Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: C+a6JipudnBMXwZuz/jJTor+0oqVRbYrA3ENysIVHHA=
Subject key identifier: 3B:37:21:16:14:54:05:A0:41:0B:61:64:3A:BE:5C:72:CE:6D:2B:5B
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019FABD150A01732E6D294CE936190B8BAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 036F
Signing time: Wed 29 Jul 2026 03:00:49 +0000
Manifest this update: Wed 29 Jul 2026 03:00:49 +0000
Manifest next update: Thu 30 Jul 2026 03:00:49 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: JD4cOuUAEGLNvBVEw6Hxo/VZuodyc9Qq1BGwnvDMkf0=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:50:a0:17:32:e6:d2:94:ce:93:61:90:b8:ba:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Jul 29 03:00:49 2026 GMT
Not After : Jul 30 03:00:49 2026 GMT
Subject: CN=3b372116145405a0410b61643abe5c72ce6d2b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:eb:a7:b2:7b:c6:8f:9f:b1:58:2c:be:b8:
c6:97:94:e3:0f:1d:53:a1:c2:af:9d:82:3e:89:58:
06:c2:0a:08:16:aa:77:80:0e:7f:b9:db:01:dc:74:
31:f0:a1:93:b7:14:af:01:c6:13:5b:de:e1:bc:55:
e8:85:f2:6c:85:60:1a:8e:dd:c0:8c:42:48:8d:d4:
d4:1e:d8:ba:c9:69:ab:2f:4c:a0:d5:87:fc:11:06:
75:a4:7b:ca:10:49:c3:55:18:95:6a:19:3f:00:ac:
d9:b2:61:45:5c:13:8c:68:ce:bd:8b:9a:f5:7d:60:
a4:4d:64:d2:eb:f6:a9:92:9b:61:d4:04:39:1f:4d:
5d:a9:9d:66:fd:26:64:b1:bf:e8:38:31:50:6f:2a:
52:9b:da:a2:cc:7f:a2:3b:c9:6b:15:69:35:52:a1:
24:18:1b:f7:f0:d2:86:b1:fc:f7:f8:4f:94:75:e8:
c0:10:83:d0:dc:a5:fc:c3:71:e4:58:d2:9e:fa:99:
69:c7:4f:ec:6b:57:86:ea:c6:0e:c3:9e:cc:de:78:
ed:76:5d:6e:c4:49:15:ed:7b:86:06:c9:5f:35:4e:
73:10:aa:9e:f1:3c:70:08:12:52:ed:92:f3:d6:08:
54:a1:77:48:24:cf:91:64:a5:79:4e:d1:5e:3f:3a:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:21:16:14:54:05:A0:41:0B:61:64:3A:BE:5C:72:CE:6D:2B:5B
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:4a:f5:ed:fe:02:51:5d:69:dc:f0:99:cb:20:31:5f:15:
11:b5:21:57:6b:ee:12:c5:f0:c0:ef:dc:ac:aa:eb:12:67:59:
1d:bf:e0:f6:77:36:d1:a9:d4:72:f9:c5:c9:77:ee:11:39:db:
1b:09:f9:cd:10:af:94:9d:6a:c7:8e:90:57:33:11:ab:55:8d:
19:11:b2:8b:89:c6:f1:6e:af:0d:71:04:eb:ae:55:8f:04:93:
5d:23:3e:4a:b3:c5:5a:06:ef:12:7e:bc:f0:53:1c:29:28:29:
a3:13:d8:d7:ed:89:15:47:fe:52:2e:6b:eb:e7:17:61:75:80:
42:ae:40:c4:a8:d3:11:71:1a:cb:37:23:c6:0c:8c:7f:97:01:
dd:ef:59:9a:6e:6d:67:cb:10:6c:4c:67:50:5a:86:c0:7e:95:
86:18:7d:d1:be:e6:f5:1f:e4:96:b4:d9:11:ff:f8:11:77:51:
8f:12:e8:72:8b:9f:50:78:3a:6c:91:e5:1e:4e:f1:57:06:0c:
1f:7a:a8:3b:24:87:f0:b1:2b:20:78:12:b2:bd:3e:91:a2:ab:
7b:c6:43:b3:fd:3e:9b:a3:c4:66:79:aa:e7:7a:54:29:77:f4:
f3:2a:34:7f:25:8a:3b:5b:0f:fe:44:9e:a5:d3:c9:d3:1f:0d:
54:07:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:04 2026 by rpki-client