Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: WZPd+Z2K7l00JYzn/XKqarnoirSc+iuEBRnaLi+fiQU=
Subject key identifier: 21:D4:17:7A:40:89:85:CD:57:1E:B2:FE:A3:E9:F8:90:43:63:15:0E
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 019FA9ABBA6003D6E3B06F74FF68D117F947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 0BE7
Signing time: Tue 28 Jul 2026 17:00:31 +0000
Manifest this update: Tue 28 Jul 2026 17:00:31 +0000
Manifest next update: Wed 29 Jul 2026 17:00:31 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: +OukXCmsI4qYyjuy6trVRyBHnp8mnPY6UsO/ODN1srE=)
2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ba:60:03:d6:e3:b0:6f:74:ff:68:d1:17:f9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Jul 28 17:00:31 2026 GMT
Not After : Jul 29 17:00:31 2026 GMT
Subject: CN=21d4177a408985cd571eb2fea3e9f8904363150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:05:67:0c:60:22:a5:1c:2a:42:ef:8b:75:
bf:a3:90:3b:bb:77:aa:6b:e4:0b:52:ed:61:f3:08:
7e:a4:42:be:80:b7:0c:5b:fc:db:50:70:6a:3c:e8:
6a:a4:88:00:b4:49:78:c6:ba:0f:b2:c4:1e:b5:70:
e6:29:53:28:a7:59:b8:46:c7:67:d8:10:11:1b:97:
ca:66:e4:f6:d0:5d:9e:e8:73:a0:dc:3a:2b:2b:83:
02:93:0a:2c:f5:f3:46:9d:9d:9f:da:23:88:63:ef:
7c:d3:b2:3e:a3:e5:dc:47:6e:ee:be:be:2e:1c:78:
da:51:f4:07:76:7c:10:db:65:66:1b:b9:f9:9a:c7:
97:ca:0b:3e:38:91:18:37:c6:95:61:e8:11:74:6a:
39:58:e0:af:16:c9:53:9a:6e:e5:1e:ab:7a:f2:d1:
86:ef:f2:d3:ce:05:5c:29:07:53:e9:6f:19:40:8f:
33:a2:54:1c:ac:17:ec:f5:72:72:67:4c:e9:44:5a:
a4:e9:10:52:f6:f4:01:8c:ab:13:58:c5:2f:82:61:
55:66:00:a6:ae:3a:54:65:09:c1:85:86:28:87:c9:
fb:6f:b7:c5:63:29:b4:2d:fd:37:11:7a:3f:28:e4:
c1:f5:ec:87:20:0d:22:f6:71:af:df:77:41:20:26:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:17:7A:40:89:85:CD:57:1E:B2:FE:A3:E9:F8:90:43:63:15:0E
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4d:ff:f8:18:54:c9:bc:de:84:34:67:4e:cf:70:53:5a:ce:
c5:a1:51:16:00:c9:73:e0:ae:8b:ba:aa:57:5a:2e:1f:64:15:
9c:24:7f:39:fb:64:c2:ff:94:60:8b:65:1a:18:7e:80:0a:a7:
5f:94:b5:fe:a9:ab:d0:10:19:10:8f:bf:b5:bf:97:c7:bf:82:
96:eb:7d:8e:fe:87:86:ea:ee:90:f2:46:c2:27:a1:2c:b1:0b:
cc:18:25:63:83:48:cc:17:32:3d:25:bf:ec:5e:0c:c8:cb:a7:
ba:2f:57:25:62:4e:57:44:89:56:67:5f:95:cf:67:18:98:f8:
94:06:1f:76:83:dc:85:12:1a:90:39:27:ed:0e:58:d7:a7:29:
62:ed:21:b6:24:33:a5:fa:a5:93:40:4d:02:d8:be:a2:14:3c:
f7:c8:1b:7b:e6:e7:2c:a3:0e:6c:f7:48:76:18:c7:38:a5:62:
c2:51:a8:4e:33:91:4b:b8:a8:d8:5b:2c:38:39:71:dc:e4:b3:
e7:a3:36:a8:ff:bf:f5:19:e3:e3:22:54:70:0a:84:33:6e:b4:
84:62:1a:50:79:68:e3:df:02:04:9c:5a:ca:96:4b:5f:91:9b:
87:62:ea:ce:7d:94:62:e2:db:60:be:2d:df:ae:be:3b:12:a8:
44:e6:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:45:12 2026 by rpki-client