Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: hIySufIZq3d38qezVnH2QNW4wcQ0u40rcSUF1Nu8imY=
Subject key identifier: F2:39:21:17:EB:DC:38:6C:2D:7F:B9:C1:12:45:62:19:54:BB:9E:47
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019FA907799F56C71FD591CA3ECF1C74D7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0C21
Signing time: Tue 28 Jul 2026 14:01:07 +0000
Manifest this update: Tue 28 Jul 2026 14:01:07 +0000
Manifest next update: Wed 29 Jul 2026 14:01:07 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: Hgqgw9K74m4H4IrAPnE/w9om/3qGg3tF6xVT9tG34k8=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:79:9f:56:c7:1f:d5:91:ca:3e:cf:1c:74:d7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Jul 28 14:01:07 2026 GMT
Not After : Jul 29 14:01:07 2026 GMT
Subject: CN=f2392117ebdc386c2d7fb9c11245621954bb9e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:09:99:6f:e7:1d:f4:f8:7e:0d:ac:2f:9f:
52:f5:d3:bd:dd:75:a7:26:8d:23:ae:0b:32:78:aa:
f4:de:36:3a:bc:94:c8:3f:ad:4c:a1:81:6b:8e:ce:
31:6b:3a:88:a1:f9:0d:c0:6a:52:c1:4c:ca:49:f4:
f2:11:54:9f:e1:f0:45:5b:51:8b:d9:9c:bc:71:68:
e4:f0:73:9a:32:a5:ea:34:ba:c2:12:0c:47:2f:66:
05:14:62:7e:63:29:a1:ce:89:47:b6:63:b8:3e:9c:
47:e1:09:b1:4c:bf:e8:ab:10:a3:fb:64:5d:64:99:
7b:83:0d:2b:17:95:57:43:7d:28:54:9f:d6:b8:15:
0b:5a:f3:9f:2a:b7:93:d4:ca:b5:a6:8d:73:01:9c:
01:41:fb:89:3e:b6:85:30:5f:55:02:13:36:30:d5:
97:e3:f8:91:6c:00:4a:2d:d5:6f:77:2f:04:75:91:
28:8f:48:6c:5f:39:da:76:cb:21:51:40:b5:63:13:
3c:55:bc:43:df:2d:a0:56:1f:66:93:6c:9a:76:01:
09:1e:3f:6c:8b:d6:c9:41:ac:f8:d4:5f:7e:50:b5:
dc:51:2d:37:b6:29:4b:1f:4e:21:a3:cd:73:6a:d8:
84:04:52:97:be:ad:2c:dc:cd:3f:29:38:94:aa:ae:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:39:21:17:EB:DC:38:6C:2D:7F:B9:C1:12:45:62:19:54:BB:9E:47
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6b:32:1c:d0:a4:71:45:e9:71:77:a6:f3:b5:0e:b3:93:a2:
5b:65:52:6c:e2:16:ec:3a:1d:1a:41:8d:38:e6:80:8b:df:76:
a8:43:0e:ee:7f:21:3a:a4:4c:05:f0:dd:15:67:3d:bc:15:36:
cc:00:e7:90:76:bd:9c:d7:78:dc:54:c4:8a:cb:96:5a:46:05:
b9:4b:06:fe:78:f1:01:5a:80:c8:da:ab:6b:67:34:93:e0:f1:
00:99:de:81:14:dd:2e:d8:48:c6:d4:65:54:be:fc:c8:1f:a9:
e6:a1:31:85:27:b5:b4:69:6d:11:a5:7f:1d:22:ae:70:aa:8d:
db:2b:c4:92:4a:38:d9:72:5e:fd:a6:cc:c5:25:d2:14:1b:9d:
82:f2:7e:cd:f1:13:2f:05:e6:44:86:99:63:c6:85:11:15:ff:
95:d7:2c:85:fa:42:18:c4:3e:e7:4b:2f:2a:bc:15:41:2f:0c:
da:df:7d:15:b8:73:d7:10:6e:f5:20:f2:18:ce:fe:3b:0b:1a:
90:0f:a1:d2:16:c4:9a:10:e8:77:12:b4:d7:62:0f:b5:26:e8:
73:5e:91:9a:e7:24:2b:5d:bb:70:9f:4f:6c:40:2d:83:38:c3:
62:2d:c1:f0:cf:50:45:52:1f:3e:51:58:6f:be:80:ec:16:c1:
98:ab:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:44 2026 by rpki-client