6:22:99:af:53:ab:b2:68:ae:
5c:cb:01:85:20:cf:85:98:93:69:7b:4d:cd:34:c1:
07:1b:15:d9:ea:4b:66:d6:79:b8:d5:b2:4b:78:0c:
78:4b:fb:90:e0:7e:f2:cf:a5:e4:69:59:99:f7:03:
15:c5:f1:0e:0d:ad:3c:40:13:fa:b4:ec:d8:70:b1:
3b:19:bc:3a:b8:3f:2e:85:91:49:0d:a2:9d:1f:73:
30:6e:96:91:69:7a:f9:e4:db:84:81:2c:51:74:f9:
93:d9:eb:f4:8b:68:e1:fc:e0:db:95:0d:4c:d5:64:
f9:e3:a3:8a:db:92:05:ba:77:90:9a:42:c9:db:dd:
71:42:ae:c1:a3:04:5f:99:79:c7:01:6c:52:c7:f7:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:10:25:29:2F:25:05:46:2C:0F:0C:23:0A:7E:EC:1F:24:CE:C9
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:b0:97:91:21:6d:f4:07:43:f0:eb:30:7f:bf:c9:43:ed:
b1:74:83:f1:62:29:0c:36:53:75:c5:1d:66:4b:af:d9:c4:e7:
3c:61:f2:5c:75:1b:65:de:81:df:56:59:99:ec:79:e5:da:f5:
2e:5a:6a:7f:51:ef:59:83:88:32:c4:72:fe:23:da:21:4a:84:
1a:71:a5:d6:6a:6d:5f:98:03:d7:a4:bb:04:e8:8a:6f:a8:c3:
20:8d:94:62:39:04:cb:ef:6e:77:7a:45:16:3a:d7:c7:d8:9c:
5b:c4:87:49:71:f8:92:d6:63:f0:45:b5:82:91:ed:d8:8f:e0:
e8:5b:71:f5:20:39:65:b9:40:d2:a4:91:70:8b:24:c4:cb:b6:
1a:1d:2a:8a:e3:f6:1b:81:29:50:8e:2d:61:e3:80:db:98:03:
0e:61:9f:af:4f:bb:07:9d:44:19:83:68:72:79:1a:e4:54:a4:
40:d4:6b:a9:47:20:9b:a3:a6:03:e5:63:0f:65:f0:6f:8b:3b:
d2:98:38:6f:da:4c:dd:8e:3c:26:41:de:ac:98:fb:4a:f0:58:
2c:0d:3e:e0:d9:f7:e4:54:f1:f4:68:e5:d3:24:b6:08:be:65:
0f:3a:ad:79:cb:e2:38:a0:bd:ba:d0:b5:3c:52:e5:ef:36:89:
7b:ce:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:34 2026 by rpki-client