Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: PiqTL/1YxOPawMoGaJL6t839ikrMquWXnxXykvX/7pw=
Subject key identifier: 8C:CE:D6:87:DD:77:A7:BB:8E:EE:BF:9B:70:D0:C0:CB:A7:E6:FE:D1
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019F8F1075302B2F2F9887F6146D4A7E2B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 13:00:48 +0000
Manifest this update: Thu 23 Jul 2026 13:00:48 +0000
Manifest next update: Fri 24 Jul 2026 13:00:48 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: 67XxStJ+RBHyIar6r3QDiHtcoXLuWKPAquo7Hav5iBc=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:75:30:2b:2f:2f:98:87:f6:14:6d:4a:7e:2b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jul 23 13:00:48 2026 GMT
Not After : Jul 24 13:00:48 2026 GMT
Subject: CN=8cced687dd77a7bb8eeebf9b70d0c0cba7e6fed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:c6:c7:16:61:40:25:0d:1e:2e:b7:0d:10:
d9:1f:e0:74:66:c4:2f:0c:4f:13:be:16:2c:19:b7:
f1:5f:1a:4d:3a:c8:12:f2:73:a1:85:1b:e9:3c:6e:
f6:69:ac:8f:8b:e5:30:e1:a2:39:b3:3f:23:cd:a2:
36:98:7e:a6:30:a1:16:89:08:12:32:5f:62:4f:10:
42:e1:4b:91:f4:4a:36:4a:0e:0c:14:c8:90:55:ab:
e6:61:1b:a4:7f:33:3b:d8:8d:e9:89:fb:c0:74:7a:
77:87:ae:e9:2c:b3:eb:03:b6:9d:54:9d:5c:88:3c:
c2:86:9a:05:c1:3e:83:2b:2d:d7:d8:e8:e4:d1:b6:
de:94:41:ed:84:15:fe:34:a1:e5:b2:87:10:1e:48:
2a:ca:6f:68:1e:de:ea:28:26:d3:eb:fd:ae:01:5a:
ca:8e:1b:05:4c:33:2b:7f:7c:ef:d3:25:86:d3:04:
c8:68:bd:53:af:08:89:0c:5b:ed:ab:1e:d4:90:9e:
2c:72:b0:c4:e4:ee:04:22:16:f4:3d:2f:93:4d:87:
6b:64:96:a2:4d:ff:cf:8c:06:78:18:5e:2d:e8:af:
d2:e2:8b:05:ef:ed:57:e0:ad:4e:ed:7d:76:c8:64:
e6:48:25:e2:a5:94:e0:81:4a:28:f1:75:df:49:b3:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:D6:87:DD:77:A7:BB:8E:EE:BF:9B:70:D0:C0:CB:A7:E6:FE:D1
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8c:70:55:1e:68:96:3c:10:2a:d9:51:3a:cc:70:39:2b:52:
08:17:47:0c:01:30:1b:f0:cc:90:eb:f3:04:85:5f:36:07:4e:
a8:bb:49:46:6d:cb:f7:40:62:2d:13:f1:87:5f:b4:14:5e:a8:
2c:a0:47:e0:b2:dd:cf:ab:44:6d:e2:d6:72:1f:93:70:40:ae:
7b:fd:b0:35:23:70:76:3f:f9:7d:39:b4:0c:61:16:9d:b1:b9:
71:55:06:10:61:3b:21:63:3b:25:ef:cf:b8:bc:67:f2:4d:4c:
40:7d:b4:16:5d:80:b3:e9:a4:3b:47:43:0e:0c:1e:64:72:38:
b4:7c:3b:42:9a:7a:22:e5:4a:53:05:7a:a5:7d:13:23:70:60:
28:14:ec:01:22:10:82:4c:fc:3d:bb:b7:f6:54:11:b2:57:f1:
d6:bf:15:8b:bc:6a:d6:cb:3b:b8:64:d4:df:a1:73:3c:f1:eb:
9c:80:8c:cb:7b:e5:f4:8e:ab:30:ee:c3:c0:18:ac:f7:9e:f1:
af:0d:63:c6:35:c4:bc:ed:97:6c:ec:0a:1b:bb:20:4f:21:39:
ae:6a:2a:34:a1:a9:9a:32:4b:a5:77:fd:f6:a9:8c:0f:3c:cb:
41:e6:1b:e5:df:f0:e9:7c:42:e8:f2:b2:80:eb:16:a6:f6:83:
d6:38:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:17 2026 by rpki-client