Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: +AE65UFGk6RWBBbGO7bhkeHqShc86uXemYahhVbz024=
Subject key identifier: 42:48:09:4F:54:61:D9:70:12:7E:8B:4B:45:F1:9B:F9:81:4E:F1:80
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 019F90FE85004CB6670CED2ACC5512306610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0ED2
Signing time: Thu 23 Jul 2026 22:00:26 +0000
Manifest this update: Thu 23 Jul 2026 22:00:26 +0000
Manifest next update: Fri 24 Jul 2026 22:00:26 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: UDXOkITvqDiQ7PLgAkAk3V9wDntOd3/oVLiwyjbDQNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:85:00:4c:b6:67:0c:ed:2a:cc:55:12:30:66:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Jul 23 22:00:26 2026 GMT
Not After : Jul 24 22:00:26 2026 GMT
Subject: CN=4248094f5461d970127e8b4b45f19bf9814ef180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:a8:5d:ae:8a:cc:ea:55:8b:28:5d:e9:b9:
9f:f6:56:fd:c5:86:d4:24:4b:95:2d:e8:7c:bc:68:
7d:28:8c:cf:ed:55:b9:6a:a6:f0:d0:5f:5c:e7:e1:
ae:b0:bb:0a:34:be:1f:c6:73:70:b0:5c:e1:a8:0b:
58:23:4a:4c:ea:d6:2c:29:bd:a1:05:a4:98:40:1f:
94:f8:fa:7b:0c:8e:e6:cb:1e:fc:b9:11:72:6c:ad:
37:93:9c:53:a0:f5:33:91:fb:9e:44:72:7c:ca:e4:
54:1d:c4:f3:dc:b2:14:b1:50:2c:96:ef:a0:c6:b5:
4d:13:91:3f:5e:f8:68:ab:88:40:92:b6:ad:5f:52:
ce:81:4f:88:ee:eb:f9:25:93:8c:19:c7:ad:96:df:
af:95:78:64:c4:ef:f9:65:85:f8:33:2e:d9:5c:0b:
2d:47:7b:10:3b:82:d5:e3:f0:0e:93:1d:9f:55:c0:
d5:b1:26:2b:c8:35:89:50:7a:84:52:80:69:e4:c6:
d0:b5:73:6d:3f:b0:82:2a:5a:a2:36:df:f4:cc:60:
7a:20:ab:13:71:c3:c4:29:1f:6f:87:31:08:cd:c2:
3d:37:1e:98:56:da:47:1f:34:40:5c:49:91:44:8d:
c2:f0:9b:67:07:02:e3:0b:46:a7:58:92:17:55:0b:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:48:09:4F:54:61:D9:70:12:7E:8B:4B:45:F1:9B:F9:81:4E:F1:80
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:9e:5b:cf:67:2c:ad:af:29:04:a4:e3:6b:7f:a0:63:bd:
44:8d:61:cb:e7:ec:48:ce:cd:a4:31:29:23:96:c4:d5:c0:88:
04:96:c9:1d:ec:b8:a6:29:26:79:e8:c4:c9:3d:1d:54:6b:57:
a1:a2:ed:e2:01:5e:9b:b9:c3:3c:e5:56:a9:57:a9:3c:95:64:
a2:5a:64:d6:2f:38:1b:23:02:81:21:94:cc:13:07:79:04:23:
6b:ae:2e:24:c1:e1:29:7e:c1:84:cc:d7:18:97:6c:54:51:e5:
ab:be:21:ff:16:a1:f7:e6:56:eb:19:e1:76:2e:11:61:ff:15:
bd:f3:a8:60:a1:78:79:82:a2:f5:e7:19:85:86:89:60:a0:47:
c0:e9:f7:0a:3e:86:5c:1b:a0:b6:a2:23:b1:c7:d7:8a:3b:c5:
0d:6f:08:7b:ee:a1:d6:fc:9e:68:0d:a9:df:2d:a5:31:ae:c5:
cd:6c:33:a7:46:51:0c:bb:b4:7b:72:aa:51:57:7e:6a:23:9f:
01:69:88:8c:4c:3e:80:35:e9:3c:82:c2:0a:70:27:db:84:34:
ca:66:72:6e:9e:16:38:cc:10:b9:59:e1:0e:fc:1a:70:61:ff:
36:48:89:89:e1:1b:d0:6e:40:4e:e1:6c:02:54:a6:f6:e1:81:
75:19:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:53:41 2026 by rpki-client