Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: Qp0Cz5xTG6FG/8vufyrcNu1Vmr9h8//FhbcwPjqhkow=
Subject key identifier: CB:7F:FE:CD:2D:57:65:00:B0:A4:84:EE:72:5A:C2:32:86:CD:36:0D
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 019FA41741BBFE7FF0B34BE45A6AEA22E306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0ED5
Signing time: Mon 27 Jul 2026 15:00:15 +0000
Manifest this update: Mon 27 Jul 2026 15:00:15 +0000
Manifest next update: Tue 28 Jul 2026 15:00:15 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: jIp31ZncjqCTdeb+9qQVjw4ufLqmADaqlcbf143FV0s=)
2: OESlpPK-jzIeY_kWKji03hACpHA.asa (hash: NcdspYFEkIzBfyRyPM+LLSVIvHJYNJkjtuc1feLbI+0=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:41:bb:fe:7f:f0:b3:4b:e4:5a:6a:ea:22:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Jul 27 15:00:15 2026 GMT
Not After : Jul 28 15:00:15 2026 GMT
Subject: CN=cb7ffecd2d576500b0a484ee725ac23286cd360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:ea:a5:f1:33:19:b8:7d:9a:f4:5f:17:8b:
9c:20:65:ed:74:ac:4a:bb:83:78:c8:87:c1:35:57:
23:03:eb:3e:d6:1e:3e:43:af:7c:50:fd:db:4f:b5:
70:8b:46:e7:d1:18:15:86:53:f8:30:4b:3b:e8:e7:
79:30:b8:95:5e:11:2b:94:06:d1:bb:b2:a3:41:77:
47:39:cf:65:f2:16:e1:32:c7:14:7f:d4:bf:64:2e:
51:da:ac:f2:4c:06:62:b1:0a:49:59:82:46:c3:c5:
58:35:64:e8:10:f5:32:ee:14:04:4d:b2:a8:7c:38:
30:53:0a:a8:82:56:f5:7e:d8:4b:33:a7:3d:c7:4d:
09:01:f8:a9:c8:ba:8f:63:15:8a:87:1d:f4:4e:43:
79:c7:75:7f:b2:fb:eb:0f:d2:63:d3:38:b4:77:ea:
56:0f:8b:ca:be:f9:89:39:53:cf:46:9e:f9:2c:72:
58:e3:82:a4:6d:a1:66:57:6c:91:0f:a3:d5:ca:43:
c0:4c:39:b6:85:4f:2f:d4:c8:8a:e2:2e:8c:b7:9c:
f5:5c:5f:32:1e:f5:96:91:bf:fd:3e:67:ad:a5:10:
30:d1:da:40:38:d3:8b:aa:f3:32:de:d4:d5:95:59:
45:8a:c7:7f:a1:f1:67:be:cb:63:22:b7:ed:7e:72:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:FE:CD:2D:57:65:00:B0:A4:84:EE:72:5A:C2:32:86:CD:36:0D
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4a:62:ca:75:b0:33:a9:d2:44:31:8b:4e:fd:60:e6:41:34:
a9:e8:c5:b5:9d:d6:44:59:42:04:e8:46:79:e5:b6:fa:26:86:
f9:32:d7:7d:98:58:b7:31:07:14:78:1c:0b:90:ed:44:89:71:
48:11:64:6f:b7:4b:4b:f5:79:0c:84:6e:37:89:f3:e5:e8:48:
93:d1:81:95:bd:22:23:55:87:fd:fa:fa:3b:4c:fe:9d:60:a8:
2b:b4:68:fa:1f:89:0c:fd:ac:d4:6e:d0:aa:b9:fc:01:08:85:
83:c8:da:72:5c:3b:fa:d3:a0:8c:fd:3c:8e:70:e2:56:8c:64:
16:25:ea:1d:45:41:c6:2d:58:d1:64:e5:f6:a9:8a:ea:1a:04:
76:13:b2:ab:f2:ee:1c:ed:56:17:90:e2:c5:d1:e8:02:dc:b1:
c7:c4:48:84:0d:c2:23:d2:a9:af:87:86:1c:c8:ee:bc:55:93:
a3:25:d5:c9:97:0b:68:19:48:41:61:8c:70:5d:ab:3c:5d:01:
20:a8:d2:4c:a4:91:56:24:47:5e:67:5a:c7:2b:60:92:9a:90:
27:c5:25:6d:06:ad:fb:e4:df:59:62:9d:d3:a7:b4:01:ba:4a:
4d:93:79:46:f5:4c:53:e0:0c:a1:31:2e:c6:fd:d2:02:45:76:
c2:66:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:19:56 2026 by rpki-client