Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: wayZLcceyHFRzirB+f9jW9sO3sLUyVa7vRPldtrl+5c=
Subject key identifier: A3:86:65:52:B0:C1:0B:B9:77:A1:0D:E6:B9:96:01:E5:90:54:3B:8A
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019FA82B50B747697E79C9C3363E1BD22C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 05C8
Signing time: Tue 28 Jul 2026 10:00:38 +0000
Manifest this update: Tue 28 Jul 2026 10:00:38 +0000
Manifest next update: Wed 29 Jul 2026 10:00:38 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: MY3BHo0+iaLR1S5X92gNBQJ+wHlZaPEuUlieim8VoOo=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:50:b7:47:69:7e:79:c9:c3:36:3e:1b:d2:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Jul 28 10:00:38 2026 GMT
Not After : Jul 29 10:00:38 2026 GMT
Subject: CN=a3866552b0c10bb977a10de6b99601e590543b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:de:ca:31:71:4e:7b:f9:30:92:c0:46:7f:
cb:94:c2:32:bf:f3:10:0f:71:98:db:2b:b3:df:95:
98:f3:7c:a6:ff:0d:69:c2:27:bb:f1:a0:4e:da:35:
4c:73:ed:d4:94:b2:8f:01:42:d5:7c:b0:e2:70:d0:
50:24:cf:dc:e9:f4:db:3f:55:d0:9e:3d:8c:59:a8:
96:d5:96:c3:c5:5d:ff:12:75:cc:ff:a4:e9:73:79:
82:bf:84:95:66:cc:88:97:06:ae:0c:48:b7:6d:c8:
e5:83:46:8a:2f:9a:19:58:ae:ab:a9:fa:5c:9f:34:
93:5f:a9:a3:52:10:e7:b6:16:92:8a:00:ad:39:1b:
61:97:80:fc:45:ff:be:a8:06:71:de:72:ec:2d:dc:
74:5b:aa:c1:2a:c8:19:6f:e1:c2:e0:1c:85:89:c2:
42:fa:9c:f8:3d:4c:33:8b:39:2f:18:76:b0:0d:c6:
c0:1a:52:ea:04:7c:d1:1f:bb:49:d0:15:b6:7b:3a:
fb:9d:51:aa:ff:08:c4:90:16:36:41:3c:69:6d:7e:
9f:1e:5f:d3:75:da:60:04:b0:11:bf:d1:30:24:c6:
e5:a8:7b:3f:b9:10:4c:8b:ff:5a:c3:f5:7d:3e:62:
27:82:1c:a8:7e:07:85:98:63:2c:d7:4a:c0:90:e7:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:86:65:52:B0:C1:0B:B9:77:A1:0D:E6:B9:96:01:E5:90:54:3B:8A
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:27:df:88:6a:91:ee:d3:c0:a4:39:bf:b1:f4:66:db:e8:9e:
0e:50:1c:e2:af:94:16:6d:49:75:27:b6:88:00:ab:dc:48:e6:
96:e3:c8:86:f2:6e:cd:80:b5:5b:10:75:f5:fb:d4:1c:c4:0a:
d8:fa:82:db:88:38:ec:3f:bf:2d:77:1b:7a:2f:24:ab:54:14:
63:d9:65:f4:df:b2:54:4f:70:6a:f2:22:dd:a4:c4:b1:25:ba:
79:d9:1d:df:06:00:a2:98:aa:1b:80:7f:72:eb:71:2c:fd:44:
78:5f:7e:f5:00:81:f8:6a:51:e7:a5:93:3a:7e:13:3b:04:ca:
28:0f:a7:2a:be:96:bf:4d:f0:cc:17:85:63:7e:66:2c:11:77:
93:1e:de:58:05:15:2e:23:4d:f9:cb:94:ea:19:f2:70:3d:74:
5b:98:3f:97:22:35:df:d5:5e:f1:4c:e9:dc:f3:69:e4:20:25:
ca:75:13:99:36:81:32:a8:94:18:c0:d7:e3:55:8a:f0:51:1a:
01:f7:9c:2b:19:aa:84:b5:ab:22:2e:c1:55:d7:2b:47:c6:30:
f7:cf:64:01:6d:30:e8:7f:d2:72:7e:3b:4f:a5:f3:65:eb:4e:
3f:8b:72:d1:7c:ae:6f:48:cb:26:fa:03:b3:de:ea:22:23:30:
f4:d5:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:03 2026 by rpki-client