Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: txm8RUS2fU1xI4kzWIUmOh0eH6TM6NgfttxHyEO/29Y=
Subject key identifier: E1:A2:A0:1A:56:03:31:E9:1B:C5:2F:8C:4B:64:82:93:62:35:EF:EC
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 019FAA198C3D8F88763476BAF8EE10843B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 1133
Signing time: Tue 28 Jul 2026 19:00:28 +0000
Manifest this update: Tue 28 Jul 2026 19:00:28 +0000
Manifest next update: Wed 29 Jul 2026 19:00:28 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: eRWdxzoubQACbYz6S0eTweGYdJUu5hZq1uIVHzJNWtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:8c:3d:8f:88:76:34:76:ba:f8:ee:10:84:3b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Jul 28 19:00:28 2026 GMT
Not After : Jul 29 19:00:28 2026 GMT
Subject: CN=e1a2a01a560331e91bc52f8c4b6482936235efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a1:ac:98:75:d8:a2:64:0d:7c:b0:49:3f:47:
06:fc:cf:60:1c:19:25:15:1f:2d:ad:dd:b7:b4:34:
68:61:32:aa:82:65:44:88:dc:e9:cf:57:c3:5b:0b:
db:d5:19:15:84:18:95:6e:4a:7f:33:4f:62:2b:9e:
85:ee:60:81:55:04:22:b0:09:63:bd:c6:da:86:b4:
1f:22:64:61:db:84:80:df:43:e1:43:06:e8:74:2f:
da:12:f4:65:6c:a6:8d:24:55:8c:ff:da:6e:94:f0:
e8:0e:f2:5d:9f:cb:ae:9c:1b:9d:13:e8:33:db:53:
9b:aa:33:72:57:16:77:dd:f4:41:d9:73:c2:78:49:
0e:7f:82:65:bb:6f:93:92:9d:a4:72:73:93:e6:b4:
4a:d8:4d:33:ce:89:88:c7:6e:eb:a1:e5:93:7d:4f:
c7:95:bd:ea:14:1f:91:23:62:ec:cb:cd:08:24:41:
d2:a0:5e:f9:2b:c9:a1:a5:d2:48:af:6f:45:c8:6a:
10:54:4b:74:32:82:46:30:63:9b:cb:0a:dd:66:33:
61:7b:9d:b1:57:87:b0:40:7b:14:ef:02:09:dc:93:
77:60:bc:38:70:32:27:ce:2d:da:79:26:b4:be:bb:
26:80:5a:2d:db:ef:31:2a:f7:ac:0d:58:6b:5b:66:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A2:A0:1A:56:03:31:E9:1B:C5:2F:8C:4B:64:82:93:62:35:EF:EC
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:a1:7a:8e:f6:c7:45:2c:2a:d5:c8:a0:62:4a:4e:c3:90:
be:37:eb:cb:5f:c4:98:e7:9b:88:0c:29:d0:80:be:b1:15:6b:
fc:17:e6:8c:a1:bb:2c:6d:7d:3e:6b:d7:fc:4d:c0:b3:72:86:
92:6a:5b:34:bd:fe:0e:f5:12:9e:a0:be:b1:1f:0c:bd:9a:f0:
b2:c3:39:40:f3:bd:3c:53:33:dc:b6:4b:6e:c8:99:9a:e9:25:
9f:19:0e:9b:8c:1f:11:bd:3b:81:64:85:92:8b:b5:24:b6:46:
ac:76:ef:12:78:c2:29:09:ac:86:d2:a7:84:09:7d:b1:99:2f:
8d:34:b1:be:54:2f:a8:21:b1:de:07:18:4e:41:76:68:cb:e0:
ba:14:99:69:32:17:3e:e3:21:6a:c0:62:d7:64:87:c4:84:a1:
a2:10:de:51:ad:02:33:1f:fd:5a:74:b7:2a:b0:c9:b3:21:44:
ad:1e:c7:aa:55:ce:27:ca:11:24:3b:18:54:bf:09:4e:61:a9:
79:ac:76:0d:40:96:05:d4:11:55:3f:f3:0c:46:fc:9e:f9:b6:
e5:91:3f:d8:9b:8f:a6:f5:83:a9:b7:24:c1:94:8b:dd:01:70:
91:41:39:ee:21:09:ac:4b:66:12:fb:ec:56:37:18:fd:b3:27:
f8:d3:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:36 2026 by rpki-client