Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: V81si6A1ct3wHvIwuQjH3xZ7s5VPnFACQ/zseXKh020=
Subject key identifier: 90:1C:6D:13:C4:A3:DC:77:0C:1C:49:13:FB:98:86:F4:62:F9:57:12
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019F178BEA653798278F2CC39A508414E28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 08:01:13 +0000
Manifest this update: Tue 30 Jun 2026 08:01:13 +0000
Manifest next update: Wed 01 Jul 2026 08:01:13 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: BEJlkDc154e1Wt73fIPhxPEOBFm9h5QltEhGGP5SZ78=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:ea:65:37:98:27:8f:2c:c3:9a:50:84:14:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Jun 30 08:01:13 2026 GMT
Not After : Jul 1 08:01:13 2026 GMT
Subject: CN=901c6d13c4a3dc770c1c4913fb9886f462f95712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:62:3e:bb:a8:fc:4f:a8:9d:a0:e5:f1:7f:
65:a6:b5:15:ba:0e:08:cc:ad:80:9c:28:a8:24:e7:
40:eb:d8:47:ab:e9:2b:68:aa:57:01:b5:2a:00:4a:
fa:29:f0:e7:04:28:9b:31:4f:f7:13:18:59:bc:09:
43:87:86:55:cc:dc:28:56:46:a0:fe:b4:84:b2:c4:
a1:57:1c:d3:22:69:45:9c:05:07:8f:05:80:1a:70:
6f:0a:51:c4:10:2b:07:cb:d8:d7:f5:9f:26:2b:16:
93:2e:30:b7:e3:bd:97:7f:54:32:77:d6:2f:e4:d6:
21:a4:bb:cd:86:3f:3a:fa:70:ae:29:0e:4c:dc:a3:
24:27:28:49:6b:db:ba:7a:30:45:b7:e1:38:a4:66:
c7:45:c2:4b:a0:c8:2e:85:38:ed:0d:29:3e:19:1a:
8e:2c:65:e7:f9:fc:19:b0:5a:ef:f4:ab:50:38:94:
98:f8:17:56:b2:03:49:71:f8:bb:3f:e4:39:f6:89:
34:e8:37:7d:74:4b:ba:01:1b:b3:aa:3d:51:4c:70:
5c:56:1e:db:ea:2b:87:ac:e2:b2:3b:26:98:3c:b7:
30:01:b3:57:71:ed:65:cd:18:d8:e4:2f:d3:73:1f:
ab:bc:a1:36:8f:f7:66:c2:95:1d:24:28:0e:6b:a7:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:6D:13:C4:A3:DC:77:0C:1C:49:13:FB:98:86:F4:62:F9:57:12
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bc:78:54:ce:7f:21:a6:28:8b:b7:09:a3:78:c3:9c:c1:06:
ce:b6:b6:fd:fd:ed:7e:47:d0:ac:8e:82:d2:5d:04:fd:a8:56:
2c:8d:c5:c0:de:74:40:af:8c:2c:8c:58:da:0b:1f:e7:28:a8:
6a:29:84:9d:b9:38:06:27:a5:5c:59:77:5a:30:52:fc:88:cb:
1c:eb:c3:b3:f9:a7:f7:30:0e:6f:41:53:65:97:89:61:7c:0c:
71:e6:d2:32:b3:c7:43:f1:a8:01:af:a2:58:d0:45:a0:60:c0:
98:18:70:90:63:c5:fe:6e:ce:8a:d4:79:f8:aa:db:93:f3:88:
6d:43:9f:5f:5f:83:ca:c9:f3:a1:87:24:36:16:12:79:58:3d:
83:c1:ba:4d:39:74:f4:da:b4:67:dd:a9:a3:72:3d:d7:22:9a:
2a:11:75:de:26:22:9b:7c:ee:64:2a:eb:36:08:85:19:42:44:
c7:ea:9e:40:79:1f:5a:d7:9d:90:71:8b:54:4a:a2:80:d4:a1:
83:39:71:2d:59:49:37:5e:8b:62:18:ac:9a:e8:95:9f:22:72:
ef:8b:7b:a7:d0:61:63:6e:46:83:ab:a3:8f:6c:08:03:bd:c9:
21:1c:71:96:84:5e:09:15:41:ab:dc:f6:89:be:7e:84:7d:03:
7c:78:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:19 2026 by rpki-client