
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
File: 1Kje6labT0AYsLpuRDtVY663YiA.mft (raw, json)
Hash identifier: dCyBK5AUBU9TX/V1kbV7rw94yP4eIvTswBrSHFcU0MU=
Subject key identifier: FE:94:C2:58:82:2E:68:85:E5:0F:B2:E7:58:F8:84:93:42:C1:02:0B
Authority key identifier: D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
Certificate issuer: /CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Certificate serial: 019FAA8807CA97E874414F16B7282D0EE24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:09 +0000
Manifest this update: Tue 28 Jul 2026 21:01:09 +0000
Manifest next update: Wed 29 Jul 2026 21:01:09 +0000
Files and hashes: 1: 1Kje6labT0AYsLpuRDtVY663YiA.crl (hash: 2QG0ZnXw2AQGnxyWSUlhBs8tq0oUKLUhLbyWVj43dTg=)
2: xYC5Ef2FbO1kh0k5v0MHpXVPRIA.roa (hash: C3ScL3FbyGqqQa43l4JUN7kvgyu4hkQO8y2hJ7M5RK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:07:ca:97:e8:74:41:4f:16:b7:28:2d:0e:e2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Validity
Not Before: Jul 28 21:01:09 2026 GMT
Not After : Jul 29 21:01:09 2026 GMT
Subject: CN=fe94c258822e6885e50fb2e758f8849342c1020b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ad:7a:2c:1d:6d:09:e9:2f:5a:ee:35:d6:3b:
9e:ac:7f:ac:05:6b:c9:94:ee:10:45:f6:07:36:67:
73:4e:e6:20:42:ca:51:be:2c:35:01:8a:81:7a:3f:
3e:36:da:46:2b:74:2e:c2:67:8f:b6:a7:9b:ad:91:
a9:19:0d:bc:ac:f9:e0:7c:55:be:98:13:51:92:2f:
f7:c3:84:41:98:b0:5b:93:10:09:48:c2:cb:01:ad:
f5:5a:06:45:c3:d0:26:d7:0c:77:5b:14:57:07:26:
af:9d:e3:cb:ec:4f:27:1b:94:d2:37:11:7c:61:d1:
c5:7a:d4:61:59:f7:8c:fa:a7:c8:2b:7e:c2:74:3f:
88:46:c4:7b:43:cd:f1:2e:95:10:d8:4f:cd:f4:df:
56:87:32:47:6d:08:d8:4b:a5:01:c7:59:ae:fd:22:
11:f8:f3:20:dd:5e:99:26:3c:02:71:33:9a:96:8a:
83:b6:8b:99:5d:7b:03:93:77:c3:f9:00:1c:74:67:
fe:f2:25:da:14:a6:31:f1:4f:76:a6:6c:78:75:61:
b7:12:a2:52:62:8b:57:33:3b:6c:ea:14:10:83:ba:
ba:b3:46:6f:81:e1:e6:2b:22:3f:22:cb:db:5e:71:
73:62:a9:25:9b:b7:7d:75:33:2a:fa:64:8f:19:cb:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:C2:58:82:2E:68:85:E5:0F:B2:E7:58:F8:84:93:42:C1:02:0B
X509v3 Authority Key Identifier:
keyid:D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:39:2a:45:66:92:55:85:7f:b6:57:2e:2b:97:21:f2:69:86:
c9:6a:9a:34:03:4b:77:45:0b:2b:aa:89:9b:0b:c9:bb:df:09:
6c:3b:7e:35:b2:08:de:d6:9f:79:69:a2:50:5f:8c:05:e0:33:
8b:5d:94:2f:de:6f:87:ac:9a:b2:a0:cd:81:38:41:03:35:e0:
2f:97:74:0b:19:98:8d:ec:a2:16:af:04:68:ce:df:8b:6b:4c:
47:b3:b0:1f:ba:38:e4:a9:94:3b:ff:3a:fc:f3:2f:23:b4:41:
b5:a2:ee:a0:e7:de:a3:3e:e0:7c:76:08:67:f4:f2:4f:eb:ee:
fc:d9:f6:b3:20:d1:09:83:4c:ba:51:8c:6f:92:61:12:f5:0e:
83:e0:8d:67:2e:d5:4b:f4:e5:45:13:ca:1a:8b:5a:8c:47:c5:
43:1c:de:b4:22:65:a8:29:22:60:e1:10:08:d6:bc:e3:91:ab:
64:26:6b:c8:c9:f6:22:20:b8:9f:41:d6:4f:2b:56:dd:86:55:
96:7c:d8:00:e2:75:d8:43:8d:81:7c:d8:4b:61:77:59:ae:2b:
08:ce:b7:cf:d8:4b:62:8e:04:b9:f9:cf:9e:1d:87:5e:f1:97:
52:44:1d:98:5b:de:7c:1e:41:c6:87:da:0e:ca:37:0c:5e:c7:
2e:87:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:34:26 2026 by rpki-client