Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier: JgxvgqRUlEHED/oV2GfTvt3yiI9TZZ7XwCIqRVGdwE8=
Subject key identifier: BD:1A:08:0A:F3:C1:1B:AC:CA:40:1B:F2:25:57:A0:9B:B2:E5:66:17
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 019E205A9F84C7F0D196155CBACA5E684BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number: 0680
Signing time: Wed 13 May 2026 08:01:10 +0000
Manifest this update: Wed 13 May 2026 08:01:10 +0000
Manifest next update: Thu 14 May 2026 08:01:10 +0000
Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: UtXKl29ACMc8cqqqfrl6L7J2YTAcYEZPBt0/l7h9U1Y=)
2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:9f:84:c7:f0:d1:96:15:5c:ba:ca:5e:68:4b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: May 13 08:01:10 2026 GMT
Not After : May 14 08:01:10 2026 GMT
Subject: CN=bd1a080af3c11bacca401bf22557a09bb2e56617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:6c:a4:e3:3a:b7:8b:1f:35:ce:53:ce:ff:
f7:42:d4:62:f6:b8:a1:9a:b9:20:80:ab:dc:7f:15:
72:75:4c:b9:80:cb:97:b9:0d:96:32:b3:e4:f8:80:
7d:27:57:16:6c:72:15:a1:c0:4b:c5:f7:92:d7:b9:
20:71:c8:db:95:9f:c2:2a:ae:b3:6b:d0:75:ad:fd:
16:2b:f0:ea:e9:dd:6b:f5:18:e1:2c:3a:7a:5e:f6:
a3:2c:4e:9b:82:c2:7f:fc:34:57:81:3b:69:7f:89:
7c:06:67:8a:3e:87:da:9a:69:b4:fb:f6:66:c4:00:
03:8a:94:30:1c:e8:a1:52:8b:bc:70:0a:03:4e:3f:
fd:d0:87:7e:95:18:98:ab:14:2d:68:a8:4d:32:90:
0b:07:5b:bb:79:8e:d3:fe:12:ba:80:f7:77:63:d1:
0a:ad:b1:63:4a:87:a6:ea:ee:f2:e5:0b:4c:ca:a3:
e2:bc:04:c7:79:e0:e1:5c:b8:66:65:0b:b0:c6:6b:
2a:22:3c:a7:70:20:40:27:20:c2:ff:e9:d0:b4:25:
4a:55:90:4f:a4:67:c7:6f:0e:31:7e:95:3f:f6:92:
df:c1:28:6f:2c:45:af:ba:b3:91:74:1a:28:09:f8:
37:4f:50:44:ab:35:65:19:42:f7:55:c7:f8:bb:e0:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:08:0A:F3:C1:1B:AC:CA:40:1B:F2:25:57:A0:9B:B2:E5:66:17
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f9:0e:06:d8:26:fb:51:54:9f:62:4b:a1:67:09:b4:f2:04:
0d:64:7b:21:9f:2f:0f:2c:a1:ca:75:7d:cf:81:26:4a:d5:7f:
e3:68:6d:12:e2:1a:c1:2f:25:07:a8:43:ad:56:67:2f:e6:4b:
6f:91:20:b6:9d:a1:c9:28:2d:df:02:6e:41:e6:36:31:d5:4c:
f3:d1:93:e1:69:8f:ae:13:f8:10:ab:d9:24:51:53:d7:8e:a3:
36:25:5b:a8:68:c8:fa:4f:af:44:d8:80:c9:90:6a:64:47:f9:
f9:80:88:72:94:67:a2:82:1d:f1:fd:af:a5:e6:4d:c4:94:05:
69:4d:50:ff:1c:f7:53:cb:2f:6d:68:d6:95:37:6e:2d:5b:98:
8e:09:44:10:91:0f:16:75:4b:c3:12:e5:8c:48:28:cd:6b:a6:
f2:b0:24:89:87:64:74:76:29:3f:ec:78:3a:ab:b3:70:37:c8:
2b:31:c9:4e:3d:c7:e0:bb:9f:82:aa:e8:61:2a:32:4a:60:e5:
d9:02:00:92:1d:b5:c0:eb:2c:ad:a2:ab:64:f5:0e:ed:ab:be:
9e:77:c3:03:e8:0f:15:72:aa:e7:9b:d4:49:f6:3a:1f:77:21:
d3:2d:a3:14:20:74:43:03:cb:fc:82:d4:1e:1c:fc:fe:76:8c:
12:76:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:21 2026 by rpki-client