Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: 809Dc/OLhF2msmBzjrSGD7YpQxB1B4jqq4ESIBRuzc0=
Subject key identifier: D6:4D:D9:51:C8:0D:E2:F6:6E:52:DA:7F:86:81:44:F2:79:CD:F2:F6
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 019F9135FC43086F364D6DFF829317BF7AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0CD0
Signing time: Thu 23 Jul 2026 23:01:01 +0000
Manifest this update: Thu 23 Jul 2026 23:01:01 +0000
Manifest next update: Fri 24 Jul 2026 23:01:01 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: vuHLHV1qPrYN8rAPhtXQ6/phmhWQrwp3P2LliLh5Luk=)
2: LyC_vUctmu4Jy1dYcPIwrODD2Ns.roa (hash: yIwrLI/p+BAFGpVM3yWfqZ2AnOKV2a2znACWvzNWVRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:fc:43:08:6f:36:4d:6d:ff:82:93:17:bf:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Jul 23 23:01:01 2026 GMT
Not After : Jul 24 23:01:01 2026 GMT
Subject: CN=d64dd951c80de2f66e52da7f868144f279cdf2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:f7:e3:47:fe:3a:28:ea:70:5f:df:52:1d:
7f:65:6c:3a:6f:00:67:40:c0:78:a7:f6:3b:5c:5d:
c0:be:cd:21:32:41:f8:6b:4a:9b:ae:7e:4a:d4:56:
ea:db:f1:66:92:ea:c0:21:ba:5c:3d:61:20:f7:a1:
0c:b0:47:2e:bb:db:6d:55:67:aa:a1:7f:05:72:ee:
5d:3f:a9:f1:3e:1c:54:f7:2e:fa:2c:f7:1f:fb:e0:
79:4d:d3:74:9f:88:b8:1e:12:0a:d6:41:5f:da:1a:
00:79:a2:f0:1e:72:f0:cf:c2:d8:91:81:85:2f:4a:
70:8f:a6:05:81:7c:0e:ee:d9:ac:c5:7d:9f:b3:f5:
dc:02:23:a9:ed:6e:87:79:cf:74:e2:f9:da:f8:30:
88:82:c7:fc:bc:b4:f5:b3:07:05:90:c6:6f:7c:1f:
05:1f:a8:5c:64:53:b9:3c:2d:07:f4:bc:a1:d7:ae:
a5:03:49:d1:6d:29:65:24:43:f9:3b:b6:3c:f3:cd:
cd:20:5c:84:18:53:1c:12:49:d3:e7:2b:2c:75:51:
5d:7a:be:5b:af:3f:5f:f5:72:a5:16:6e:b3:b2:dd:
f6:a9:4b:90:50:fa:0b:9d:b8:35:24:93:93:94:ad:
97:68:dd:48:30:a3:2a:58:6a:c8:6e:d0:44:23:27:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:D9:51:C8:0D:E2:F6:6E:52:DA:7F:86:81:44:F2:79:CD:F2:F6
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ce:79:1a:c4:5f:5e:2f:c7:12:6a:83:b4:46:8d:51:b6:eb:
8a:68:88:76:cd:50:82:2e:42:3a:c6:d7:dc:8d:ca:64:c7:2b:
24:da:b9:ae:39:51:ea:19:66:ac:6e:81:69:f6:e4:a4:89:68:
0a:5a:6f:3b:28:ee:03:cc:88:af:fd:ea:9e:30:d5:b4:d7:ae:
ab:88:14:e9:21:de:a3:a8:ac:41:55:5a:fe:29:3b:d1:36:1f:
00:35:04:8d:aa:f6:d5:6d:9e:4b:eb:7e:eb:09:f4:97:8a:a5:
2e:9d:73:47:76:81:16:ed:b2:07:0e:d0:7b:e8:1c:63:f1:18:
2c:77:f9:9b:b4:ca:44:89:7d:1e:82:f5:e1:9f:c6:bf:d0:ad:
03:d8:da:00:38:8a:9e:49:c4:31:05:ff:47:a4:0f:bd:f2:04:
98:3f:08:85:b9:36:e5:a1:79:e9:ca:17:a4:e1:c7:05:95:50:
37:dd:3b:8a:10:5b:ee:d9:bd:61:43:80:a3:02:a0:cc:52:dc:
a7:4f:e1:0b:17:d1:7b:9b:d2:8a:dc:93:f5:57:00:96:71:a1:
17:91:59:3e:9c:f8:8e:37:24:11:84:00:5d:23:2f:d0:74:9f:
f4:13:22:3e:f8:18:09:b1:d5:fd:16:42:96:ba:fc:78:76:e5:
c7:5b:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:37 2026 by rpki-client