Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: kVgE2ShGEfCdzS3S60tYfFStL+yqd0elGAK7mn+Dh3k=
Subject key identifier: CC:F5:39:6C:A7:A6:26:33:BF:B7:2D:13:20:C3:D2:3F:A5:49:FD:A2
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019EC0DAECF948196B78B245886056FF4859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 07A3
Signing time: Sat 13 Jun 2026 12:00:33 +0000
Manifest this update: Sat 13 Jun 2026 12:00:33 +0000
Manifest next update: Sun 14 Jun 2026 12:00:33 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: hf29maEV6A3qRA/WcXsVJARGhQPYj1c8wFUQsxQFvf8=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ec:f9:48:19:6b:78:b2:45:88:60:56:ff:48:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jun 13 12:00:33 2026 GMT
Not After : Jun 14 12:00:33 2026 GMT
Subject: CN=ccf5396ca7a62633bfb72d1320c3d23fa549fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:0b:bd:b5:66:16:53:9a:14:2b:53:c6:a1:
60:10:bf:19:af:25:f8:ca:95:17:ac:3a:94:c8:57:
6e:86:77:03:c8:f8:37:9c:fa:21:9e:42:c6:da:63:
82:a9:6d:e8:5b:a8:6f:9a:9a:f3:ad:b2:ca:fa:09:
a5:26:32:23:60:a0:13:17:79:86:e2:fa:c6:0d:20:
fe:3b:0a:d4:8c:9b:f5:1b:34:2c:38:e2:89:61:91:
78:5a:d6:89:89:51:29:7e:02:0f:7e:04:8a:92:7a:
5a:4a:0d:39:23:cd:cc:c9:44:dd:1d:91:b1:58:70:
47:fe:31:51:44:43:d0:ef:06:9b:39:93:0d:6e:59:
dd:47:77:44:9f:0e:78:ad:25:1a:45:ce:b9:7c:29:
54:7d:0a:60:9b:c7:db:3b:9e:a2:4e:a0:55:56:cb:
2c:19:83:73:52:e0:78:3d:5c:6f:36:11:a8:7d:b8:
bd:a1:6b:0c:ab:04:43:85:55:c7:ff:67:39:fd:a5:
49:b7:b4:e2:24:b6:5e:01:f2:78:29:8d:c2:9e:12:
2b:76:eb:13:c7:4e:2a:a8:00:fe:e0:ca:82:43:44:
aa:c4:9b:ff:44:17:65:96:f6:66:d7:bf:61:5f:be:
e7:4e:f9:6a:a1:e1:5e:90:89:4b:32:4d:53:44:a5:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:39:6C:A7:A6:26:33:BF:B7:2D:13:20:C3:D2:3F:A5:49:FD:A2
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:82:05:e5:55:10:07:03:56:75:0a:b9:7c:e8:74:f8:9c:d0:
e9:23:3b:35:d6:e4:77:eb:ab:5c:95:00:46:c4:23:03:9a:d3:
30:cc:c0:7a:75:a2:e2:c7:0c:66:78:88:4c:78:4b:51:d5:e3:
65:82:b4:d7:62:ee:bb:e4:97:a6:a3:3b:37:7e:c0:83:95:e3:
fc:40:1a:c3:48:79:87:74:a7:fd:40:8b:da:b7:00:9d:e9:0c:
cd:e3:bb:23:e1:fc:80:5e:f0:86:68:7e:cd:59:3a:28:64:27:
41:d4:e5:38:2a:a0:ee:e5:06:99:b6:e8:b7:f1:49:4b:1e:29:
f7:10:43:7d:c5:6c:ce:5a:dd:c7:22:92:b1:78:7d:d9:d7:ac:
f0:83:01:81:2d:ae:5e:ae:6c:6d:f1:05:d3:36:c5:63:1d:6e:
9b:11:fe:f8:90:76:e8:98:f4:53:b1:56:87:f3:b0:61:37:d1:
a1:bf:45:f0:76:27:e2:33:4e:78:6c:aa:2e:09:bb:eb:02:74:
21:16:78:4c:a5:04:2b:3e:34:95:fa:c2:cc:30:1c:59:e7:1b:
a9:d5:47:a5:17:b2:a3:65:06:95:4c:27:f9:02:4b:f2:6a:8a:
64:3f:db:d6:cc:18:dc:1e:95:f2:42:07:60:0c:82:c1:11:bf:
97:3d:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:40 2026 by rpki-client