Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: 1Lt4LJo8HtTpRE3JN/swODVf31srVbYNZPl/EnkKV9g=
Subject key identifier: 45:96:16:3F:DC:4E:6C:FA:32:15:E7:43:31:23:EB:C2:E9:A5:56:59
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019F17C2DE6305812CDF3287EF356D1086B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 1169
Signing time: Tue 30 Jun 2026 09:01:14 +0000
Manifest this update: Tue 30 Jun 2026 09:01:14 +0000
Manifest next update: Wed 01 Jul 2026 09:01:14 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: vXEkzxBFYmV066+MP9eZpW6eudcGQ3IajQXzI0M5jFo=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:de:63:05:81:2c:df:32:87:ef:35:6d:10:86:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jun 30 09:01:14 2026 GMT
Not After : Jul 1 09:01:14 2026 GMT
Subject: CN=4596163fdc4e6cfa3215e7433123ebc2e9a55659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:9c:cc:c7:a1:4b:59:0f:d7:4a:c7:bd:d0:
0f:38:59:14:14:a8:8e:ce:b9:4b:6c:70:fe:28:4f:
af:de:c8:73:0f:c5:a1:ec:09:90:d4:12:be:c8:4f:
ec:70:5e:0f:62:c2:21:63:c3:54:d0:dd:33:f0:bc:
ac:5a:9e:69:d5:af:6c:56:5a:2e:46:5c:1e:c5:74:
84:93:9a:ac:9d:e7:e4:3e:53:d0:98:6f:b0:f9:3c:
a2:50:41:c1:2a:95:7a:52:d3:af:fe:d0:64:80:7a:
f2:09:03:63:1f:57:8b:e7:fd:e3:b9:20:fd:88:4f:
55:7e:f0:f4:9a:1f:ae:c5:1a:3a:e7:6a:1f:8d:46:
27:8b:b2:aa:cc:9f:8e:29:8c:69:13:4f:3c:31:3e:
c7:9f:87:2f:bf:59:0c:25:e4:82:77:c0:b0:6b:bb:
00:d3:7b:e8:ad:cf:d9:e8:e7:0e:90:96:88:6b:19:
ba:25:4b:3a:de:7d:bf:cc:6f:83:12:2f:ff:b4:2a:
d0:8c:05:c2:f5:09:08:ff:d8:e6:09:be:a3:d6:9e:
5a:94:75:66:7e:44:8c:99:d4:94:25:4c:68:c8:4c:
0d:d6:3e:6d:e6:97:03:98:ed:e1:6a:15:18:2e:1c:
1c:4c:bf:78:81:15:e8:50:de:47:6d:1d:be:c0:a3:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:16:3F:DC:4E:6C:FA:32:15:E7:43:31:23:EB:C2:E9:A5:56:59
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:ce:f4:08:ef:8b:c6:fd:dd:0f:14:e3:35:40:35:9f:04:
30:bf:02:d2:0e:81:76:1c:70:8c:b5:b8:c1:7b:e8:08:58:5d:
77:ea:c8:79:91:aa:d8:5d:81:fc:a6:04:b4:ab:51:8f:4c:14:
97:af:bb:c3:63:16:4b:34:ef:d6:fd:a6:13:54:c0:82:d8:2c:
df:97:54:3a:6a:7f:61:58:42:40:99:a3:1f:63:02:77:9f:3e:
69:47:13:9e:22:b3:aa:59:c2:ec:b7:0d:a3:3a:45:bd:51:74:
d3:b4:e9:de:76:ee:ae:bd:a0:22:ca:f1:75:de:87:f4:6d:98:
47:8b:76:d5:ea:1b:2a:53:b8:21:67:cb:a7:90:b4:f1:6f:76:
bd:b1:f1:cf:5f:8d:a0:7d:3c:ad:6a:53:72:b0:61:6a:64:76:
f5:b7:58:16:24:b2:a3:c8:90:b1:86:f3:0e:56:72:4e:44:16:
92:d3:57:e6:34:2d:1f:91:4d:ee:57:c4:6a:43:2e:eb:f7:87:
01:5d:da:23:fe:10:a1:e2:8a:a3:d7:b8:dd:70:52:56:de:c8:
9d:19:c7:d3:fe:98:aa:25:44:4b:ed:83:7d:06:ba:e7:cb:48:
87:1d:a5:41:87:b1:e2:e5:a0:0c:16:40:fb:b1:e1:dd:a3:e7:
6d:38:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:20 2026 by rpki-client