Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: kgbbz9JEro6LwS/xjodsqaR7zdDiMzGXeEn4292b9HI=
Subject key identifier: 6F:23:29:75:0C:EA:12:BD:98:D7:B3:05:CF:D7:F3:A8:2F:89:8D:71
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019F90C793A900A554F5F4F7E1110AE62911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 0361
Signing time: Thu 23 Jul 2026 21:00:26 +0000
Manifest this update: Thu 23 Jul 2026 21:00:26 +0000
Manifest next update: Fri 24 Jul 2026 21:00:26 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: onLD9IPAP/aZPMXeZ3035umkmDLM30ALedRNVcyhZXQ=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:93:a9:00:a5:54:f5:f4:f7:e1:11:0a:e6:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Jul 23 21:00:26 2026 GMT
Not After : Jul 24 21:00:26 2026 GMT
Subject: CN=6f2329750cea12bd98d7b305cfd7f3a82f898d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:ce:ec:09:c8:7a:b7:41:f2:93:d7:a9:ff:
d6:bd:99:e3:5b:73:67:de:04:e4:9b:5e:6b:08:c9:
e5:ad:f4:2a:aa:ec:db:95:9c:7d:f7:f5:1d:15:aa:
d5:b0:2a:7b:c2:85:b4:07:cb:33:dd:15:d1:5c:6c:
e2:d0:e3:d3:d8:85:47:1c:52:46:fa:5d:a8:e2:bc:
8d:98:b5:4e:88:18:1f:67:ce:f0:ab:47:3a:3c:c2:
53:aa:76:c0:98:06:7d:58:06:2a:0f:b5:f0:9a:4c:
63:10:d7:58:49:bd:44:6b:da:fd:7c:75:d5:c4:76:
ae:8f:45:7b:66:eb:d0:0f:e0:d9:c6:39:58:e0:81:
b1:32:d3:ba:a9:be:8d:6d:e6:73:30:fa:00:d3:35:
5f:f7:92:9e:ec:4d:2a:dc:ec:44:d8:60:ca:90:83:
01:f5:7c:4c:91:97:87:61:58:f5:53:99:ed:45:0c:
a3:35:c0:0b:0a:84:6e:e4:48:11:0b:21:d0:62:32:
5c:8e:bd:63:00:16:f2:d7:40:45:78:f6:e1:4f:ba:
7a:83:8e:72:15:e6:e6:b4:6f:44:ed:66:16:ab:d6:
18:eb:c3:2a:35:8c:70:3f:50:58:7b:8b:52:02:ee:
f8:bb:28:97:3d:e4:e1:83:9a:19:be:7f:09:e1:95:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:29:75:0C:EA:12:BD:98:D7:B3:05:CF:D7:F3:A8:2F:89:8D:71
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:53:3d:4e:8c:36:2a:13:ba:5f:c7:07:61:0b:02:b6:91:
52:9c:03:c5:3e:f9:03:bb:d8:fb:a7:f7:5b:c9:ad:0f:31:e1:
50:da:65:c8:2b:06:4d:c8:b9:b3:2a:34:f4:1e:ab:8d:0a:ce:
6b:f0:0b:26:1b:02:70:9d:44:9d:bc:9b:a1:ae:c3:7e:83:af:
15:bc:92:0e:50:0b:0a:6b:8f:53:dc:1a:80:6a:41:3b:ed:68:
ef:32:07:71:34:e9:19:39:42:a9:52:b0:38:00:12:56:91:34:
f4:57:2e:e1:9c:a0:34:87:7c:ab:41:6a:af:a6:8f:0c:5c:29:
fc:4a:f1:0f:ff:7f:82:e9:39:d5:7f:a0:75:45:8b:44:38:1d:
f1:10:be:be:77:60:60:3d:0d:da:bf:51:f9:b5:80:af:7c:33:
0a:77:aa:6a:3e:a8:b1:83:fb:ec:1f:7b:e5:72:9a:42:7c:3c:
48:5a:10:c3:92:e2:1a:cd:11:ee:e7:7e:80:aa:6b:da:e7:6f:
83:1c:c5:9f:53:59:e1:91:44:1f:a9:07:cc:1f:1d:66:5e:a5:
cf:de:a6:12:3a:9b:df:2a:90:d9:3e:25:17:ca:39:90:1f:de:
bd:b6:f0:03:1f:70:0e:51:8a:e9:be:39:7a:3b:39:9b:79:5b:
64:8f:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:58 2026 by rpki-client