Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: agnkZ+PKL6Yd27li2l+Je+aUN9MsROTxYZGYc43E4f0=
Subject key identifier: E2:F4:84:E6:9C:64:AE:FF:86:07:76:1A:38:2B:8B:1D:EA:67:4E:EB
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 019F909142AD1C7F96301D3C9D26D15ED5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 0BDA
Signing time: Thu 23 Jul 2026 20:01:06 +0000
Manifest this update: Thu 23 Jul 2026 20:01:06 +0000
Manifest next update: Fri 24 Jul 2026 20:01:06 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: YUUOjIBLB1Sf5X3rGBY3ikGvDdORkbgjPDlaWrcmEk0=)
2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:42:ad:1c:7f:96:30:1d:3c:9d:26:d1:5e:d5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Jul 23 20:01:06 2026 GMT
Not After : Jul 24 20:01:06 2026 GMT
Subject: CN=e2f484e69c64aeff8607761a382b8b1dea674eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:98:9b:f8:08:42:b6:04:d7:96:31:20:ba:
58:3b:3e:32:15:e8:be:5b:38:71:45:1d:75:22:13:
32:cb:aa:2a:66:18:7e:2e:16:a5:ec:c9:25:c6:ca:
e6:87:4a:7e:2d:e3:7f:4b:23:77:f0:8d:4e:0b:93:
16:67:17:39:91:7b:ef:78:6e:69:ec:3a:c8:4e:1b:
31:05:b2:8d:1a:18:36:0e:63:8b:3a:56:c9:f1:aa:
6e:d1:5b:31:cc:e4:a7:45:8c:2b:02:a2:8e:3d:66:
1d:d1:36:69:41:f8:28:d9:f4:68:2a:a9:df:66:53:
e5:95:56:0b:1b:3a:4e:d0:7e:cd:c5:94:6a:c4:9b:
f3:7c:cd:c6:a0:70:73:8e:e7:c8:11:5a:d6:95:d3:
aa:41:32:55:88:5d:5a:ea:9f:58:d2:a1:3f:93:0e:
06:7f:34:69:36:5c:86:db:1a:79:3e:79:19:61:5c:
01:8f:6f:ef:67:c2:b4:b5:a9:e3:d8:8e:4d:01:9e:
7f:fc:88:8a:1b:d5:fb:d1:fd:df:42:f4:fe:20:76:
38:57:6b:af:b3:c1:15:8c:f8:aa:96:4c:e4:84:f3:
47:1c:3b:91:28:b6:bf:5a:eb:c5:de:2b:99:4e:5c:
49:90:a0:63:1d:63:b4:f5:29:ab:7c:8a:c1:67:8c:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:84:E6:9C:64:AE:FF:86:07:76:1A:38:2B:8B:1D:EA:67:4E:EB
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dd:b3:ee:36:4f:89:9b:89:78:25:14:e0:ae:6a:5d:d5:0e:
66:72:b4:0e:2f:55:32:4c:f5:57:17:67:c6:e4:55:c5:2a:49:
89:51:d3:8a:78:0a:25:31:db:f7:9c:a8:89:7d:2a:10:28:36:
54:f4:72:45:26:c5:ba:f1:80:75:07:3a:bc:22:b3:90:83:ee:
d2:c5:39:14:1a:69:d1:8e:b3:10:f3:d3:8a:f7:2a:19:60:47:
89:64:df:ac:fc:70:db:ee:15:de:fd:c8:ce:07:9e:af:32:7e:
a9:38:90:07:97:df:2b:40:4a:00:b8:ac:8f:ca:fd:79:4c:ab:
c3:c0:03:fe:4d:87:6f:0c:a9:fd:15:d5:2a:90:a0:13:86:2c:
04:81:27:99:12:9c:c0:82:94:e5:9c:9f:5c:4e:a9:c1:ba:c6:
59:d2:b3:dd:26:af:d2:36:54:ea:d0:d5:37:50:1a:1f:a8:be:
51:2e:97:e1:7e:09:a5:9e:9d:9f:1b:5a:d6:6b:f8:ca:c5:e3:
e9:24:a7:49:3d:a8:1a:89:2b:67:05:47:79:49:8b:91:3e:25:
1f:ed:d6:a3:13:59:7e:cc:f1:47:1a:45:ce:03:46:7f:2e:53:
7a:30:f9:60:0e:2b:2b:d2:b9:96:e0:a7:c4:ec:fe:4a:62:26:
4b:c2:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:16 2026 by rpki-client