Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: rRRS885rULFqSKHjRTzzcRWemSRLJ02jBiceTk3wirQ=
Subject key identifier: B3:12:59:83:0B:2C:0E:82:45:CA:BC:AE:3A:5A:94:3A:CF:FE:D3:0B
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019FA93E431204A76A5490AA43EBECC90466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0994
Signing time: Tue 28 Jul 2026 15:00:57 +0000
Manifest this update: Tue 28 Jul 2026 15:00:57 +0000
Manifest next update: Wed 29 Jul 2026 15:00:57 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: sLzflh5VrMGwq+TbjwbTNlCJPFWKxUy+rFiU13JE0l8=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:43:12:04:a7:6a:54:90:aa:43:eb:ec:c9:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jul 28 15:00:57 2026 GMT
Not After : Jul 29 15:00:57 2026 GMT
Subject: CN=b31259830b2c0e8245cabcae3a5a943acffed30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:b1:d0:45:6f:0c:5a:c7:4f:e5:0a:01:7b:
93:a9:6c:fd:79:ff:e1:c3:59:39:02:61:1c:52:ad:
fd:98:07:13:81:c9:9a:87:ec:a9:a4:ff:3a:17:42:
37:8d:57:4e:18:16:f2:db:60:c7:79:93:79:57:6f:
57:68:86:d7:18:50:be:14:8e:fe:14:36:39:4f:08:
91:7a:79:12:87:e8:12:2d:4e:e1:87:ca:51:fb:37:
91:87:dc:16:ea:20:c8:36:1c:a6:a1:0b:9a:51:70:
d0:17:39:aa:c5:f0:aa:32:0e:00:58:a6:97:ac:31:
62:28:a9:b7:6a:b8:2b:82:25:be:cd:ad:02:13:2f:
0e:a0:6d:47:20:e4:53:3d:e3:50:4f:be:48:07:26:
6a:bc:8f:bc:1b:07:78:2d:cc:7e:77:83:53:27:3c:
88:fb:b4:49:06:bb:71:07:40:06:56:4f:2a:6c:31:
04:cf:1a:c4:32:12:f9:30:59:77:be:1c:1f:d3:a7:
97:d5:67:c7:f9:72:cb:b0:f6:3d:e6:2e:6b:9d:d4:
5e:be:86:7b:43:7f:e2:39:0c:e4:85:d1:b4:ab:fe:
b5:b5:2f:c1:07:79:fd:d3:3a:29:bd:6e:4b:fb:d6:
6e:a5:a3:48:72:a1:e3:0d:83:2d:a8:52:f7:26:25:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:59:83:0B:2C:0E:82:45:CA:BC:AE:3A:5A:94:3A:CF:FE:D3:0B
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:df:ec:33:d4:f2:a2:6d:03:d4:5c:0e:90:50:a4:a0:a4:
d6:b4:72:65:e7:63:ef:45:41:a5:65:20:18:d8:e3:0b:d3:e3:
45:ad:72:74:c9:d0:85:24:12:77:0d:11:6f:1a:ec:d6:df:2c:
cd:50:67:b9:a7:a5:bd:d8:c2:b6:7d:b9:21:36:2d:61:17:b8:
48:21:18:13:f9:f3:b2:b6:0e:30:db:51:0f:53:2b:47:21:54:
30:0a:c7:87:7b:9a:d6:e6:a9:ec:c5:bb:ea:02:06:2e:6b:be:
49:ff:68:e9:ca:54:c0:ac:7d:8f:a5:cd:8a:a3:28:23:97:22:
b4:d7:1d:f7:df:45:d4:a3:95:fa:82:21:35:19:d8:8d:d9:f2:
1d:b1:23:43:db:36:42:e3:c2:03:b2:98:b0:48:c8:1c:ae:2a:
fc:fe:ce:0f:e2:a3:2c:0b:67:10:6e:25:5a:f2:55:20:da:ca:
e6:68:a1:56:24:87:57:7f:77:65:82:e6:bf:21:ca:09:6a:c7:
03:ff:89:9f:4d:4b:03:85:9b:0b:e0:40:b3:66:6e:05:a4:86:
9b:8b:72:d7:86:9d:36:f4:f7:01:77:b1:00:f1:d9:09:f1:e5:
6c:ae:d6:65:7b:aa:16:35:25:46:d0:10:61:44:9c:ac:11:ea:
50:0c:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:15 2026 by rpki-client