Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: hNKRKGM9bnxXk9awSWwa7/C5bJIlhTMvw0Hw1zAYv1w=
Subject key identifier: AC:8B:EC:E7:46:46:6A:0A:54:EB:D6:EA:96:03:E3:76:3D:B8:2B:C1
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019FAB2CB5D45C9363312865D06D23AF4524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 03DF
Signing time: Wed 29 Jul 2026 00:01:01 +0000
Manifest this update: Wed 29 Jul 2026 00:01:01 +0000
Manifest next update: Thu 30 Jul 2026 00:01:01 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: 9YZtvZad+RcblAs1IpmI5EMyIwyEKquti8JlTmvXoLM=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b5:d4:5c:93:63:31:28:65:d0:6d:23:af:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Jul 29 00:01:01 2026 GMT
Not After : Jul 30 00:01:01 2026 GMT
Subject: CN=ac8bece746466a0a54ebd6ea9603e3763db82bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:c8:35:49:0b:0c:1d:e4:ea:ff:81:5e:4c:
ba:9c:f9:a4:0f:13:04:52:aa:09:98:ea:dd:73:d7:
71:0d:6e:48:9d:a2:8b:1c:ff:08:09:d4:bf:51:5c:
ba:ea:f3:7f:cf:51:57:09:b1:53:4f:ef:04:cf:bd:
1f:74:cb:39:7b:9e:9f:10:dc:37:e1:b7:db:a3:62:
70:a8:ca:c4:9e:83:7b:26:01:b2:58:a3:f7:77:cc:
b2:b0:d1:16:1e:18:ae:fd:35:33:2b:18:93:de:70:
4e:f2:b5:c9:c2:38:41:c9:cd:94:15:2b:a6:5d:1e:
98:c7:a9:32:13:f1:46:29:33:1e:31:ba:20:3c:be:
44:e8:e9:3e:d8:5c:5a:0a:43:59:db:54:2c:4c:88:
a0:f4:8c:6c:8d:72:3a:8b:93:44:fa:b5:f9:30:40:
56:6f:7c:00:d2:3f:7a:0f:31:72:84:eb:0d:2f:b1:
ed:ee:ce:0d:61:6d:c2:0c:e8:9b:c0:71:4a:11:89:
3f:0c:9a:f0:b8:dc:9d:1b:8a:55:23:a6:a9:c7:de:
4b:2d:39:c1:9d:ca:93:f8:ac:8b:e1:00:8c:3e:f9:
6d:20:5a:b8:44:ba:82:e1:4a:86:f9:38:98:27:bf:
7f:ad:d3:c6:de:e1:e3:29:27:0e:fb:19:ef:95:71:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:EC:E7:46:46:6A:0A:54:EB:D6:EA:96:03:E3:76:3D:B8:2B:C1
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:28:e8:f2:68:53:10:57:1a:27:38:ce:cb:59:08:14:07:be:
57:d9:94:aa:94:77:e9:b6:9e:64:92:de:d6:cb:95:f8:52:d5:
7c:7a:da:34:45:f5:88:49:11:d7:ae:10:1c:e1:ae:8c:79:0e:
95:c0:74:f8:81:22:9f:78:eb:a0:ad:09:f6:c1:76:a3:44:29:
da:bc:1d:e1:0b:6d:16:51:5c:3f:3b:d5:32:53:46:06:fa:f0:
83:ae:50:24:c9:da:ca:8d:90:b1:59:5d:d2:8e:06:fe:02:3d:
31:eb:f7:7c:b6:cc:4b:fe:8d:b7:96:7d:d7:a7:4d:bc:c4:fc:
b4:84:29:1b:51:a6:4e:69:98:bf:65:08:e9:34:a3:7f:1f:1e:
68:e1:ae:c4:21:dd:4a:27:7a:5d:c2:2d:c5:51:10:eb:cd:1c:
01:a0:a7:ba:5b:a2:62:3d:a5:95:bc:ad:23:b2:b3:34:c5:de:
7c:eb:5c:e1:0b:bd:e6:a8:11:02:91:59:4b:5f:dc:fa:fa:fa:
ec:a9:50:0f:79:af:d9:c0:b6:ab:76:d9:c6:77:68:86:f1:01:
0e:1d:f3:19:15:52:fc:ee:ee:35:95:f7:d0:de:6a:e8:6b:90:
ec:e5:f5:0f:21:8c:1d:09:b9:bc:28:48:e5:4a:8c:43:06:13:
03:19:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:58 2026 by rpki-client