Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: SjfqPVE3sFdK1+1TlhqxUy4peh1rjnEB+BqB2a8KRPE=
Subject key identifier: D9:55:14:B0:C9:74:B6:1E:DD:B9:A3:6C:8C:72:AA:E4:EA:FF:57:90
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019F8EA2AE2C8D86297C892FE7F1C7CD29DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 027C
Signing time: Thu 23 Jul 2026 11:00:53 +0000
Manifest this update: Thu 23 Jul 2026 11:00:53 +0000
Manifest next update: Fri 24 Jul 2026 11:00:53 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: a2g7JNHodKMJCGAoyCREl47LZDfBtqHmKXtyzhOKtVo=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: ylydL3qXftFW7Uij6tIt41OMzD8.asa (hash: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ae:2c:8d:86:29:7c:89:2f:e7:f1:c7:cd:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Jul 23 11:00:53 2026 GMT
Not After : Jul 24 11:00:53 2026 GMT
Subject: CN=d95514b0c974b61eddb9a36c8c72aae4eaff5790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:ec:74:61:e4:3e:16:cc:be:88:f6:57:df:
64:e9:81:d0:20:a7:eb:3d:04:9d:c7:5a:29:9c:c0:
63:5e:5a:b3:93:36:51:e6:c0:90:a9:20:42:47:b5:
92:e7:51:bc:73:c2:e3:db:ff:57:e2:0b:8a:c4:92:
1f:67:10:63:b7:eb:5a:8c:59:80:2f:74:92:25:af:
5a:e0:92:73:ad:3b:e8:bf:c3:34:85:2d:66:13:43:
00:c4:65:95:75:f8:80:24:d3:f8:54:71:79:06:f7:
3e:4d:72:46:3c:34:ee:df:5a:f1:eb:ce:bd:30:05:
48:ea:2f:d3:4b:7a:ad:fd:06:67:17:e7:72:0a:4e:
8e:38:51:9a:e7:c1:b8:8a:a2:a6:6d:0b:28:c5:df:
e0:79:97:ac:3b:a0:74:04:2a:76:a5:b7:d7:72:26:
83:7a:4e:28:c7:8e:47:d8:35:66:b9:57:04:28:81:
b4:27:08:18:62:b6:9e:55:fc:c4:e8:04:1a:a0:a0:
b3:c3:f5:0c:3e:9c:ae:60:e5:c9:11:de:10:6f:87:
12:7d:88:03:ab:38:a4:be:83:fa:8b:84:0e:ae:15:
40:76:ed:e4:68:df:23:32:b2:ac:6f:29:4f:06:37:
2d:4b:7d:9f:7a:2f:6a:87:27:19:74:85:bd:ac:be:
c2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:55:14:B0:C9:74:B6:1E:DD:B9:A3:6C:8C:72:AA:E4:EA:FF:57:90
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a4:88:c8:23:5c:05:fb:d2:34:ec:f5:1f:ed:c3:98:2d:4f:
f7:d1:02:8b:30:ce:a6:25:63:e0:5e:ef:4f:e9:1a:39:35:f5:
d7:e2:68:99:60:c7:aa:78:29:8e:5a:27:a9:36:c1:ff:57:a2:
3c:f7:25:d4:49:14:1f:3c:e3:50:7c:50:a6:e4:f2:60:bf:2b:
a8:5a:8b:19:53:9a:10:6c:bb:fd:26:25:c9:7d:78:59:f2:b5:
8c:bd:71:8c:91:03:51:6c:e6:7d:de:90:91:cf:ab:d8:bc:89:
58:30:bc:dd:2e:6f:00:b9:50:29:35:6d:42:a8:0e:54:41:3c:
dc:c7:eb:a4:df:cd:bf:d1:25:df:3b:ef:2c:14:a0:d5:c8:b9:
02:61:35:01:d4:65:e1:1d:65:91:97:51:f1:b3:ea:6c:b3:43:
a7:bd:75:3d:e6:d1:fa:85:6c:7e:9e:c8:26:ed:88:91:31:f4:
7f:7a:76:b7:e2:79:1e:0d:f3:0b:a6:22:0d:53:d3:84:f5:9b:
23:55:b2:2f:e0:ee:d7:c9:a0:cd:38:0c:09:0e:26:dd:e8:8b:
c4:88:a7:82:f7:97:c5:d7:73:10:85:e1:e8:5f:ad:09:1a:d7:
eb:f3:a9:22:e6:2c:78:7f:18:19:7d:74:da:09:52:15:b6:1a:
13:19:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:15 2026 by rpki-client