Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: NqKYLtgzRIe+KzX9EXnP7jwE6xrJPvbWE2+WrFWJrvQ=
Subject key identifier: D5:7A:F9:1B:8B:2A:59:CF:17:82:75:4E:91:D8:1E:E1:56:A6:BF:FE
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019F8F7DE0E1EF37C58C36754F957E1D1956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0D07
Signing time: Thu 23 Jul 2026 15:00:19 +0000
Manifest this update: Thu 23 Jul 2026 15:00:19 +0000
Manifest next update: Fri 24 Jul 2026 15:00:19 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: fHQu0jXdO2eFvrv+oLDfU7DaJuQ9qS/9kcyd+P786A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e0:e1:ef:37:c5:8c:36:75:4f:95:7e:1d:19:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Jul 23 15:00:19 2026 GMT
Not After : Jul 24 15:00:19 2026 GMT
Subject: CN=d57af91b8b2a59cf1782754e91d81ee156a6bffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:f2:f4:3d:6c:23:32:9c:59:bd:29:f2:0a:
b3:7a:34:bd:95:af:c9:b9:08:f4:40:cc:eb:cd:ad:
cd:1d:0c:c0:1b:17:55:5d:ea:9e:f3:5e:3b:ff:5f:
00:7e:c3:11:1b:e7:6f:ee:c5:d4:92:22:9d:06:73:
91:c6:a6:13:f4:1b:58:3f:74:fd:a1:c7:37:ee:44:
06:3e:93:09:8b:86:ae:cd:3d:22:91:f4:2c:47:01:
f8:21:1a:5e:21:f8:99:67:06:52:4d:75:2d:a7:dd:
f5:49:78:db:3d:d3:3c:b0:38:63:ee:a9:b2:10:18:
6c:0d:da:0e:99:88:3f:29:46:0a:d6:9f:96:d2:88:
7b:e1:a8:b0:9d:01:87:c6:c4:5e:92:dc:fd:35:9f:
32:e3:77:f2:b6:98:87:ab:66:d7:09:61:55:ba:f1:
33:ce:17:73:41:f8:60:4d:80:db:09:83:ba:64:24:
0b:34:6a:77:63:1b:4a:5d:e1:66:57:7e:c0:23:dc:
d0:11:50:2e:5d:c0:c4:64:72:9e:2b:64:5b:3f:b4:
e0:44:c0:40:ad:7d:45:ec:e8:2a:a2:9e:84:ff:06:
ff:09:c6:73:c3:ee:e6:88:4a:81:3d:55:10:1c:27:
06:26:81:5f:52:1f:d6:7b:ec:12:7e:c7:6f:bf:84:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:F9:1B:8B:2A:59:CF:17:82:75:4E:91:D8:1E:E1:56:A6:BF:FE
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:46:56:71:d4:ba:2c:16:f5:89:49:a7:5f:e8:9c:00:53:
d9:94:ae:03:0f:b1:97:ea:e1:58:89:ac:85:db:cc:ad:c3:b1:
17:f5:3b:59:95:cf:6a:71:55:26:0a:e2:65:61:56:66:5f:d9:
96:f4:51:de:b2:97:a0:0a:2f:24:db:73:20:86:e3:54:88:7a:
85:e2:16:d1:e2:9f:84:d0:87:88:5b:39:e6:f6:6d:4f:86:6f:
64:ad:f1:8c:55:45:53:0b:16:de:ee:83:c8:4e:2e:f1:a9:66:
01:2d:e7:d8:77:e1:30:0d:2f:3f:b6:82:18:23:9d:9f:5c:68:
d7:ab:bd:d5:cb:82:2c:64:99:09:3a:ec:88:c3:7e:25:12:3f:
4c:42:cb:88:4c:72:35:88:a5:03:4e:6b:ea:52:f2:77:74:b2:
d9:d5:2c:0e:7e:2e:80:ef:1a:b5:8b:42:a0:3a:0f:55:f5:51:
12:77:30:78:6a:c6:d3:7e:2e:f5:c1:0e:9b:04:03:fb:ef:a8:
5e:02:08:1b:d7:8e:5e:a8:ee:80:b3:97:9a:60:7d:5d:8d:f7:
13:f8:37:83:2e:3b:dd:58:10:b7:cb:a3:6f:56:a8:78:83:ef:
7b:d0:95:9f:44:da:cf:fd:76:e7:62:2a:62:a5:0b:91:1c:80:
de:51:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:29 2026 by rpki-client