Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: fjtJgGmyavwWIgHp5VGtHcz7bf3Q1swHCpJOJcF7b8Y=
Subject key identifier: 0D:45:ED:8D:98:B3:3A:D7:46:36:29:80:8F:02:7A:BE:13:4C:A9:BF
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 019F8ED956F4C20311ABD66164EB815BE43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0ECA
Signing time: Thu 23 Jul 2026 12:00:36 +0000
Manifest this update: Thu 23 Jul 2026 12:00:36 +0000
Manifest next update: Fri 24 Jul 2026 12:00:36 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: 2D2PAis9kRRP0kxjcD7oY3EBPt8ZUIh0reBXeZ3CeBY=)
2: OESlpPK-jzIeY_kWKji03hACpHA.asa (hash: NcdspYFEkIzBfyRyPM+LLSVIvHJYNJkjtuc1feLbI+0=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:56:f4:c2:03:11:ab:d6:61:64:eb:81:5b:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Jul 23 12:00:36 2026 GMT
Not After : Jul 24 12:00:36 2026 GMT
Subject: CN=0d45ed8d98b33ad7463629808f027abe134ca9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:86:1f:bf:29:e9:6c:d7:d9:6b:18:23:9c:
a0:99:bf:89:ce:52:e8:a2:3c:20:18:3a:4d:26:8a:
41:bb:ee:73:0a:fd:84:87:9d:20:e9:8f:61:93:05:
df:40:aa:e6:c9:df:f6:93:bd:be:e1:35:fc:f2:df:
76:a0:24:bb:2e:75:c8:4d:29:56:3b:fd:e5:b2:b9:
da:b0:b0:93:0b:d7:be:58:cb:8d:6a:5a:fb:c8:a3:
82:c5:77:09:d7:b0:0c:51:72:f3:a8:56:ef:a6:11:
ee:82:c2:40:58:4d:a0:b3:e6:da:93:e3:bb:91:53:
2a:c5:1e:29:50:e2:af:af:cf:d6:c8:ed:8b:90:9a:
d9:af:c7:b5:b3:91:64:0c:a7:a3:05:0b:4a:a2:79:
b4:67:52:53:1d:c1:88:5e:4b:9e:2c:b4:41:68:23:
8a:4d:d2:1e:93:10:f0:3b:75:ad:f0:8c:fe:5a:f1:
98:9f:4f:bd:1c:37:5d:f7:c1:21:03:04:5b:51:87:
6c:1a:2d:ee:47:f2:bc:30:b9:43:d1:d3:2e:33:c8:
20:f6:c4:80:93:2a:bb:8e:23:e1:51:43:6b:88:f1:
ff:69:0d:0a:77:6b:e5:5a:e3:0c:79:08:bf:f1:23:
bf:59:73:db:04:f8:38:ab:9a:bd:b5:57:c5:45:6a:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:ED:8D:98:B3:3A:D7:46:36:29:80:8F:02:7A:BE:13:4C:A9:BF
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:be:48:9b:ce:b8:46:de:b9:65:bc:c1:9e:38:30:3c:37:
c4:28:b2:01:05:98:c4:7a:61:34:64:9f:da:cc:06:45:fa:ae:
ae:d5:30:ea:01:e9:79:2a:4b:7e:77:93:56:9e:66:f4:40:8c:
6f:fa:d8:39:01:8b:9e:4d:8e:cd:1c:5b:69:b3:f2:df:0f:b4:
eb:5d:88:3e:cc:34:ea:6a:56:88:24:02:f5:0d:c6:01:7c:a4:
f4:94:2f:77:d6:be:db:3b:de:97:1e:bc:34:79:6e:59:15:bf:
56:cb:db:2a:68:46:9f:51:92:a9:78:06:9f:d9:56:d2:54:52:
80:31:bd:f7:dc:05:4f:a1:09:35:c1:61:7a:d0:83:59:08:7f:
a1:a2:a2:15:d1:1b:ca:44:1c:a1:fe:cc:a3:fc:09:1f:99:e3:
96:59:87:73:2c:36:4a:54:d1:0e:5f:52:b9:71:9d:c1:48:c1:
18:b0:83:e0:cb:93:25:55:a9:5d:70:83:3b:9d:ac:f8:d1:fd:
62:11:07:06:62:48:cb:9d:47:71:24:6d:2c:7f:94:40:4d:d0:
b9:f9:37:ae:3d:a2:88:df:e4:76:4d:f9:a7:2a:bc:e8:f7:cc:
e9:27:81:49:24:e7:b9:34:cc:01:78:81:5b:fd:1b:6a:f5:ab:
f1:c7:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:12 2026 by rpki-client