Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: vTgZx01WwOB4FEVZatOM5EbNWSNYRgho/L3dXO8wrzY=
Subject key identifier: 8B:27:3C:F6:77:13:D5:B8:A1:02:E8:DA:74:96:97:F5:6F:87:B6:4F
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019F9059FE572DA60F6BA0DEE609F1ADDE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 01C1
Signing time: Thu 23 Jul 2026 19:00:44 +0000
Manifest this update: Thu 23 Jul 2026 19:00:44 +0000
Manifest next update: Fri 24 Jul 2026 19:00:44 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: SnWEE+QDGwwvk/jrxEjCTmFBt6a47Iu4kFrSxLGe2f0=)
2: RkMX5Ozt-aBvg83tpif5dYWlIs8.roa (hash: sE97AqRK+jdlW0OvHBvltFQHWQ2HKYV5m9H+8L8sv/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fe:57:2d:a6:0f:6b:a0:de:e6:09:f1:ad:de:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Jul 23 19:00:44 2026 GMT
Not After : Jul 24 19:00:44 2026 GMT
Subject: CN=8b273cf67713d5b8a102e8da749697f56f87b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:0c:22:9c:f2:40:db:2d:07:ab:d6:3e:a1:
5f:37:67:ea:d3:92:19:13:19:5a:13:0b:b3:6d:19:
b2:d6:61:f6:45:52:79:8c:02:c9:94:a3:1d:82:6d:
0d:b2:ce:fa:39:c4:f7:8f:25:09:1a:02:39:53:ce:
7e:77:cf:8e:dc:26:cf:01:fe:4b:14:49:90:16:77:
f4:a5:a7:6e:f3:2d:16:ad:74:f4:18:d3:3f:ca:2e:
98:73:dd:3d:b2:c6:b9:fe:e2:45:53:d5:01:d7:1c:
b4:39:76:7d:26:f6:21:74:37:9e:ad:91:6f:65:0f:
d5:32:e8:0e:41:2d:9d:64:ae:f6:92:49:9b:67:8b:
00:0a:1e:89:39:cc:54:2d:26:0c:d5:ee:8d:a8:0c:
c3:53:7b:32:20:83:09:b6:06:34:2d:4f:c9:a2:13:
c5:6b:54:11:90:1d:64:cd:bf:e1:2c:9b:c8:7f:3c:
ee:16:19:2e:53:da:ab:3d:68:9b:ce:81:59:39:61:
47:45:5e:d3:c5:e7:7f:f1:85:f4:08:91:d8:0e:38:
b1:17:6c:5a:2b:1b:c0:b5:08:75:ae:c9:e4:b7:da:
4d:18:ae:bd:c2:36:eb:90:f8:15:2c:87:2d:6c:d3:
0b:89:93:53:2e:75:bb:10:2f:5e:20:f0:6a:55:c0:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:3C:F6:77:13:D5:B8:A1:02:E8:DA:74:96:97:F5:6F:87:B6:4F
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:28:6e:5b:9a:98:68:25:bc:90:ab:af:7d:43:32:ec:05:4e:
6c:cc:ea:c9:86:23:fb:04:73:c5:a1:03:e9:f6:c7:2e:fd:3d:
17:16:9f:06:c5:44:ec:f9:0e:ea:7a:52:54:1f:cc:2e:f4:65:
a8:e8:de:8a:7c:e5:61:0a:0b:b1:a5:e0:12:7a:37:c5:cb:02:
4d:4c:0c:e7:fd:17:5e:2f:f9:63:ec:87:62:e8:8f:2a:fa:57:
02:ee:89:a6:7b:87:80:7b:15:95:7f:a6:e3:92:0e:45:c9:e1:
01:cc:38:d7:8f:69:b4:cd:3a:b6:76:22:75:cd:4c:b9:7d:81:
76:76:25:16:79:02:f0:05:f5:b4:f2:18:57:17:18:29:1e:1c:
eb:5b:bc:0d:b6:94:9a:4a:f1:7b:87:98:97:43:61:ea:90:59:
33:01:4c:2a:1a:bd:93:fb:d4:42:ff:16:f3:4b:22:30:99:4e:
2a:2f:24:34:ec:91:4b:97:81:a4:ab:3a:8f:b6:8a:48:12:a8:
1c:e8:66:a4:c5:4c:62:5a:f5:66:18:af:a9:ce:8a:06:62:f5:
ab:20:fe:7d:ce:a2:b1:23:d8:6f:b0:e6:41:fc:d5:c9:06:9c:
63:df:c3:ed:e8:c5:0c:ff:b0:23:aa:11:58:0e:2b:f7:d8:62:
c8:3c:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:44 2026 by rpki-client