Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: joyvUypCzOePvEg3pONiw9Xnhshe5fVMIKcwF1zXe7g=
Subject key identifier: 8A:B2:0D:FB:D3:45:5B:E7:85:98:78:34:C4:B6:8E:96:74:B0:D6:AB
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019F111C73BB29F8DFEE4D538B3F60AA1D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 023B
Signing time: Mon 29 Jun 2026 02:01:44 +0000
Manifest this update: Mon 29 Jun 2026 02:01:44 +0000
Manifest next update: Tue 30 Jun 2026 02:01:44 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: D2v6ij0ZRABjwqgOjYF42vV8zj9kcEwpxnJecq0rIJ4=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: ylydL3qXftFW7Uij6tIt41OMzD8.asa (hash: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:73:bb:29:f8:df:ee:4d:53:8b:3f:60:aa:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Jun 29 02:01:44 2026 GMT
Not After : Jun 30 02:01:44 2026 GMT
Subject: CN=8ab20dfbd3455be785987834c4b68e9674b0d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:9f:80:62:ea:cf:d3:f9:75:84:05:8e:6d:
20:69:7d:f0:a4:af:d3:b7:f0:f6:7d:07:3f:20:ba:
31:a5:ef:9a:b9:a6:b1:06:48:a5:80:f4:23:54:27:
f2:42:2b:12:15:64:a3:8f:1f:d1:76:2c:95:e1:8b:
13:73:9b:e3:5f:12:f1:17:a8:f3:50:9f:f7:c4:6e:
66:63:5b:c0:f0:46:1c:e3:eb:16:8b:75:39:1b:0c:
da:07:1b:6f:66:44:eb:29:46:c9:a0:78:4b:01:a2:
47:45:92:b2:61:50:fa:d2:21:e7:ce:2d:5d:8d:4f:
cb:6f:42:12:14:ed:55:d1:dd:2e:fa:34:87:95:6a:
fc:4a:e5:b1:bb:a2:71:00:7c:27:d3:55:c7:7b:a3:
ee:6e:42:ea:cc:d3:71:a4:43:30:ce:08:81:77:dd:
26:e1:15:e8:52:66:00:dd:d7:75:3b:e7:02:a4:19:
7e:09:ce:68:7d:ff:d4:08:d3:85:df:d1:89:15:9c:
37:11:6d:23:46:35:18:a4:84:d5:e3:9c:c9:2f:53:
fa:93:d4:8a:0f:82:8c:65:f9:89:4a:6e:39:22:e0:
5f:f1:68:47:30:c3:4e:4a:44:d0:85:72:de:ab:95:
13:ce:4d:f0:d8:90:ef:87:d5:0b:bc:23:31:a1:76:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:0D:FB:D3:45:5B:E7:85:98:78:34:C4:B6:8E:96:74:B0:D6:AB
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6c:c4:b8:2e:b2:9e:48:1e:b8:c1:1e:a6:b6:f4:97:88:cb:
b4:7e:ba:fd:69:3e:34:90:b0:a2:ba:a1:67:80:8e:4c:35:d5:
8d:23:1b:f9:ed:3c:1b:ce:94:c2:ca:f8:ea:fe:fc:55:a8:2f:
12:16:ee:5c:aa:d2:0b:8c:11:fc:d3:26:96:6a:48:b2:02:b6:
b0:ff:8e:86:24:3e:91:4c:a0:2f:54:62:37:db:38:aa:08:5a:
88:0d:0b:47:88:94:72:38:78:d6:25:28:32:d3:ea:d9:dc:9b:
29:2e:4a:cd:f6:84:79:17:36:d5:5a:6d:54:02:97:13:48:28:
ed:90:39:d8:7d:a1:8c:05:3d:ef:d7:2a:52:47:eb:6f:24:7b:
95:39:d9:3b:97:a3:18:0f:12:ef:b8:fd:61:39:10:e3:e4:bf:
3d:b1:21:ba:46:ca:13:75:37:d8:7d:4e:ca:38:3c:8c:b6:55:
c6:03:bd:39:a0:70:88:62:4b:3d:63:4c:b7:1d:07:5f:e2:04:
6f:c3:de:a2:88:89:19:a9:0a:54:ba:98:93:c4:5e:e4:d6:94:
49:88:b6:fa:8e:e9:3a:f3:39:bb:bf:c9:d4:01:7a:61:9b:15:
33:52:cf:7f:35:a7:34:4e:d1:a8:10:e9:d6:5e:8d:49:4a:11:
1e:43:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:43 2026 by rpki-client