Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: ndtjqLOPpF9BHq1dTERn2kNeCDqu/dVOUOMskDfJG0c=
Subject key identifier: 69:12:C2:6E:9E:A5:1F:8B:74:C5:6C:79:0E:DC:7F:0E:CF:F9:62:0B
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 019F9135F4CD365326967D5530351AC42A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 04D8
Signing time: Thu 23 Jul 2026 23:01:00 +0000
Manifest this update: Thu 23 Jul 2026 23:01:00 +0000
Manifest next update: Fri 24 Jul 2026 23:01:00 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: uTmhZI/CaGJsbJEP0kaadqKycr80ZPOLHtFVnbclZfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f4:cd:36:53:26:96:7d:55:30:35:1a:c4:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Jul 23 23:01:00 2026 GMT
Not After : Jul 24 23:01:00 2026 GMT
Subject: CN=6912c26e9ea51f8b74c56c790edc7f0ecff9620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:3e:cb:8f:0d:69:23:ea:98:8f:b1:b4:d5:
b1:fc:7c:39:cd:97:c6:b4:5d:62:3d:69:f4:53:74:
0d:3e:72:46:df:69:e7:4f:6c:b0:6f:aa:fc:34:25:
81:54:dc:ce:20:44:fa:88:6a:f1:01:d8:7f:c8:dd:
2c:91:3b:cd:3a:40:3e:ae:2e:6f:14:7b:eb:d6:76:
22:f5:aa:c2:ed:2f:5b:4f:a1:78:f7:87:4c:f8:13:
d7:6a:5f:1f:f2:a5:8c:52:10:ee:e7:af:5a:12:8a:
83:1f:63:05:59:53:75:8d:76:e2:19:a8:50:73:fc:
69:41:c6:17:c4:dc:7a:6f:3e:80:44:45:4a:7e:bc:
5c:15:3d:8d:05:a4:38:25:58:2b:e1:90:7d:ea:4f:
37:3a:f5:2f:f3:fc:a0:a2:b7:31:e2:d8:2a:9c:1a:
af:5c:d4:03:42:06:c0:3a:9d:2d:60:05:0a:7a:b8:
87:8b:f5:4f:62:7c:2b:4c:f1:59:fc:49:92:33:d5:
b8:14:e3:52:5a:b6:e8:df:cc:75:26:04:81:36:98:
cc:b8:f3:68:97:ce:33:8f:17:81:e2:eb:c7:ff:ed:
e7:37:31:c5:9b:a9:1b:87:28:34:5c:6a:dc:bb:5a:
11:8e:bf:2f:ce:7b:8d:0a:4b:8b:6c:4e:54:3b:d6:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:C2:6E:9E:A5:1F:8B:74:C5:6C:79:0E:DC:7F:0E:CF:F9:62:0B
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f9:62:a4:39:7b:57:16:f3:03:6a:ee:4c:bc:c1:51:de:89:
0c:09:e8:8d:6d:93:e3:a9:22:54:e1:07:c1:bc:a4:41:4e:23:
cc:3c:3f:45:b0:a1:33:84:2a:eb:60:33:ed:be:7a:f8:3d:9f:
13:a7:ca:b6:ce:5d:c3:5c:1a:3e:5b:90:9a:7b:a7:0a:6a:66:
ec:c5:64:65:99:ca:d4:e5:fd:65:11:7f:26:e5:57:73:24:aa:
cd:4f:e9:7b:43:4e:9e:24:67:4c:bd:b3:a6:37:72:3c:5f:42:
37:67:51:c4:21:68:0c:20:e4:e9:25:1b:62:5b:a3:23:05:6e:
64:98:7d:1d:60:d7:d5:35:8b:58:b8:b6:22:04:2b:8a:2d:32:
e4:8c:54:ff:1e:7f:11:29:00:81:18:e5:f9:c0:7c:53:d9:ce:
87:24:aa:29:b4:49:e5:75:10:2b:84:bb:ef:36:fb:62:d4:2e:
55:6a:e0:83:eb:2f:00:16:cd:29:b1:11:7d:50:e4:4a:1b:89:
3a:3f:c6:c6:91:a8:ef:32:13:ed:14:e4:c8:a4:e6:c1:7e:d7:
38:8a:54:10:f6:2a:75:86:52:9d:4f:b3:9a:36:fd:88:a9:6b:
75:d5:5d:62:02:22:ee:d4:d0:57:e7:6e:c1:58:19:45:0d:c8:
3b:91:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:51 2026 by rpki-client