Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: jQ34lUUvq6RHp0tLrkSy1g3iYYyN0TFWKwWoME7wqV0=
Subject key identifier: D7:E4:0F:10:BC:F1:F5:0D:19:6A:D0:A3:50:FF:4E:8F:5B:DC:29:36
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019F9211BF4B62B9FF30AD0DD040C2288700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0988
Signing time: Fri 24 Jul 2026 03:01:04 +0000
Manifest this update: Fri 24 Jul 2026 03:01:04 +0000
Manifest next update: Sat 25 Jul 2026 03:01:04 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: 2pGryL/xBrKntksJgxG/eibOO/Ev8WCAX3sNkDe5djE=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:bf:4b:62:b9:ff:30:ad:0d:d0:40:c2:28:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jul 24 03:01:04 2026 GMT
Not After : Jul 25 03:01:04 2026 GMT
Subject: CN=d7e40f10bcf1f50d196ad0a350ff4e8f5bdc2936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:1a:fe:45:b9:81:d6:0a:7c:54:72:7f:d6:
52:dc:84:d5:8f:95:9e:96:60:85:e1:e9:1c:60:b4:
1e:d0:e6:5b:9e:19:f6:f2:e2:7a:a5:59:03:24:32:
4b:0b:a0:8a:d0:74:5d:4d:91:f4:f9:15:4f:cb:0d:
39:88:00:7f:eb:83:3e:fb:26:6d:f9:5d:62:11:90:
c0:86:e8:99:7a:24:7f:da:04:f8:96:44:43:cf:27:
e2:87:34:61:82:03:3f:49:a6:90:15:12:8e:5d:d1:
b4:8f:0e:16:23:cc:45:8c:14:2c:60:4b:ef:be:61:
74:c2:e1:fb:ba:77:3d:f5:bf:68:48:cf:ba:74:0b:
4b:df:d1:a1:c7:5d:8b:bb:62:e2:23:84:a0:51:47:
5f:fb:e3:19:ca:60:ee:f4:8e:3d:72:d4:28:56:8e:
11:bd:20:63:2f:9b:76:76:ed:2a:ef:fb:7e:3c:f3:
84:66:e0:28:79:23:5c:c3:6e:a9:30:8f:5e:98:cc:
8a:23:68:c3:44:a2:02:d8:65:77:b3:30:27:aa:31:
a6:0f:85:58:66:a1:e4:83:a0:54:d6:fc:7c:76:bc:
4e:6b:b2:c3:26:ad:06:07:bd:0e:a3:5d:55:96:e0:
f3:5d:a5:2a:a8:c2:e4:8e:8e:15:f2:8d:c9:34:db:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:0F:10:BC:F1:F5:0D:19:6A:D0:A3:50:FF:4E:8F:5B:DC:29:36
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:15:aa:73:05:41:b8:1b:4e:03:b1:08:88:20:6f:a2:48:b1:
ee:b1:ca:9f:58:43:f4:04:0b:df:6a:1c:c3:c7:2e:41:97:31:
d9:80:c0:10:73:ae:4e:0e:1a:2e:20:30:6b:59:73:5b:3c:57:
ef:90:be:d2:55:73:ae:ca:c7:f0:3d:9d:07:c2:d9:5b:63:1e:
82:f3:85:da:07:15:1a:b2:bd:8a:b4:82:3e:bf:4e:99:76:ec:
7c:37:5c:25:93:2a:5b:5d:98:6e:e2:0e:79:e8:50:69:5f:16:
46:33:83:bc:73:9f:cf:da:f3:51:67:34:70:a9:02:2d:a6:9d:
9d:f8:7f:4c:55:79:16:9f:7a:6c:d5:a9:bf:18:37:4c:8a:0d:
7c:6b:4e:f3:bd:35:75:a4:38:74:89:a8:65:76:26:57:7a:a9:
1e:e3:48:4d:1d:f8:f1:9e:a9:93:63:34:76:2c:60:d6:8a:42:
9d:3e:1f:45:17:e7:5d:bf:1f:bc:1b:54:07:68:64:26:d8:10:
d1:a4:08:6b:62:88:60:20:d0:81:dc:2c:b7:79:48:b2:b8:92:
77:1f:74:05:ee:ed:19:d0:4d:5c:52:02:39:bc:81:e3:a8:9e:
2d:12:fb:f1:81:08:3e:fa:65:84:ba:17:6d:13:27:f5:c2:79:
ab:42:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:06 2026 by rpki-client