Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: yBmZYCLkbFGcF5QIAUibHEvd/ikHomAONhxsOpSBuYM=
Subject key identifier: DF:1E:58:AA:A7:08:D4:5E:42:58:7B:C5:73:B9:15:A0:0E:17:E5:0B
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019FA8995AFE2BFE389964EAD8DF1E5D9323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 06CF
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: 7iLseB3pyybL3t+VeN924ng82tj+fK5wYS21b9Lkuwk=)
2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5a:fe:2b:fe:38:99:64:ea:d8:df:1e:5d:93:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=df1e58aaa708d45e42587bc573b915a00e17e50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:45:40:39:75:c7:39:07:1b:0d:8b:1e:38:
6e:97:3c:d2:76:fa:e5:e3:91:c9:17:c4:fd:89:fd:
31:3b:e5:07:44:73:83:35:02:c7:63:6e:fc:7a:13:
57:d4:58:cd:6f:ed:36:3c:a8:e5:18:f5:f7:20:7d:
50:c8:43:bb:e0:f8:9b:b9:ac:3c:ea:d4:89:31:6b:
58:db:26:81:f5:f3:8f:87:aa:c8:84:6a:e7:cc:28:
2e:4f:61:1d:75:13:c4:27:41:fb:af:d4:60:e5:02:
6b:83:7d:cc:85:cc:e3:62:85:bb:cf:79:a3:d1:7d:
5d:11:0f:3e:52:f3:f2:06:dd:71:f3:31:1e:4e:f2:
c3:a7:4a:e5:cf:26:fa:91:22:55:54:11:88:f1:0f:
49:b8:1f:6f:6c:6c:a9:f7:56:a0:e7:71:fa:2a:90:
35:9f:5e:00:24:91:26:11:09:0e:7c:23:71:88:7d:
7b:64:81:0b:b5:ef:ba:c5:fe:96:be:f8:29:50:ae:
5f:f6:31:a1:e1:eb:53:1c:7a:d7:13:02:9f:be:60:
4f:29:c7:8b:88:8a:70:8d:bd:d1:65:40:a2:e7:94:
43:37:04:a2:c9:85:c9:c3:e8:66:50:90:f3:5c:cd:
9a:95:a5:15:aa:25:57:2b:92:d2:b2:be:dc:90:ec:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:58:AA:A7:08:D4:5E:42:58:7B:C5:73:B9:15:A0:0E:17:E5:0B
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:52:b3:9b:7d:cc:c1:7c:f2:d0:ea:27:c4:25:89:37:4f:
69:93:d4:ed:3c:12:98:4e:d7:ee:ba:d1:77:f6:5c:11:48:ef:
12:2e:7e:da:31:fa:ae:f1:de:5e:08:93:b6:0e:80:4f:af:0f:
bd:8e:8a:4f:d0:0a:7e:88:b3:51:1a:a8:20:40:6a:54:45:34:
09:37:01:01:fe:8d:66:2d:d4:3c:96:46:30:ef:87:7e:fe:1e:
e9:1e:f0:5a:ff:2f:df:e9:e4:69:ed:b2:a7:31:51:0b:ec:2f:
c6:27:08:8a:a8:82:93:69:89:4a:e7:e3:ef:42:d0:13:4f:40:
80:32:99:2c:a5:4e:b5:cf:7d:5b:ea:95:bb:ec:76:01:64:74:
78:f6:78:98:fd:73:81:77:3f:31:32:d1:b5:ce:1b:99:29:03:
6d:8f:88:4a:45:2c:7b:1e:b7:38:ad:83:bd:83:68:1d:a6:bb:
97:0e:ac:91:ee:b3:8c:07:04:19:45:81:a7:a3:9c:46:24:42:
11:04:d2:8a:ae:53:d6:99:cc:8f:8a:e2:b4:e7:12:53:3b:41:
7a:a4:9c:cf:a8:d4:f8:3b:61:47:7b:08:5c:81:0c:a5:05:60:
fa:f2:c9:88:d7:78:02:b2:69:29:4a:e8:6f:79:c9:65:03:20:
a0:5b:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:44 2026 by rpki-client