Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: QCNY3A9ly8whZU/iO2MwTjjGSGPYiwMMRY/gW7G22no=
Subject key identifier: 82:A0:BB:6F:43:47:62:4F:E6:BE:D1:60:D8:23:C5:B7:D8:44:56:70
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019F189E50773EB7BCBBF4B431679ADF3F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 166C
Signing time: Tue 30 Jun 2026 13:00:56 +0000
Manifest this update: Tue 30 Jun 2026 13:00:56 +0000
Manifest next update: Wed 01 Jul 2026 13:00:56 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: ovMRVoo7kU74KklmsfU7gxYMTEeYW8egf59f5sp30OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:50:77:3e:b7:bc:bb:f4:b4:31:67:9a:df:3f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Jun 30 13:00:56 2026 GMT
Not After : Jul 1 13:00:56 2026 GMT
Subject: CN=82a0bb6f4347624fe6bed160d823c5b7d8445670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:cc:90:88:1d:de:c0:d6:60:a7:ea:42:bf:
dd:a1:75:60:30:17:b0:a2:86:46:17:97:a3:26:e0:
56:c4:8b:52:7b:25:bf:45:74:c4:ac:25:37:c4:66:
ba:ae:9f:f5:59:c0:74:e5:81:ee:3c:f7:85:b4:75:
15:b1:6d:cf:6c:34:d6:6d:43:68:9f:f2:65:53:62:
05:6f:84:da:0b:90:c7:6b:ad:cf:0a:f0:7e:d5:71:
92:ce:da:dc:98:0f:9f:1b:90:28:6f:5d:a3:14:2b:
18:2a:40:86:8e:29:be:dc:00:6a:5c:d3:a3:49:c8:
21:83:24:7f:44:9c:f7:90:48:87:5b:8c:39:0b:f9:
a4:37:aa:38:ac:50:42:1a:dc:be:2a:d2:a1:9b:f9:
5b:f6:4d:91:47:2d:ba:3e:1a:e6:d2:c7:5b:c0:f7:
bd:2a:09:2b:cb:d8:73:a6:bb:9d:45:d1:b0:17:fe:
7e:ca:9f:9c:35:9c:d3:98:b9:4a:f9:04:42:77:29:
90:d9:52:39:ac:80:71:11:42:c7:dd:8b:da:e2:45:
ba:3f:ec:d3:a3:83:8b:8e:d9:90:e6:05:99:20:ca:
07:90:e2:f9:3a:43:b2:fb:d0:e1:35:1a:d8:00:c6:
77:bc:fa:1e:e7:3c:4d:c2:ae:4e:b2:42:20:75:ff:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A0:BB:6F:43:47:62:4F:E6:BE:D1:60:D8:23:C5:B7:D8:44:56:70
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:94:e3:b6:27:09:28:8f:7a:7c:df:59:32:60:c3:12:95:a6:
bf:90:f6:5c:c3:e1:03:3e:6e:ec:88:fa:04:00:a9:f6:0f:a7:
cb:53:2e:d4:df:ec:8f:22:de:75:52:c3:d3:43:6b:72:19:9c:
5e:45:6f:f4:f1:23:12:01:bf:17:c1:5b:02:01:a4:8e:8a:a8:
2b:60:25:ee:79:16:81:9e:95:ec:7a:b7:81:4f:19:bd:78:26:
a1:5c:a7:61:95:76:d6:e0:57:e7:7f:c8:e9:8b:83:4d:12:38:
dc:63:63:8a:ed:0e:7d:59:4a:2e:13:b3:53:76:9e:3c:cf:e2:
34:cc:f8:28:da:7f:e6:f1:3d:e8:36:32:4f:86:94:f0:26:54:
ae:aa:ac:57:8b:d9:7f:61:c7:47:7a:61:ca:7b:e7:f1:75:9a:
7f:fc:fb:77:e6:00:3c:ba:fa:34:25:1a:6a:41:a6:86:67:fe:
10:66:85:75:f3:c7:30:7c:44:de:53:b0:7e:f1:84:ec:be:56:
88:74:28:30:a6:00:28:8d:82:d7:d4:04:ea:37:82:3b:e6:96:
74:34:74:e3:2d:88:8f:a7:a5:6e:e8:e9:47:a1:86:29:f5:60:
8d:8e:99:fc:9d:48:29:f0:f3:47:a4:14:aa:a0:c6:74:12:c5:
e7:4f:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:38 2026 by rpki-client