Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: eVjt3TeUH4iK0TKj/Al4jFKRFzZKRPgDZwOgCsI34es=
Subject key identifier: 18:68:47:6B:88:B6:AE:67:35:E1:F4:3E:4E:16:39:D2:80:BF:F4:83
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019F9090D975F36DF2FAEDBD2783BA77A45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0BFF
Signing time: Thu 23 Jul 2026 20:00:39 +0000
Manifest this update: Thu 23 Jul 2026 20:00:39 +0000
Manifest next update: Fri 24 Jul 2026 20:00:39 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: 2oThQc0JZJLqWsnZEV0yGBjxYM42uZEQEuRkF+Eu0Xw=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d9:75:f3:6d:f2:fa:ed:bd:27:83:ba:77:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jul 23 20:00:39 2026 GMT
Not After : Jul 24 20:00:39 2026 GMT
Subject: CN=1868476b88b6ae6735e1f43e4e1639d280bff483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:1c:ae:52:43:61:8e:7c:22:75:eb:6e:db:
63:a9:a6:0c:5b:ad:3d:65:ab:8a:fd:bc:13:27:7e:
89:62:67:d0:fc:46:f0:69:27:b6:20:87:4f:28:54:
9e:f1:d9:7d:9b:b6:58:ca:3e:20:b7:42:a8:f7:2f:
c0:93:56:2a:f0:26:89:69:49:46:a0:42:21:12:88:
7a:df:8c:bc:50:37:dc:32:1a:c0:0e:f4:f9:a5:5a:
07:75:8b:d2:41:af:39:6d:3e:f8:fb:03:fd:72:74:
52:ab:f0:86:5b:78:a3:8a:85:c1:6d:65:d8:ff:87:
22:7a:ed:03:99:9c:99:47:e2:13:9a:5a:29:9d:d0:
0a:a9:48:ab:e5:f7:25:a7:a7:62:f2:c0:90:e6:19:
e1:b1:20:5b:b2:93:17:32:06:62:cb:76:e8:9a:60:
5e:dd:57:14:03:6b:3b:b7:54:61:57:10:55:8c:e3:
aa:3d:b1:f6:7b:c7:1b:c0:1e:08:0d:a6:aa:0b:98:
05:6a:1b:63:c5:dc:bf:ab:d1:f2:13:5c:00:e6:34:
2c:d3:5e:2b:35:04:7d:b0:e0:70:1f:ce:20:85:41:
69:48:6b:21:82:06:da:ac:67:4b:90:08:94:c8:ad:
7e:21:66:71:65:59:42:6c:14:fe:4b:cb:c9:3b:2f:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:47:6B:88:B6:AE:67:35:E1:F4:3E:4E:16:39:D2:80:BF:F4:83
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:05:46:3e:c4:0a:47:21:3f:2a:52:c8:17:ed:57:5d:85:59:
1f:17:e2:31:5e:02:39:48:2d:5c:e0:73:ae:c6:9d:d1:41:6c:
f0:d8:a1:57:94:5b:80:17:9a:82:28:70:d0:1d:2f:3b:d2:05:
5d:ca:11:83:aa:ee:2f:3a:f7:92:a5:62:c6:05:40:c1:23:f9:
b6:19:ef:43:81:88:40:82:fb:38:9c:f3:c3:99:26:a1:88:65:
1f:ca:29:4c:b9:1b:a9:dd:fc:37:36:8e:c5:3b:db:b8:44:8c:
d1:73:6c:cd:be:32:b8:26:a6:88:eb:2b:a2:c8:ad:b5:b8:b4:
3f:75:2d:46:aa:2d:36:fb:d8:34:ac:1e:bf:0b:4e:d6:0e:6a:
c5:5d:01:4b:4b:e0:d6:f6:e9:6e:7a:e6:b2:cb:92:83:ad:ea:
d6:a5:99:6d:59:a7:5f:84:87:9f:3f:8f:ef:c8:f5:eb:f7:f2:
d4:03:08:01:da:aa:b6:b2:f1:c2:5b:e6:f5:55:91:10:3e:f7:
ff:cb:47:86:dc:1b:02:2b:f5:55:28:1e:9e:b4:38:47:b7:e2:
b9:6b:3f:ce:5b:91:26:e4:22:4f:50:29:89:b9:39:66:1d:d9:
a6:de:dc:0f:54:29:5d:c7:bb:64:48:3f:0b:23:3f:d9:00:d2:
51:fa:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:34 2026 by rpki-client