Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: 2yds446GWZa3zZBjIKRhL575yjwvSwRSJFJRURUqtms=
Subject key identifier: 96:8B:06:20:1A:63:1C:A8:DD:6B:C4:15:51:AE:BC:D9:BD:1C:24:58
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019F190CFF8FADE919BA19104AA0B262BBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 1183
Signing time: Tue 30 Jun 2026 15:01:49 +0000
Manifest this update: Tue 30 Jun 2026 15:01:49 +0000
Manifest next update: Wed 01 Jul 2026 15:01:49 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: K2dFO+429Wky8EwHtd28qhqa2YfQ5r4Ibxq9WE/dfGw=)
2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:ff:8f:ad:e9:19:ba:19:10:4a:a0:b2:62:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jun 30 15:01:49 2026 GMT
Not After : Jul 1 15:01:49 2026 GMT
Subject: CN=968b06201a631ca8dd6bc41551aebcd9bd1c2458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:78:24:23:b8:43:89:fb:7a:09:db:fd:aa:
92:14:bc:ea:c5:16:1d:e3:43:ab:4f:e4:f1:99:3f:
0c:72:ac:6f:12:ac:12:10:f2:ed:21:13:87:af:fd:
1e:81:29:2a:f1:76:51:51:56:21:a7:02:07:51:32:
6a:f0:46:db:5e:0b:2c:ab:72:c8:32:39:d6:67:15:
7a:41:13:e8:ce:c6:98:65:59:0c:b8:67:75:a6:72:
ec:2a:03:22:d6:18:10:98:f4:a6:99:e7:fa:70:ed:
88:8f:a2:d9:73:cd:30:97:4d:c9:b5:f5:b7:f2:4c:
01:2b:6b:33:fb:09:6c:98:87:c1:1e:29:59:88:54:
9f:5c:7d:60:75:ad:49:52:15:ca:66:eb:41:1e:43:
e2:a2:d3:07:71:ee:84:92:af:87:2d:e3:8e:82:01:
b0:9e:92:e8:e6:00:47:56:b5:e1:0a:f1:fe:eb:63:
71:3e:c2:e6:e2:3a:f3:8d:fe:fd:04:7f:ad:e9:68:
75:ad:46:66:5b:5d:a0:ce:32:10:b0:f7:c3:5b:4f:
b3:5d:91:1f:41:96:6a:ed:8b:34:25:4c:d0:0d:de:
ce:df:6c:4e:97:87:b2:9b:9c:f4:91:fb:7f:82:06:
7b:7f:73:9a:b7:82:09:28:67:7a:a8:ce:e1:69:e8:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8B:06:20:1A:63:1C:A8:DD:6B:C4:15:51:AE:BC:D9:BD:1C:24:58
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bd:3d:16:0d:1c:39:09:1f:17:36:a6:c5:28:21:67:58:f8:
0a:e0:1e:48:2e:43:16:b0:4a:dd:57:ce:2a:9d:c8:db:4a:e7:
9b:1c:6b:a8:65:f9:88:de:9c:ff:06:d2:42:31:69:66:75:61:
e6:cb:9e:ce:fc:fb:82:38:09:74:b5:a4:11:8d:25:84:36:be:
5f:20:67:80:7a:4c:1f:e4:70:ff:28:14:c7:e6:71:c3:ec:12:
05:63:3c:2a:a7:2c:45:d2:7d:94:ef:b2:32:e5:12:8f:ef:d4:
b3:37:16:68:53:bb:fd:df:2c:be:a8:6a:e7:80:86:1a:6f:ad:
0f:a7:d6:95:e8:5c:b4:71:43:d6:ce:72:c9:45:f9:77:e5:d6:
f3:25:8a:50:4b:f0:84:df:3a:88:5c:d6:94:0a:e0:36:4f:82:
b8:8b:49:51:8f:6c:fa:98:f4:1f:a7:ce:4c:77:84:aa:35:ac:
f6:d5:bc:06:a2:9a:be:af:ae:71:dd:07:d3:fb:41:8f:40:28:
69:c6:72:37:8c:b1:4b:c8:08:23:02:4b:03:33:c7:4d:67:2e:
a1:b1:52:6c:f0:c5:53:ad:42:9c:0f:9d:8d:47:3b:fa:26:2f:
70:0c:0a:e5:f3:01:81:df:06:47:aa:3f:34:36:dc:a6:f3:90:
c5:77:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:24 2026 by rpki-client