Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: p9qlhL7TdmxwxH1ZCF1X1JCbJLfosd1SRAAWdNZZ7ek=
Subject key identifier: 72:84:E7:BB:0D:E2:FB:63:D8:A0:30:53:62:64:16:6A:18:D2:2F:35
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 019F91DAF9D41E63AB0F8FC3673EA44C0E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0D71
Signing time: Fri 24 Jul 2026 02:01:14 +0000
Manifest this update: Fri 24 Jul 2026 02:01:14 +0000
Manifest next update: Sat 25 Jul 2026 02:01:14 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: AsFsv/bvzdv4ZB+LtGd09GY/IBrjuJOkkh5Naj1h+ls=)
2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:f9:d4:1e:63:ab:0f:8f:c3:67:3e:a4:4c:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Jul 24 02:01:14 2026 GMT
Not After : Jul 25 02:01:14 2026 GMT
Subject: CN=7284e7bb0de2fb63d8a030536264166a18d22f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:05:16:40:86:b4:d1:d5:a7:c3:94:61:11:
ac:ed:e6:20:ef:50:95:02:17:4d:c1:1e:18:9b:29:
60:bc:02:76:34:78:0e:90:16:2c:56:90:3e:bd:16:
eb:3f:38:4e:a1:56:0b:da:0e:45:37:13:61:c3:cf:
66:bf:cc:a6:3f:94:12:77:51:7e:a0:50:77:7a:87:
94:4c:6d:5b:03:31:7e:42:0d:65:85:c7:c8:f3:65:
51:4b:1f:f4:de:3d:7b:a6:c3:95:37:f9:c9:66:74:
fe:26:22:a1:69:88:dd:0d:74:bd:fd:69:e3:7f:73:
9d:79:7b:5d:9b:27:21:99:f8:15:0c:51:60:2a:38:
c4:95:d5:10:45:bc:d1:bf:1d:b0:b3:7d:9d:60:3c:
28:aa:7d:c7:17:7e:80:a4:1b:91:86:26:25:e1:01:
09:c0:f6:77:69:59:c5:ae:11:1a:b4:e6:64:cf:7b:
43:5e:85:58:0c:d6:c8:23:84:e8:11:d9:3d:25:81:
71:9d:27:b7:a4:16:b4:cb:6c:66:f8:a7:20:02:96:
3f:1e:b1:19:48:9f:13:50:29:4a:85:e9:aa:ab:5a:
73:13:8c:6f:9a:42:1a:0b:4c:9a:7b:18:66:3e:df:
06:5c:02:33:8f:9b:6c:c7:da:0c:5c:c6:44:21:d7:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:E7:BB:0D:E2:FB:63:D8:A0:30:53:62:64:16:6A:18:D2:2F:35
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:50:04:27:47:33:f0:68:dc:39:42:2c:96:0a:38:cc:e7:
e9:96:11:dc:11:74:90:38:ca:69:81:ea:2c:55:4a:00:b2:21:
da:2e:09:68:a0:6d:55:91:c5:fe:74:dd:29:39:cc:76:ab:05:
35:3f:43:fb:eb:e8:39:66:f0:bd:b1:17:34:88:df:8b:17:db:
94:12:a2:11:34:78:d5:74:7a:07:d6:8d:41:72:12:68:85:a7:
8f:5b:7a:d6:c6:b4:26:e6:c1:11:a1:29:36:e7:5b:50:4c:33:
b6:0e:91:b4:a7:72:f1:c3:3f:d8:ea:65:a4:42:e4:64:6a:95:
72:c9:b6:63:c1:1f:ff:71:61:87:4b:3e:3c:52:81:a8:83:96:
e4:df:eb:ce:9c:7e:28:41:e1:88:8d:eb:24:cb:ef:32:cc:3b:
69:0d:14:ce:20:cf:fc:c0:f9:cf:29:9c:9c:bf:ef:b0:26:0a:
a7:1f:ec:f5:70:cb:b7:ce:06:59:3f:e9:dc:66:29:00:91:e2:
3a:ba:3c:65:86:6c:a2:99:13:e6:26:c1:78:cd:c5:f2:49:2d:
e3:33:16:13:95:28:f3:ab:b5:63:49:35:d9:34:c4:9f:b2:fa:
94:98:3c:4e:ce:b5:81:73:fd:90:da:0f:cb:a1:0c:a2:a0:6e:
8a:68:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:31 2026 by rpki-client