Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier: 6FuF5e8yuH3iolBhpHitqv/YRqfcR8yJ4r9c9m0RkHw=
Subject key identifier: A0:A8:07:06:AE:BD:70:24:A0:FC:AA:9C:BE:23:44:FD:0B:9C:84:4D
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer: /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial: 019F8FEC961FCEB5B1CBE83296B2F197D3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number: 06DD
Signing time: Thu 23 Jul 2026 17:01:14 +0000
Manifest this update: Thu 23 Jul 2026 17:01:14 +0000
Manifest next update: Fri 24 Jul 2026 17:01:14 +0000
Files and hashes: 1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: O+Bt6pUHMdQgM8lBan8Bnw0Yn3rE3na1ts3Usii6nJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:96:1f:ce:b5:b1:cb:e8:32:96:b2:f1:97:d3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Validity
Not Before: Jul 23 17:01:14 2026 GMT
Not After : Jul 24 17:01:14 2026 GMT
Subject: CN=a0a80706aebd7024a0fcaa9cbe2344fd0b9c844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4b:28:e1:6d:c7:56:fe:c9:69:ab:48:c7:84:
df:93:fa:de:1d:ac:35:22:39:94:93:95:73:22:4d:
36:a2:3d:8b:34:db:8c:9f:66:28:d6:da:4a:7b:db:
2c:bc:98:c3:3d:29:7b:07:42:77:b1:99:2e:98:a9:
fb:e5:a2:96:5a:97:6c:89:e4:71:f6:c2:cf:02:cf:
e7:26:10:f1:77:4f:3f:59:75:9c:1b:3a:d2:7d:ed:
63:a2:9c:a2:94:f2:e0:9f:f9:e9:22:af:94:14:85:
20:b7:15:43:97:76:52:56:9a:ec:70:f6:44:ea:35:
81:fe:76:f2:a0:fc:25:94:e3:a3:36:b3:78:7d:a3:
e2:a3:75:a2:a5:b8:f3:fe:fe:85:a5:0b:7d:ad:25:
54:27:d7:ef:d2:cb:37:8c:3b:cc:ef:9c:f7:18:3d:
9d:73:70:ce:63:b8:8e:6c:36:3c:be:3a:f5:19:2c:
fb:11:8c:d4:3c:9b:f4:ad:62:3a:60:84:64:45:26:
47:07:01:48:69:6e:5a:06:f7:65:a8:25:47:47:de:
bb:14:5a:32:43:42:a3:89:2f:4f:72:92:ed:fa:e6:
1d:a5:7e:c9:09:c2:93:3b:3b:59:12:fb:0b:12:d2:
d6:8c:5b:59:97:76:0e:e3:43:a1:fe:47:62:35:8f:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:07:06:AE:BD:70:24:A0:FC:AA:9C:BE:23:44:FD:0B:9C:84:4D
X509v3 Authority Key Identifier:
keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4f:61:9b:82:38:4d:ca:1f:63:0f:e1:9a:45:dd:16:95:ec:
31:da:d6:c6:d0:34:62:fe:63:9d:fa:fc:2f:2c:46:fe:dc:13:
2f:e5:cf:70:1e:1d:63:c3:44:a0:5c:dd:a4:19:8d:fc:1e:83:
7d:8c:87:f5:32:83:80:4c:2d:67:0f:28:b1:0e:4d:2b:43:a8:
99:14:03:47:45:c6:cb:42:c9:eb:c6:51:87:38:99:8e:74:5d:
9c:88:28:cb:f4:25:8a:8f:37:6b:87:7f:a4:d1:d9:76:06:ba:
ad:33:b8:fc:e3:3e:d5:bb:8b:67:7c:bf:c3:4e:50:2c:16:35:
1d:1e:ae:74:b6:39:ca:a2:dd:df:6c:fa:6c:84:2b:3d:e4:c0:
d4:97:18:fd:55:f8:21:2d:0f:d1:c9:17:25:06:50:d3:6d:73:
55:d1:cc:5e:71:9f:19:f9:b2:ea:31:a1:cb:ea:ba:bf:e3:63:
0e:2c:4f:c7:10:7b:9d:2e:0c:4b:a8:62:dc:92:87:26:52:d3:
11:56:bd:d2:d4:66:4a:9c:8e:04:e4:7a:b3:4f:28:8e:75:bf:
98:27:af:bd:99:78:ef:b8:d2:4d:9f:16:fc:52:ce:6a:11:5b:
fa:75:b0:72:d3:0f:3f:d4:ea:f6:54:3b:e8:b2:97:a0:2c:ae:
72:3e:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:53 2026 by rpki-client