
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: Nt0Yi7RGfNWfxIUXfQSxaPlIoCQY+ML0F16JdARh/nE=
Subject key identifier: 2B:7D:3B:70:31:44:29:E8:A7:78:2D:B6:FF:71:F5:13:70:CA:35:CA
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 01A12FC665AF34911F925539207C2D9C0C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 058A
Signing time: Mon 12 Oct 2026 11:01:33 +0000
Manifest this update: Mon 12 Oct 2026 11:01:33 +0000
Manifest next update: Tue 13 Oct 2026 11:01:33 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: 61gi/JSifec4VG/EviFgQmLovcjXOV20tYtqpYzU+0w=)
2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:65:af:34:91:1f:92:55:39:20:7c:2d:9c:0c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Oct 12 11:01:33 2026 GMT
Not After : Oct 13 11:01:33 2026 GMT
Subject: CN=2b7d3b70314429e8a7782db6ff71f51370ca35ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:8e:23:63:fb:89:28:1e:e3:18:32:d2:e8:
3e:54:9b:ea:cb:86:ab:23:ad:b3:cb:70:4f:0f:5b:
7d:f8:a5:e1:68:94:f5:37:06:fa:d9:f8:4e:f6:91:
be:75:e5:a9:ae:8d:be:9b:80:c0:cc:7e:2e:81:95:
87:05:c4:2c:b4:8a:c3:41:0b:c8:eb:27:9b:e7:14:
1b:84:b1:25:bb:51:47:da:f0:b8:86:0c:4c:81:1b:
20:6c:db:d3:1d:ab:2e:d8:14:48:1f:56:d4:d2:f9:
78:0f:41:22:29:b5:eb:09:0c:f1:3c:24:15:30:3d:
e8:27:3b:e3:45:b4:eb:d7:31:a8:b9:6f:79:ce:f9:
46:3e:37:d3:ae:3c:0f:c7:87:5c:9d:e8:97:66:64:
e6:e2:7a:36:1c:de:f9:e9:a2:b4:0f:fd:e9:35:37:
e9:fe:27:17:68:bb:33:b9:27:ac:2b:0c:63:b2:87:
58:18:e4:b7:65:19:eb:10:d4:03:b0:45:66:23:38:
0d:9b:94:f2:8c:d1:19:95:2c:00:60:50:64:ff:fc:
f8:da:89:b2:cd:9e:8b:3b:68:6a:14:dc:74:23:1d:
f5:83:28:75:f7:6f:c5:cf:c9:12:68:fd:63:a2:f5:
14:bb:01:17:30:1d:f0:9b:27:0f:7d:69:b7:a6:96:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:3B:70:31:44:29:E8:A7:78:2D:B6:FF:71:F5:13:70:CA:35:CA
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:d3:ca:6d:81:cd:b4:17:a9:fc:4b:53:8e:9f:21:bf:58:
67:38:c9:30:62:53:19:d8:c2:e8:a2:0e:ca:8e:f1:86:67:69:
73:2e:51:ae:c2:2d:cf:b5:46:7b:71:ee:f0:41:6c:59:14:78:
27:2b:de:c1:5b:9d:aa:0d:11:ef:41:12:1e:f7:fe:b7:5e:f8:
81:d2:45:7e:d3:f4:62:d2:f0:94:e3:75:01:a8:ed:e0:99:ee:
9d:89:df:12:5b:82:53:e0:d1:4f:54:33:2d:a9:15:52:ce:72:
31:31:75:fb:d1:4f:81:94:96:66:62:3e:ce:ff:56:7c:d9:dc:
26:fb:cd:5a:26:fd:d4:71:ec:47:83:0f:24:9e:b8:2e:f8:12:
45:d0:c1:df:4b:88:99:45:a8:d4:e1:1f:ff:2d:c0:ae:f2:04:
90:f2:84:9d:1a:16:52:97:07:c0:e5:ac:12:a3:7d:8c:c0:51:
4e:63:75:22:04:8c:3b:76:ea:5d:bc:f0:b5:f4:2d:5f:d9:a6:
6c:fb:b7:22:68:31:7f:b8:91:71:37:99:ba:8f:a6:cd:70:56:
a2:1e:7a:d2:28:3c:4e:d3:b9:75:33:d0:77:97:e3:92:b3:af:
74:c9:66:6e:c9:37:e3:53:46:0c:13:b3:e9:17:67:f1:b3:ca:
df:fe:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:36:00 2026 by rpki-client