Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: jJSJYE2+2KaMID6Wa0IOKAtlSy/1LXrX9NlQuyoFu+o=
Subject key identifier: F3:98:97:40:A9:A9:05:6D:57:8F:B6:C4:45:09:95:38:22:61:9C:A5
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019EBF5A22FED839ECADF4046627F5F17E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 05:00:15 +0000
Manifest this update: Sat 13 Jun 2026 05:00:15 +0000
Manifest next update: Sun 14 Jun 2026 05:00:15 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: y23c6CxKXxeeyO8Q8H2DpUBpolYa9XzZAtoHWKJ9L1k=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:22:fe:d8:39:ec:ad:f4:04:66:27:f5:f1:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jun 13 05:00:15 2026 GMT
Not After : Jun 14 05:00:15 2026 GMT
Subject: CN=f3989740a9a9056d578fb6c44509953822619ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:b8:3a:f7:88:dc:97:a0:50:70:40:66:18:
5a:11:c9:37:ef:d0:11:ad:ab:30:71:22:01:5a:d3:
78:6c:95:2e:bd:ed:b9:d3:a6:4b:0d:3f:a4:60:ec:
ed:f3:04:32:97:a0:89:f1:89:78:28:2f:9e:a8:65:
7a:e3:c3:9d:34:0b:d2:e0:7a:c0:31:48:ef:de:23:
c7:90:a8:e8:a0:cc:09:8a:76:0c:8e:c4:96:c1:31:
05:73:da:27:42:d3:3a:a6:11:ed:ba:99:93:44:52:
75:d1:de:94:b8:e3:a2:d8:7f:e5:aa:d8:86:73:b6:
70:38:22:a8:59:ae:28:75:06:81:6d:c1:0e:fa:d3:
85:7e:7c:78:01:71:2a:20:ed:ed:80:6e:07:ef:9e:
56:0c:23:7d:f5:90:fd:94:84:db:d0:fb:a1:42:86:
73:ef:2b:d3:f7:17:81:e7:a5:7c:06:e2:c9:13:d4:
dc:a6:54:e2:80:fc:59:20:87:23:71:dd:f5:26:44:
1e:a8:36:c3:b7:84:7d:ba:e3:09:37:5c:b6:1c:84:
f8:b0:e8:e7:38:d9:1a:65:c0:34:64:5f:d7:0b:04:
12:9a:59:81:2a:fc:f8:8f:26:84:65:2f:ec:97:27:
2f:e1:4a:85:3e:20:78:c8:e1:d7:0d:88:24:53:cb:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:98:97:40:A9:A9:05:6D:57:8F:B6:C4:45:09:95:38:22:61:9C:A5
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:27:70:ff:ec:68:29:14:13:06:bf:04:fa:f1:f3:5c:a3:
d2:74:f7:28:b5:3b:92:61:30:ce:6c:da:9a:ab:af:5e:20:c2:
da:76:88:c1:41:19:0c:5d:26:6b:b9:47:b4:90:a7:37:1b:69:
bb:ac:01:2b:65:06:45:f7:c5:07:2c:bd:18:10:b4:20:65:16:
d7:ad:83:9c:71:5b:3f:c3:27:13:fc:c5:3f:1a:20:f7:3a:ef:
ff:de:b1:a3:19:ed:aa:18:99:4e:88:92:ec:4b:c8:7b:2e:6b:
dd:c7:5a:b6:31:56:60:6c:59:a1:89:fc:14:bf:fa:8d:f7:c6:
bb:d7:40:c8:ce:69:98:d5:4c:3f:1a:37:e8:4d:ae:7b:73:25:
82:67:92:e8:ac:3b:79:be:8c:1f:1d:04:9d:b1:4c:c6:7b:14:
e8:75:b7:a1:d8:72:e6:3e:81:c0:d5:5f:e6:40:85:81:c2:7b:
8e:18:8b:be:17:87:b8:5f:1a:8b:89:20:a4:23:19:d5:ed:9f:
a5:38:7e:39:b8:17:5c:96:04:e9:b9:d3:5a:25:d6:50:53:ca:
ef:ef:7b:af:0c:82:b3:c3:56:bd:39:0b:31:a1:59:fc:6e:31:
ea:c4:04:57:35:08:69:05:dc:3c:59:4f:9d:ac:f9:33:81:6e:
5e:a4:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:38 2026 by rpki-client