
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: GzjL7MMUkFMHWfom0V9Yj+bgDTNlprS6PYFhb2yJflw=
Subject key identifier: 2B:35:F0:71:7F:C0:B6:47:C3:A3:56:A7:29:FF:12:E9:F8:02:11:36
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019FA899D26A913F0CD35CA5A80990BC552C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 1484
Signing time: Tue 28 Jul 2026 12:01:20 +0000
Manifest this update: Tue 28 Jul 2026 12:01:20 +0000
Manifest next update: Wed 29 Jul 2026 12:01:20 +0000
Files and hashes: 1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: RNTd7IqlP+Q1hCGJBZyy1fPQpo54TUIsCnIAeKuCbxw=)
2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d2:6a:91:3f:0c:d3:5c:a5:a8:09:90:bc:55:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Jul 28 12:01:20 2026 GMT
Not After : Jul 29 12:01:20 2026 GMT
Subject: CN=2b35f0717fc0b647c3a356a729ff12e9f8021136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:eb:75:5b:14:27:c2:99:1a:b0:c4:c7:8e:
f8:ec:99:b4:08:18:ce:d5:ef:6d:4f:8e:7a:23:94:
1e:96:e1:24:fa:7d:2a:d6:ca:8e:00:52:62:92:12:
b2:34:a7:de:f3:07:cb:5b:bb:2d:09:c4:a5:31:84:
fe:bd:e8:20:22:2d:c9:f8:d7:88:43:8e:60:ac:75:
f8:df:02:94:fb:72:a7:00:cb:fd:29:b5:a0:c9:a2:
ea:ca:2b:0c:b9:e6:2d:18:80:ff:14:43:f6:bf:6f:
9b:ec:2a:37:06:8c:f8:a0:ea:65:b2:34:69:f7:ac:
04:72:e2:98:6c:cb:43:30:fb:8e:54:06:e6:4d:70:
6f:ed:6e:46:7b:8e:0c:81:57:1b:9b:b6:d2:9c:ad:
79:e7:18:a1:60:1a:ed:02:72:64:21:7e:81:54:37:
9d:95:13:15:13:d2:c1:bc:d4:20:13:a7:7f:b7:78:
b2:f8:d5:5a:91:f5:23:50:e5:f2:be:04:01:03:8c:
6d:3f:be:10:24:1e:48:06:60:11:8f:38:56:e2:05:
22:21:8d:ac:22:b9:33:16:6f:76:e9:51:26:bb:f5:
e2:fc:9d:ca:b5:92:a1:8e:27:5e:cc:2f:0a:29:82:
e2:e7:f3:84:fd:8c:51:f4:b2:6a:e8:29:95:a7:63:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:F0:71:7F:C0:B6:47:C3:A3:56:A7:29:FF:12:E9:F8:02:11:36
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:a7:c3:f3:92:c0:e4:63:54:4b:b0:6b:29:f1:95:8e:fc:
89:6d:3a:a1:8e:2c:d4:dd:36:56:30:e6:bd:27:84:f5:46:81:
8d:31:df:42:4f:05:0b:86:00:80:95:47:b0:f5:a0:0f:7f:21:
e6:fa:89:84:b2:35:f1:e9:ef:5b:50:c7:f1:ea:9b:3f:38:13:
ec:1d:ec:bd:3f:db:6a:9e:78:50:ef:2d:74:06:12:93:9e:03:
dc:69:90:ff:94:7f:bf:ef:2a:61:38:4e:a1:29:84:db:b8:60:
3f:ce:36:5d:b1:32:ba:59:d0:7a:95:8e:30:e3:ab:52:c4:d6:
dd:73:ba:ae:51:fe:dd:a8:dc:f1:aa:21:03:19:fa:9d:05:04:
00:aa:84:ed:ba:c1:c5:7e:f4:88:ee:03:1d:9f:81:b9:1d:a3:
f4:4b:d9:8e:81:ff:ad:67:7d:7a:1d:44:4a:ee:23:16:e8:61:
b1:f7:ac:bc:fd:e1:09:cc:6f:ad:94:a0:b8:66:bd:55:24:94:
03:a2:36:19:8c:e4:fe:60:dc:07:c5:5e:8b:f2:46:f1:4a:eb:
21:c6:2b:5d:3f:2b:31:35:41:3f:50:5b:56:9b:3f:72:5f:a2:
ce:b4:f1:87:bf:95:03:72:a5:d9:14:9b:3b:71:11:21:47:b0:
e0:ec:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:10 2026 by rpki-client