Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: ZdRGQnWaePdsipSLrkS1aZSJk33/MVWACX9TwAP2fTA=
Subject key identifier: 1C:32:90:DE:F8:64:44:0C:FC:A0:56:1B:8B:A6:16:0E:29:0E:46:0D
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019F90C76792F2C8EA9BBB6B7E7BA3A3EF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 11C1
Signing time: Thu 23 Jul 2026 21:00:14 +0000
Manifest this update: Thu 23 Jul 2026 21:00:14 +0000
Manifest next update: Fri 24 Jul 2026 21:00:14 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: hpSJMuXMNy1XJ4GUk2zjgteW6qFJRQTxkVAQe5ycTjc=)
2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:67:92:f2:c8:ea:9b:bb:6b:7e:7b:a3:a3:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jul 23 21:00:14 2026 GMT
Not After : Jul 24 21:00:14 2026 GMT
Subject: CN=1c3290def864440cfca0561b8ba6160e290e460d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:82:68:1e:b1:3b:3b:1e:be:7e:c3:6e:db:
4f:7b:10:e8:aa:25:0d:93:d4:f3:b7:ed:f5:c6:1b:
35:9f:38:a6:e3:b3:ec:ca:d8:48:0a:bc:12:12:08:
ab:f6:a4:da:22:b4:f4:32:e5:54:f4:88:68:f6:19:
52:e6:ad:6f:f6:ae:a2:aa:74:8c:ef:ea:1c:85:e9:
98:8c:c3:1a:b5:97:5e:33:9f:e0:20:be:89:26:75:
a8:b6:64:49:a2:5a:05:70:f2:c6:70:56:f0:09:15:
22:7a:35:f9:2b:69:d4:9c:36:18:cd:08:ce:79:d5:
9e:0d:1e:cc:8d:82:9c:59:f8:85:8c:b3:47:52:d5:
20:61:73:f6:9a:31:2d:5e:ff:7f:22:71:ef:aa:b4:
02:cc:38:4f:59:f6:64:5e:d4:08:1e:c7:05:98:9f:
c4:83:2a:71:26:a6:72:ab:3f:89:3e:2e:5d:86:0e:
3b:9e:a2:ec:5c:a0:bc:48:bb:43:5c:c2:21:0a:21:
c7:4b:f9:d2:31:70:7e:2b:0a:87:6a:80:ae:53:d4:
7a:ba:bb:2b:24:b3:d5:a0:cd:bb:41:05:d7:1e:1b:
ed:24:ee:8a:fe:ae:cb:b2:6e:9b:b6:41:b0:ad:b2:
fc:fb:29:8f:ae:66:13:6d:cb:9c:b1:5e:9a:ec:3a:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:90:DE:F8:64:44:0C:FC:A0:56:1B:8B:A6:16:0E:29:0E:46:0D
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:77:db:e1:56:5c:57:aa:04:8b:89:35:14:bc:37:90:84:
9d:6a:8c:fb:39:a6:c3:ae:11:9e:52:ae:bc:97:d1:ee:67:2e:
cc:8e:90:3f:40:28:28:14:1d:e4:1d:e7:05:59:60:7b:5a:25:
b9:4d:fe:ff:a6:ee:fb:99:83:61:a7:7c:62:b0:63:83:97:ad:
b5:22:7e:95:52:5e:4f:86:0e:8f:d1:86:89:89:b9:11:2b:32:
f8:7b:56:ac:58:b8:e3:d4:9c:6f:ba:39:54:83:b1:ce:65:83:
21:f2:31:f2:0b:71:76:4d:d8:0d:bc:4b:1b:30:3c:f3:29:29:
a2:83:df:af:21:46:ca:d5:d6:cc:75:9a:f9:6a:72:a8:b3:81:
30:99:7c:a1:4a:fa:42:b2:87:cf:96:24:52:c8:8f:91:c2:7a:
1d:46:42:d8:2f:7a:81:54:b9:28:e7:b6:41:20:3a:23:13:25:
2c:78:27:4e:2a:fd:6a:f2:60:24:a7:54:1d:d2:fd:a1:9c:55:
68:94:6e:5d:9e:19:ff:82:8c:61:76:a3:b5:83:ef:8c:d7:fd:
4a:a4:c1:e0:ef:ad:82:43:bb:49:f9:15:8c:6d:70:d8:2a:6b:
47:c4:95:85:75:24:9c:e3:1d:ae:d6:0b:cd:1a:ca:14:ae:c5:
e4:42:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:07 2026 by rpki-client