
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
File: 1sOjfCGNyegU2_xCq0dvJhZjHUc.mft (raw, json)
Hash identifier: T2ca8BX26k9n3YWfLHDYNTOYle2x1amdfeTZAfEioGI=
Subject key identifier: 0C:39:00:37:68:36:3D:40:A3:EA:44:A0:5F:B4:3D:8F:15:33:18:60
Authority key identifier: D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
Certificate issuer: /CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Certificate serial: 019F8F7E639B782AA832A5BC461696F7EFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:52 +0000
Manifest this update: Thu 23 Jul 2026 15:00:52 +0000
Manifest next update: Fri 24 Jul 2026 15:00:52 +0000
Files and hashes: 1: 1sOjfCGNyegU2_xCq0dvJhZjHUc.crl (hash: weJBMebQ5u1kHIjdTcSnYQW57uFtDly1rSAKd1XHVC8=)
2: Eu0fB4RPCslDaY2STwFsEjtmjM4.roa (hash: baHCjNbN0yoBwK8/yKMs0jfLYaaJD3Ay7zAQGrvne+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:63:9b:78:2a:a8:32:a5:bc:46:16:96:f7:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Validity
Not Before: Jul 23 15:00:52 2026 GMT
Not After : Jul 24 15:00:52 2026 GMT
Subject: CN=0c39003768363d40a3ea44a05fb43d8f15331860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:14:80:b3:00:ae:8a:03:94:cf:75:35:5c:
89:99:1b:b2:6a:86:9e:c2:20:36:25:bb:f0:25:05:
78:49:6b:1e:97:37:a7:d8:b2:7d:6e:92:eb:e7:f1:
91:25:46:68:d3:85:df:7a:74:ad:fc:90:13:66:dd:
da:fd:71:4e:10:79:c6:7c:39:ed:65:d8:c3:00:a0:
cb:ac:6a:8d:65:25:d9:8f:b8:3f:d1:a6:35:ee:09:
2a:19:af:be:2c:f4:13:e5:21:18:fd:9b:1b:ce:35:
7c:b5:ff:82:54:eb:48:3f:4a:91:66:0f:41:ce:0c:
3c:8b:fb:2f:97:78:dd:00:76:17:b5:7f:9e:1c:13:
0e:2d:b3:28:71:61:83:b6:4a:1e:a0:19:76:2a:eb:
5a:7a:aa:48:2a:6c:73:72:4b:9a:fa:9c:24:7d:bf:
70:2d:64:a3:ad:98:22:4d:79:f9:6e:5c:0d:65:44:
67:7d:1a:49:40:cf:bb:15:93:24:c9:b8:82:38:f7:
ae:86:f4:2b:86:93:e5:7d:c7:cd:55:8f:63:44:4a:
f1:18:77:6e:a1:54:53:d6:1e:24:92:80:56:f2:21:
b0:3b:f3:1d:98:31:e6:38:51:b5:c2:bf:be:0f:3c:
3f:58:4b:cb:e5:09:47:ce:cd:39:29:38:0e:6c:6c:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:00:37:68:36:3D:40:A3:EA:44:A0:5F:B4:3D:8F:15:33:18:60
X509v3 Authority Key Identifier:
keyid:D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:21:1f:3f:03:55:cd:a0:8c:4e:7c:73:dd:b8:40:a6:ff:0c:
bb:33:46:55:4d:64:ba:9e:9a:2b:16:57:ca:ad:9e:5b:c4:fd:
8d:3f:fc:54:c7:e9:30:f1:a2:69:b4:af:a8:a3:46:97:8e:ae:
e0:0d:c5:5d:df:96:ef:ad:1a:4e:cb:54:c5:0e:d2:6d:92:e7:
0d:7a:d6:e7:33:33:1a:38:ae:93:d2:0c:4a:21:25:62:e4:e4:
7b:de:55:08:93:a9:57:63:4d:42:43:2e:2e:ce:a2:1d:2b:54:
85:56:17:46:37:38:fd:b7:45:c9:5a:45:dc:05:eb:cc:3a:72:
52:9e:06:2e:d7:9d:1c:87:e2:cc:e0:fc:89:cd:ed:21:9e:95:
73:fb:7e:f4:e8:08:4f:9a:10:fc:16:9e:87:08:64:0a:ea:cf:
2a:49:f6:46:e9:e3:7d:87:6c:20:89:26:ed:24:fb:20:9c:f0:
6d:de:44:95:1f:bb:11:d5:1b:ae:90:44:de:33:ca:0c:01:17:
3e:01:37:eb:f8:d1:22:dd:25:35:e9:a1:10:37:2d:0a:2c:66:
b7:00:c7:aa:46:7d:b3:91:2f:3b:92:d9:87:36:db:96:98:cf:
f3:f0:e5:e3:f7:6c:77:ba:a5:14:7d:31:be:56:4f:54:66:be:
96:5d:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:30 2026 by rpki-client