
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: eBMIGD/7TSatnwvpSx2N6FzPqeoQA+UPvgvcNsq2F1w=
Subject key identifier: 4C:9A:7E:14:60:C3:13:BF:E9:E2:62:E2:5F:DC:15:AD:EC:40:87:D4
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 019FAD89090096F4072AC57EFEF61C47B8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 04C2
Signing time: Wed 29 Jul 2026 11:01:06 +0000
Manifest this update: Wed 29 Jul 2026 11:01:06 +0000
Manifest next update: Thu 30 Jul 2026 11:01:06 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: kEdwQtT0sbBT3WvKJJVxkLRGFWMnAFoKoKkzidBNrn8=)
2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:09:00:96:f4:07:2a:c5:7e:fe:f6:1c:47:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Jul 29 11:01:06 2026 GMT
Not After : Jul 30 11:01:06 2026 GMT
Subject: CN=4c9a7e1460c313bfe9e262e25fdc15adec4087d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:d5:1c:d8:be:ef:c7:24:ae:15:1d:99:57:
53:de:01:b4:4b:43:f0:2c:18:b5:3c:4e:78:22:1c:
0e:dc:6a:e4:14:17:85:a6:e0:dd:ec:43:53:ad:c8:
dd:11:23:d7:12:89:a7:9d:d0:be:6d:94:15:bb:4a:
84:d2:02:d3:87:63:4d:e7:6d:d5:6b:af:09:3d:54:
04:12:08:56:8c:7d:8d:20:ea:69:b2:17:54:79:ce:
28:54:b3:4f:9c:aa:c1:d3:6a:d4:7d:35:0a:5b:ec:
d0:6f:9d:2e:2a:88:38:9d:d5:44:85:a6:4f:e6:1e:
74:a3:f0:98:47:d0:ce:f1:f5:cb:73:86:80:18:c3:
62:f4:33:d9:33:52:ec:d0:5e:a3:66:fd:11:f9:bc:
91:ca:16:78:9f:5d:b3:ff:6a:ad:58:64:14:24:a3:
53:52:dd:97:a2:ec:35:8f:e2:4c:28:01:4a:ca:e5:
0a:fb:21:f3:25:14:f6:5d:33:cc:f3:61:dd:5e:11:
25:f8:17:80:85:4d:da:a3:96:5b:5b:9e:34:4d:3c:
bf:65:29:71:3a:9b:10:59:e1:c7:0a:d8:c9:d5:10:
35:7f:0e:31:ea:6f:3b:46:65:95:ee:cc:14:e6:ed:
18:a0:22:40:31:ff:c1:52:45:bd:4e:29:e4:b4:ba:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:7E:14:60:C3:13:BF:E9:E2:62:E2:5F:DC:15:AD:EC:40:87:D4
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f9:28:2f:9e:12:5a:9e:23:7c:73:5c:5f:c6:90:e9:eb:ba:
a5:bc:49:a2:47:a7:fc:84:c4:ee:1b:60:14:e7:12:39:9d:11:
59:e7:30:dc:11:70:bc:ef:db:08:8f:b2:50:97:00:9b:f3:a3:
5b:0c:6c:f7:91:e6:13:9b:32:70:2c:bd:85:61:af:b3:6c:f2:
23:9c:2a:21:c7:aa:8b:c2:ba:73:8c:9a:0f:50:1d:39:c5:c8:
cf:42:12:59:57:dd:53:9c:45:fe:66:12:cc:c1:a8:6a:72:72:
92:3e:9c:b1:92:fc:bd:93:2d:30:dd:43:a5:03:17:94:ab:b8:
97:c7:58:41:d6:b8:7a:74:22:5e:b5:ab:55:79:35:d5:1f:38:
c4:ae:fe:0f:e7:ec:13:2d:f7:78:61:fc:b2:31:29:52:44:ab:
84:4b:fe:f0:1f:a1:88:fa:e3:71:f5:62:51:f4:72:86:85:f7:
9e:01:61:ff:f5:39:2f:ce:1a:be:93:71:9c:e3:7a:89:76:be:
39:64:11:19:09:87:13:d7:3a:f4:f9:18:63:f4:92:d9:f2:a1:
76:b6:f9:38:94:e9:c5:b5:a4:f1:8c:be:2b:96:5d:16:51:df:
36:72:35:7f:dc:de:1f:9a:b7:21:9f:ef:b0:08:57:2c:82:fc:
ea:68:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:51 2026 by rpki-client