Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: MFbBjj9olJctAh+JnBR1qsDZ0J0gfvK/PjGH7yNbfRg=
Subject key identifier: 1F:28:E9:DE:4A:EE:E1:35:5E:B1:D1:97:CF:FE:1D:D2:5C:B0:92:34
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 019F9436681F4E4BECC3CD53C739A85CAF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 1081
Signing time: Fri 24 Jul 2026 13:00:21 +0000
Manifest this update: Fri 24 Jul 2026 13:00:21 +0000
Manifest next update: Sat 25 Jul 2026 13:00:21 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: Y4FFrirxuU0jHtAltt7sgKkTj+Z7utV1yQ9Hccyn14I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:68:1f:4e:4b:ec:c3:cd:53:c7:39:a8:5c:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Jul 24 13:00:21 2026 GMT
Not After : Jul 25 13:00:21 2026 GMT
Subject: CN=1f28e9de4aeee1355eb1d197cffe1dd25cb09234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:ee:e8:28:28:87:47:09:42:78:43:1e:9f:
e1:3d:98:19:45:1d:98:0b:3c:a2:38:41:47:eb:50:
b0:64:0e:a8:86:8a:19:1a:12:df:6e:51:0b:a9:2c:
19:06:ff:ed:18:a3:c2:96:e6:55:d3:78:9c:33:dd:
d9:bc:ab:cd:89:70:ff:e9:a5:70:9a:34:95:a8:45:
9a:6e:1b:4d:1d:68:0e:6f:1e:f1:9b:99:3c:df:a4:
e8:55:0d:91:b2:31:a8:e9:db:04:bc:e2:ba:d5:8b:
d8:aa:32:d1:66:c0:b1:94:00:08:aa:52:1e:a1:ce:
87:d8:bc:4d:3c:c4:83:d2:37:fe:05:39:6f:37:4a:
c6:16:6c:99:ec:75:5f:04:a9:b9:36:d5:78:35:a2:
c0:29:f2:71:bb:16:86:e7:13:47:90:12:c5:f1:b6:
80:57:c1:fd:fd:ae:6c:05:5a:42:b0:a6:74:70:31:
96:39:da:45:1e:93:df:a4:c1:d8:a3:6c:6a:08:39:
c2:32:46:d1:5d:bb:3d:ad:ec:41:40:61:00:82:1d:
d2:b7:fb:d7:cc:17:f3:06:dd:82:15:d7:97:c2:f2:
ae:f1:e6:7e:15:70:85:2e:0f:c7:c6:78:62:ab:b5:
b2:38:21:84:54:5b:26:aa:f2:56:75:dc:a1:00:f1:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:E9:DE:4A:EE:E1:35:5E:B1:D1:97:CF:FE:1D:D2:5C:B0:92:34
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4f:6f:d1:10:08:18:65:af:b9:db:10:ef:22:32:93:32:72:
ba:cf:3c:50:17:60:60:ad:56:35:13:1f:ad:52:03:eb:fe:93:
e1:e7:83:87:a0:a3:66:06:34:1a:84:0a:38:d2:cb:2c:28:a0:
32:0a:3c:59:b3:de:7e:39:10:a8:16:7b:9c:d7:c5:f1:1b:90:
9a:ba:af:1a:6e:b5:e4:86:9c:37:ec:26:de:31:82:08:f3:e0:
d2:a1:4c:57:1f:f0:fa:ec:2b:d3:66:e9:b4:2d:2c:22:bd:45:
ba:a9:fe:ee:49:cd:c2:4d:6f:74:5e:a0:2f:7b:83:c8:2e:5e:
01:9a:23:9b:ef:89:3c:d8:31:09:15:9b:7f:5c:c9:5d:56:2d:
76:33:6e:cf:4f:aa:3e:20:e3:d2:09:87:e2:76:fe:41:20:10:
7a:52:68:6c:72:5b:75:3b:1d:05:83:40:65:ab:f3:a1:52:4c:
68:2d:fa:85:87:b9:cd:70:d1:33:97:a6:41:ea:72:f6:9a:a1:
ea:c5:07:a6:88:12:d8:db:ea:cf:8b:a7:c3:9d:e2:79:ee:13:
da:f3:57:b8:c5:a4:d3:72:63:c4:1b:da:43:4d:56:4e:71:d5:
51:2a:8a:f2:e0:b1:da:65:13:90:79:96:c6:1e:e2:d1:b7:24:
17:38:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:24 2026 by rpki-client