Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: wQczx31f4VE3RfD3uLLes0Qw46PIL3WoGs/Qg+tzQ8Y=
Subject key identifier: 48:F7:EB:B4:21:BB:C0:C9:F7:75:BA:32:3E:B3:E3:DF:94:ED:04:4E
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019FA9AC5EF66BFD2CC5649CCB5A92EFB0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0EF4
Signing time: Tue 28 Jul 2026 17:01:13 +0000
Manifest this update: Tue 28 Jul 2026 17:01:13 +0000
Manifest next update: Wed 29 Jul 2026 17:01:13 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: 2anohr//tjbvWrQzIDPK2jzDxOmwD9BDPPGD4d42S5Y=)
2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5e:f6:6b:fd:2c:c5:64:9c:cb:5a:92:ef:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jul 28 17:01:13 2026 GMT
Not After : Jul 29 17:01:13 2026 GMT
Subject: CN=48f7ebb421bbc0c9f775ba323eb3e3df94ed044e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:9b:65:60:19:4b:96:77:b5:08:8a:50:15:
5f:18:7a:cb:37:bc:30:f3:10:f8:78:63:ae:25:d6:
e3:eb:09:7f:ab:ff:03:01:1f:6b:2f:12:a7:ac:6a:
cc:21:d8:0e:94:98:8b:f8:8b:d6:b2:5c:ff:55:23:
25:a9:4d:66:52:47:77:f5:69:71:25:27:df:0b:9d:
ad:e5:5c:4b:e8:a6:a9:a4:72:9a:c2:5d:46:fd:63:
d2:51:f6:a8:15:16:fe:80:55:df:e9:2f:79:0b:61:
84:73:c0:09:82:38:17:52:91:d2:fa:de:41:b4:3f:
27:b1:f7:c3:2d:2d:47:8b:9a:37:96:a2:31:03:c8:
57:00:e7:4b:d5:dd:4a:fe:b1:2e:c2:f3:e3:ba:12:
12:07:2e:bc:88:a3:3a:ca:0a:d2:fd:bf:0f:8a:7b:
cf:15:45:a9:00:f8:99:79:c0:a8:72:03:a3:23:60:
9b:e9:58:da:38:58:3f:2f:0e:59:d7:38:5a:37:d3:
cc:a4:44:c5:13:25:91:dc:a1:c4:de:39:3e:77:89:
fd:9c:44:7f:9a:ea:a4:74:00:be:96:f4:28:db:83:
68:71:dc:6c:5a:ce:61:7f:58:61:88:b6:5b:fc:6d:
54:55:44:f9:f4:4d:3a:f2:0c:07:2b:5f:b2:6e:fb:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:EB:B4:21:BB:C0:C9:F7:75:BA:32:3E:B3:E3:DF:94:ED:04:4E
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:5c:31:18:f8:79:7c:fc:99:97:cf:fb:89:c9:2b:8b:15:
11:7a:04:70:34:97:21:44:69:a0:f2:e1:59:36:5c:d2:33:f2:
3a:31:d3:28:27:e0:0e:bb:d3:3d:88:fa:00:e3:d4:d0:e2:72:
91:94:11:ca:33:dc:11:8b:53:ee:7d:f5:9c:07:af:f2:29:af:
65:d8:3c:35:5c:3e:23:a7:d9:34:70:2e:f8:aa:98:72:b4:9d:
92:fd:9b:8b:19:9e:af:eb:8f:71:7b:75:2d:6f:79:d6:29:23:
07:34:b1:5c:82:d2:03:c0:6d:ea:ec:de:18:8b:ab:ba:48:fc:
08:6b:d9:a2:e0:e8:41:b2:f8:ee:fd:7f:03:52:02:9f:e7:63:
f9:58:35:de:ac:bb:30:f6:b9:47:ec:83:db:e4:44:e9:10:be:
50:a8:c2:e7:e8:a5:db:22:5a:1e:22:06:33:07:02:5d:a6:46:
2b:55:68:d6:44:75:d3:1d:01:55:a7:d8:27:bd:13:2e:be:78:
95:a0:dd:d2:28:55:09:5e:f2:fa:32:1f:28:89:ab:b1:2f:c1:
76:09:ef:09:db:ca:d3:30:89:b6:7d:d8:71:a9:90:bf:fb:b3:
8a:8d:9e:08:36:e4:e7:ba:12:0c:87:41:e0:6a:b5:10:aa:e1:
09:7c:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:09 2026 by rpki-client