Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: J2lTSerdpTV/LFGMga6KF4tIL2ivMALSunl6OedXdro=
Subject key identifier: 4C:AD:90:F3:7E:8B:CD:71:AB:80:88:CB:7F:43:BB:44:19:9D:00:85
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 019FA8D07E8A07AB06D0B28381F2BFC83DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0CA2
Signing time: Tue 28 Jul 2026 13:01:03 +0000
Manifest this update: Tue 28 Jul 2026 13:01:03 +0000
Manifest next update: Wed 29 Jul 2026 13:01:03 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: UzITBxnOVlKZWX6qlC+dt+HSAwGtEnABw1ISJsAxfu0=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:7e:8a:07:ab:06:d0:b2:83:81:f2:bf:c8:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jul 28 13:01:03 2026 GMT
Not After : Jul 29 13:01:03 2026 GMT
Subject: CN=4cad90f37e8bcd71ab8088cb7f43bb44199d0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:81:e0:63:68:22:f4:f9:ff:79:6b:43:0b:
c7:58:67:eb:2d:c3:da:8e:54:7b:2a:a5:6d:17:e7:
6f:66:91:b4:45:a3:ac:84:01:9a:95:de:12:a2:11:
dd:bc:0b:05:a5:c0:ac:04:7a:86:74:2c:77:d1:b7:
99:7f:2a:ca:f6:27:b5:e1:c5:90:76:77:3e:1c:56:
2c:39:10:00:76:d3:89:75:f4:84:ed:74:02:16:69:
39:ce:e5:02:32:4e:31:3b:06:50:3c:b4:f6:72:b3:
36:b5:1d:fe:71:2a:74:19:2f:90:31:58:0e:d3:85:
87:33:b3:26:55:dd:85:d7:b8:ba:cf:e5:c3:35:66:
14:a1:14:cb:a7:43:24:70:69:ec:1b:2d:d2:a0:e3:
0d:05:c2:03:03:29:f2:2a:a2:dc:d2:25:d6:60:a9:
73:e3:7c:f6:5b:80:5d:0d:96:da:57:13:25:3c:4e:
3f:a6:9b:b0:6d:ce:47:63:e5:e4:ae:fb:8c:34:a8:
77:33:a8:da:e6:cb:8a:fd:fa:ec:65:d1:7b:51:9a:
38:49:bd:5c:cb:71:f6:ee:38:80:21:32:ee:87:7d:
a2:5f:b7:26:ae:62:a6:a4:49:d7:1e:90:a0:c1:8f:
ef:2e:d7:74:12:ad:34:40:dd:ec:01:54:7b:81:ce:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:90:F3:7E:8B:CD:71:AB:80:88:CB:7F:43:BB:44:19:9D:00:85
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:c0:6c:1d:fb:0b:c4:dc:18:d2:60:8e:a2:a0:49:4e:11:
ff:34:f1:72:5c:f0:4b:b2:88:01:b0:fb:41:f8:e8:12:55:b4:
94:cf:9e:1c:d8:4b:8b:38:f8:96:c2:83:9a:60:21:46:19:e8:
b8:b1:19:ee:3d:da:57:94:c4:82:51:48:cb:1f:2b:59:6c:00:
49:73:36:01:c3:a8:7a:4c:80:e2:df:59:78:f0:72:27:ac:4e:
61:c0:68:5b:b0:3f:b9:34:b4:49:13:ec:de:73:e6:84:80:09:
36:6c:33:0f:61:ab:f0:ef:14:d2:f9:1f:65:5b:a3:90:13:84:
69:4f:3e:b2:8a:9e:27:f4:2d:8e:96:a9:e1:5d:09:00:49:78:
8c:7a:ce:59:0c:fc:93:c9:41:f8:a6:b8:84:64:fc:03:0f:78:
0e:ff:7e:0a:7c:c9:e4:1e:66:72:3c:79:72:01:9a:b5:58:a3:
b2:a0:cb:04:3c:38:74:16:db:62:de:a0:ed:66:d7:cf:cc:cd:
5c:25:f4:ce:5b:da:90:b6:a8:0d:d4:ac:68:63:0c:6d:6d:78:
0c:ed:38:93:20:40:10:a0:96:7c:7d:1b:28:fc:47:0c:a1:cf:
09:7c:df:54:9e:a8:f4:b3:93:3f:f5:8e:0b:e1:09:58:71:77:
00:0e:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:45 2026 by rpki-client