Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: 3kV4MSkzRdVnX6HTQVqNeCxfP8X3ldCZH0knEaabW6I=
Subject key identifier: 02:17:45:29:BA:12:2A:D0:BF:8C:E3:76:33:A1:8C:40:32:82:E1:B0
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 019EC1124CE7CF72D2E4CB1B1BD90F5454C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0C2A
Signing time: Sat 13 Jun 2026 13:01:02 +0000
Manifest this update: Sat 13 Jun 2026 13:01:02 +0000
Manifest next update: Sun 14 Jun 2026 13:01:02 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: rB3V17wRPhABc48vg+ygx8phPlNuXxVzmMhIcidtMgw=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:4c:e7:cf:72:d2:e4:cb:1b:1b:d9:0f:54:54:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jun 13 13:01:02 2026 GMT
Not After : Jun 14 13:01:02 2026 GMT
Subject: CN=02174529ba122ad0bf8ce37633a18c403282e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:b3:ea:da:dd:fb:7a:4a:30:9f:d3:42:a4:
5f:db:80:9c:3d:08:74:21:45:22:26:e8:ce:de:2c:
32:b5:da:9a:37:13:26:5c:e7:f3:c1:dc:8c:c6:cc:
23:68:24:f5:04:a1:72:f4:73:c8:ed:4b:2f:fb:26:
8e:19:f6:94:80:8c:9f:3a:e9:72:96:f0:9e:5d:1c:
c0:35:3e:1f:91:2f:82:7a:60:3e:84:95:56:d4:e1:
f6:5e:24:94:34:16:31:b4:17:8f:b0:56:8b:0f:bd:
b0:fe:d2:0e:f3:10:97:77:f8:fb:73:6a:0c:32:08:
11:d9:51:0f:e1:b8:eb:17:89:3b:f7:cd:9c:97:34:
a3:c8:89:19:2d:89:22:88:e9:07:3d:f5:49:9e:cc:
28:fe:98:2a:c9:7e:43:a3:97:02:88:74:21:47:00:
8f:de:a9:6c:c2:ac:38:52:b8:b7:17:9f:71:5a:59:
b3:2d:8c:c8:9c:91:4f:bf:86:ce:a3:55:6d:ec:69:
91:cd:0e:bf:e7:8d:55:1f:75:d6:36:11:22:57:b8:
dc:5b:07:f1:e7:2b:7a:16:e8:1c:ec:19:91:97:c2:
11:eb:3e:e9:13:4d:10:f4:c0:ef:2e:e6:b1:5b:d9:
df:06:32:15:02:e2:bd:69:12:c6:43:be:6d:8d:14:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:17:45:29:BA:12:2A:D0:BF:8C:E3:76:33:A1:8C:40:32:82:E1:B0
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:68:e6:e5:2f:68:79:a6:31:79:0a:16:17:56:6a:d5:40:fe:
a1:fd:8b:7b:b4:50:4d:b6:e6:74:96:0c:91:b4:04:ab:e8:16:
0b:fa:0a:88:a7:e3:9a:d9:3c:a2:d6:f4:19:e7:cf:1d:5c:55:
e5:3f:ed:db:79:ec:80:3f:39:7d:26:d5:aa:f9:da:df:78:92:
b3:4d:cf:1e:da:6a:05:a0:0a:d3:4b:09:42:02:c5:58:8e:f8:
f5:56:5e:70:e4:3e:78:b4:e0:8b:dc:ab:93:fb:fa:90:69:3d:
06:c7:87:a8:7d:4b:1f:4c:d9:4e:96:5b:ef:b9:ba:64:12:f3:
6b:33:fe:f6:0b:62:01:52:8a:d5:9c:14:a1:f0:01:48:5b:5b:
63:60:58:88:f3:5b:64:13:cd:e4:2c:00:12:0c:33:4b:5a:10:
e6:02:0b:10:52:dc:3d:5f:5d:bc:83:e1:0c:c5:0d:b1:35:f4:
5c:79:ad:78:28:38:5c:82:17:69:66:6a:ce:28:4c:98:87:95:
b7:d6:0d:02:b9:88:78:8a:ac:dd:23:b2:36:58:90:4c:aa:74:
0f:74:a7:2d:7c:76:a2:24:fb:f1:60:32:b3:80:87:97:fb:c2:
2d:aa:ed:05:3a:4d:fd:fe:3e:72:e2:cf:50:b0:5c:da:11:d3:
0f:2d:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:59 2026 by rpki-client