Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier: wdeYnnE9qBWNb+n3viNkrvw15LNOgcrws65+LTbDFt4=
Subject key identifier: 49:0E:64:20:F4:AF:75:83:24:2D:04:2C:72:AE:90:06:71:83:36:81
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer: /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial: 019FA9076E79EA4DD7DCC883B8476EB57A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number: 06EA
Signing time: Tue 28 Jul 2026 14:01:04 +0000
Manifest this update: Tue 28 Jul 2026 14:01:04 +0000
Manifest next update: Wed 29 Jul 2026 14:01:04 +0000
Files and hashes: 1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: u2yw7UiOn+Xu4MNSPtigOXmKi2sk7b56NiAYt4N79Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:6e:79:ea:4d:d7:dc:c8:83:b8:47:6e:b5:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Validity
Not Before: Jul 28 14:01:04 2026 GMT
Not After : Jul 29 14:01:04 2026 GMT
Subject: CN=490e6420f4af7583242d042c72ae900671833681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:ec:7f:50:67:cb:fa:66:b3:49:f7:d2:69:
4a:81:9f:fd:8f:94:6c:87:54:bc:3a:49:c3:5f:fb:
04:b1:70:22:b4:e7:db:b7:0a:30:08:ac:99:c2:82:
be:6f:71:6f:ff:1c:fb:8e:62:9d:50:6a:17:a9:30:
62:89:06:0a:05:cd:cb:f3:bc:34:62:c8:c7:bf:a5:
57:c7:ff:07:0c:0d:8d:21:38:aa:96:52:46:56:8b:
90:2c:d5:23:8d:ab:be:f5:5b:cf:b4:72:3f:d2:89:
7d:5c:c5:cc:6f:68:27:9c:5a:36:de:9e:58:df:04:
36:02:cd:98:e7:60:d5:be:6a:80:54:99:9f:40:7e:
17:94:e3:6e:d0:c8:29:3f:66:19:18:46:95:f3:0d:
f0:ae:52:8d:04:0f:80:fb:89:1f:35:42:76:6b:2d:
e4:60:fc:8d:3e:d0:f4:0f:98:2a:6e:b0:bf:ac:d6:
6e:4b:23:c1:1c:97:bc:68:b8:28:01:cf:20:6f:26:
c4:4a:e7:42:83:bf:9e:47:28:c8:ac:11:cc:00:b3:
00:ae:bd:e2:0c:80:03:8a:35:4f:e3:a3:3e:2c:db:
f7:5b:f4:34:da:88:04:ab:a3:6c:87:61:ed:56:73:
6b:b0:c1:f0:60:78:58:98:4b:92:43:ed:96:5c:70:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:64:20:F4:AF:75:83:24:2D:04:2C:72:AE:90:06:71:83:36:81
X509v3 Authority Key Identifier:
keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:c4:f2:85:69:c6:17:98:35:58:71:b2:41:86:d5:cf:7f:
88:70:7c:f9:85:4b:a9:ad:a9:3f:84:06:58:6f:a8:8d:a9:6f:
ae:c6:c6:55:e3:c1:d6:75:14:e4:54:37:70:bb:83:d6:cd:42:
e7:cd:6e:26:c7:1e:05:12:38:1d:c0:e0:72:b2:9b:9c:d7:ba:
1d:5b:c2:6d:58:c8:89:f9:ff:c4:49:42:55:1c:10:85:02:92:
08:f2:96:71:3e:46:09:1d:d6:22:7a:9f:76:cd:33:d4:63:eb:
ae:76:c5:54:6b:ce:21:27:50:2c:dd:5f:24:d6:dc:82:4e:7d:
2a:8a:4d:99:59:55:05:e1:63:61:c9:db:1d:db:35:70:13:89:
9f:5a:c2:93:eb:bd:ef:f2:ff:15:a3:6e:fe:c6:50:28:40:6a:
6e:12:b4:87:b7:10:e9:1e:f2:c5:41:7c:db:54:f5:cb:22:6e:
37:62:b6:41:f8:31:36:d1:24:55:a5:e7:2c:0d:9d:fb:1b:a8:
66:12:0d:ef:c4:14:a4:21:64:61:ff:5c:3d:a0:bd:f5:13:a5:
2e:80:66:86:3c:42:53:0d:19:ea:51:01:5b:85:c3:42:be:52:
3c:77:35:7e:a0:99:22:67:f3:e6:de:cf:a1:06:7e:74:bb:36:
2d:26:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:37 2026 by rpki-client