Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: zbAweT94TfXIOwwuJl0RsIOT6bh5BGjPsz+D6lgxJ5E=
Subject key identifier: EE:DF:B3:41:88:FF:4C:47:84:22:7F:78:12:95:6B:48:74:1E:3D:6D
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 019FAABEF205D0215B81FD088AE32C5982A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0CA3
Signing time: Tue 28 Jul 2026 22:01:08 +0000
Manifest this update: Tue 28 Jul 2026 22:01:08 +0000
Manifest next update: Wed 29 Jul 2026 22:01:08 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: fGeIXTup08b04AU42KXcntROzyb8CQuH/ESeiGrE98E=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:f2:05:d0:21:5b:81:fd:08:8a:e3:2c:59:82:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jul 28 22:01:08 2026 GMT
Not After : Jul 29 22:01:08 2026 GMT
Subject: CN=eedfb34188ff4c4784227f7812956b48741e3d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:13:c6:29:ea:70:7c:2b:1a:cd:21:ee:7c:
9f:b8:ea:b2:1c:73:8e:54:fd:92:78:5f:fe:60:43:
6a:f1:f3:c4:7c:6b:da:53:44:55:3c:2f:30:43:f8:
27:40:f7:84:ff:a8:c0:6e:b6:1d:08:ed:2c:ae:cb:
c3:94:d9:93:23:91:3c:af:6e:3e:0c:40:c2:a4:7a:
99:45:b9:79:7e:a0:11:62:2e:de:b8:43:d8:eb:f6:
61:f5:3c:a8:ae:15:1f:48:04:84:4a:27:52:bc:22:
0c:9f:de:3e:ac:d1:ef:f0:0c:d1:59:c8:c6:93:32:
fc:e3:28:3e:a5:ad:6a:d4:9e:2a:2e:56:73:83:d1:
01:ab:7a:3c:b2:e8:d5:03:69:81:8d:dd:b6:cb:77:
6f:88:0c:a0:0f:be:dc:76:45:b8:1c:c8:64:5a:3b:
c4:70:87:9a:98:6d:d9:42:de:a0:88:e0:06:06:75:
cf:78:59:a7:6d:9b:53:8b:39:dd:1b:31:a3:67:a2:
84:b7:15:0e:58:9a:54:0d:d1:c6:2b:39:c1:40:c0:
87:a1:08:c9:75:d3:5c:b9:9b:5a:37:57:bc:53:22:
fe:0d:83:d2:39:05:4f:80:d8:88:2b:96:7b:4f:f4:
b7:c9:76:6a:87:a6:b6:43:de:50:ee:c1:2f:a1:d7:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:B3:41:88:FF:4C:47:84:22:7F:78:12:95:6B:48:74:1E:3D:6D
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c7:a0:eb:f8:48:60:64:6a:98:9e:ef:fc:f1:e2:2d:00:f2:
57:15:5f:2f:1b:47:46:01:72:95:10:85:8b:28:61:cb:ec:1e:
d7:08:96:d5:3e:98:06:b2:28:9a:8f:ab:95:3a:4a:35:07:3a:
a5:af:83:fa:a3:de:7a:e5:7a:3c:4e:fb:26:d4:92:51:2a:2e:
3f:e5:94:c5:b5:7e:13:80:13:4c:00:22:b6:58:d4:30:be:a4:
15:2f:6d:ef:4d:84:ea:46:1c:1e:68:d1:d1:d4:03:7c:46:d8:
20:4f:b1:ae:e4:f1:f4:b1:19:87:16:54:46:0c:8c:ee:87:97:
29:7e:01:39:71:0d:de:9d:37:95:c4:06:8b:3f:7c:71:b9:fd:
7e:16:57:07:ac:ba:06:b0:35:cb:86:4d:01:ee:65:80:8c:95:
7a:e4:23:c9:f9:68:83:1e:b3:0d:c6:3d:65:2b:4e:9c:36:ef:
b9:21:7e:b2:7b:2e:9b:89:9c:60:4b:64:2e:7f:40:b9:23:00:
f5:18:42:20:da:ce:2c:23:8b:5f:be:df:1f:09:ec:75:51:4b:
a9:b5:a3:c7:94:25:b3:f4:f3:93:db:5c:da:52:b4:e3:72:06:
f0:6d:16:b8:d1:7a:cd:f4:5a:79:a6:0f:17:4f:1e:db:2f:05:
d8:80:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:46:38 2026 by rpki-client