Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
File: 1lcpIU0Paz-lGho4A32rjeSOBVg.mft (raw, json)
Hash identifier: wnq9sMwRatDLFUF7JYtV1Xxwwqn/U16blr6TUUUasyE=
Subject key identifier: 4F:70:69:C1:2C:71:01:53:5D:EB:E8:AA:FA:9D:A7:C6:FD:EC:1C:28
Authority key identifier: D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58
Certificate issuer: /CN=d65729214d0f6b3fa51a1a38037dab8de48e0558
Certificate serial: 019F91A3B5DB631EDF321BDFDDC5D5273607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
Manifest number: 0A27
Signing time: Fri 24 Jul 2026 01:00:52 +0000
Manifest this update: Fri 24 Jul 2026 01:00:52 +0000
Manifest next update: Sat 25 Jul 2026 01:00:52 +0000
Files and hashes: 1: 1lcpIU0Paz-lGho4A32rjeSOBVg.crl (hash: 307zibCIP5BfR7iZ1io7T75iC+ME/dgW8ujBszOJVqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:b5:db:63:1e:df:32:1b:df:dd:c5:d5:27:36:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65729214d0f6b3fa51a1a38037dab8de48e0558
Validity
Not Before: Jul 24 01:00:52 2026 GMT
Not After : Jul 25 01:00:52 2026 GMT
Subject: CN=4f7069c12c7101535debe8aafa9da7c6fdec1c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:42:87:54:7b:df:85:bf:9b:64:a4:d5:ba:
d9:8a:ac:1e:ed:62:a1:1e:83:fd:6a:81:8d:b8:b3:
b3:47:24:34:95:3b:2d:0c:d2:6c:27:a0:64:05:d2:
19:c8:d7:7d:04:71:a4:72:5c:80:3b:4b:00:0b:81:
d6:98:ee:f4:7e:c3:b5:91:36:64:10:23:b1:c0:2a:
2a:17:91:e6:ec:af:98:13:7b:77:1b:e8:6c:18:cd:
27:61:ca:69:ae:ca:06:40:01:f4:91:de:5d:48:93:
1f:c8:95:db:2f:f8:8a:f8:db:59:ff:3f:c4:7c:fc:
d3:04:58:1b:62:29:0a:f6:0f:03:b6:b4:42:27:f1:
da:8a:e4:8a:65:4e:69:fa:cd:1c:17:52:94:7a:00:
b1:c0:e0:65:6b:36:f7:be:79:88:08:27:d3:27:23:
6c:eb:2f:94:d7:29:3f:ec:de:4e:06:c2:66:6c:eb:
f4:0f:b9:91:a1:a9:14:16:61:f0:13:1d:bf:8b:8d:
6d:9b:ec:07:54:57:01:18:ad:d4:9d:35:a4:7f:ca:
9e:c2:47:66:7f:cd:cf:c9:45:14:91:af:b2:41:af:
c5:7e:5d:76:9e:b6:06:43:46:b8:c1:04:d8:fd:a6:
24:7b:dd:93:ca:5c:ef:63:1d:53:94:91:64:ca:1b:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:69:C1:2C:71:01:53:5D:EB:E8:AA:FA:9D:A7:C6:FD:EC:1C:28
X509v3 Authority Key Identifier:
keyid:D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4b:b2:9e:4d:41:c8:4c:ed:bb:f6:0c:0a:12:92:c7:bf:b9:
4d:a4:37:e0:eb:4b:d3:70:8a:32:e3:8e:9b:61:8c:72:f1:9f:
cb:36:c0:1c:ae:08:ad:e1:53:36:7e:f1:18:7d:41:5d:36:bf:
02:07:b1:6e:cd:7f:ea:0e:f5:78:d2:c1:a2:ce:22:83:41:14:
85:81:19:03:8f:6f:5c:67:b9:8e:11:01:2f:73:63:00:39:f2:
b8:6c:44:37:27:ad:20:93:3c:5c:85:eb:2e:81:ce:3e:58:27:
39:8a:f3:00:bd:9b:bb:e7:5d:91:c4:a0:8e:fd:60:8c:a8:4f:
74:e9:35:ea:bc:e2:fe:3b:82:5b:18:57:30:c0:ae:65:0d:74:
94:bb:14:1d:ed:5b:6e:6a:4b:da:85:e3:83:ec:98:5f:07:0c:
33:27:fe:ed:04:77:05:20:c0:c4:84:79:0f:f9:9c:b3:60:c9:
ab:83:cd:00:0b:1a:b0:3f:ff:34:e8:f4:ee:74:ea:9d:5a:08:
df:32:1d:7c:51:71:23:01:06:c8:61:a5:04:19:e7:9e:d4:58:
e4:8b:47:b6:60:aa:a8:5b:d2:56:43:45:1a:54:1d:b4:77:e0:
33:b2:a0:64:65:74:3a:b5:9e:e4:29:8f:2c:09:47:a3:72:67:
30:02:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:00 2026 by rpki-client