Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: MfwCmNL9ndf+pQO6tIKvzAVoA6tpSO2+kaR0yAuMNbA=
Subject key identifier: A7:BC:5A:24:F0:75:C7:00:5F:B1:56:39:EC:5C:FF:05:C6:80:57:8D
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019FA8D01B26F4F1CDE7F95D65A3C61105EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 1063
Signing time: Tue 28 Jul 2026 13:00:38 +0000
Manifest this update: Tue 28 Jul 2026 13:00:38 +0000
Manifest next update: Wed 29 Jul 2026 13:00:38 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: c7xref4J2lr1F4avS/i+etSXCAGj+JUvPfeRD0RC+1o=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:1b:26:f4:f1:cd:e7:f9:5d:65:a3:c6:11:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Jul 28 13:00:38 2026 GMT
Not After : Jul 29 13:00:38 2026 GMT
Subject: CN=a7bc5a24f075c7005fb15639ec5cff05c680578d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:25:1a:9f:af:b8:d3:2f:2c:81:8f:32:ce:
30:bd:cb:bc:b2:a0:20:03:98:3c:db:34:e6:98:03:
89:de:60:4e:db:89:f4:f9:56:40:d7:f1:01:1a:15:
8d:91:70:ad:ad:90:9b:ad:ab:b5:c4:8f:29:e7:05:
a7:ba:4b:43:59:88:0c:d7:54:33:03:dc:0b:91:9a:
0c:47:4c:12:63:21:2b:22:c0:86:b9:67:35:98:23:
55:03:62:c4:98:60:d9:0f:1d:ba:67:52:75:ff:7e:
7b:55:60:b6:60:b0:00:70:07:04:ba:bf:c7:e6:d5:
c5:e6:02:9c:0b:ae:4f:8e:59:89:a8:91:53:3e:c1:
d4:c2:6c:e8:dc:5e:6c:37:bd:24:8d:55:f7:04:4e:
81:7e:95:06:d5:13:db:f3:d1:4f:39:0f:e3:92:10:
6a:e3:57:10:11:48:07:86:fc:09:58:0c:aa:e5:b3:
d9:dd:78:aa:db:6e:7a:ff:dd:84:67:c0:23:82:7c:
12:ca:f4:13:5f:b5:13:b7:4a:38:9c:e5:66:31:f0:
65:28:e2:97:ce:d0:08:bd:3a:a3:f7:c7:91:6e:d3:
12:b3:12:8c:ad:68:d2:3d:98:4e:52:cc:72:48:f9:
24:55:25:48:33:b1:94:a8:93:dd:3b:ab:ea:ee:95:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:5A:24:F0:75:C7:00:5F:B1:56:39:EC:5C:FF:05:C6:80:57:8D
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d2:27:0e:a6:59:27:44:de:a4:dc:c6:9c:4c:7e:3a:2f:c6:
a6:ed:01:b6:ef:a2:70:a9:d2:21:67:78:72:07:bb:b4:55:47:
56:e9:37:b6:54:bd:2d:f3:17:f4:0e:ee:b4:c4:98:fb:d9:78:
e8:7d:73:3f:ad:33:ea:ce:d4:ea:e8:00:af:33:30:cb:42:48:
fc:8c:5c:12:7d:b8:f4:94:78:b6:1b:2e:90:f4:ff:4a:73:fb:
7a:d5:15:aa:2a:e0:a7:62:1b:14:d9:cd:f2:9d:85:68:8c:99:
90:6f:17:05:c7:2b:1a:d2:c6:97:28:5b:5f:2f:fa:df:09:e9:
7a:be:68:23:d4:08:16:af:fc:a8:aa:38:5e:38:b1:6b:c9:b8:
e7:f7:d4:e5:bf:3d:91:12:d6:23:7f:72:57:d9:3e:5e:4a:46:
6a:d7:89:6f:da:1a:58:46:d7:5f:d5:78:31:c8:b6:86:1a:c5:
83:d8:e9:92:62:b9:c7:1f:54:60:d3:75:a3:e0:ec:67:d9:7f:
9a:6d:fe:06:aa:8d:c1:2a:ee:ba:94:f1:61:7e:86:2e:5b:9e:
d9:4a:03:d9:ef:21:3f:5a:74:fc:d9:09:12:2f:b5:a9:11:27:
94:52:5f:39:5a:d5:ed:0d:1d:4c:27:ca:84:52:ad:93:d4:f2:
f9:c4:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:43 2026 by rpki-client