Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: XkPQfrYwH4Q69VWBv56EFOfhuh25QwtAGXJUTIozzks=
Subject key identifier: B9:3B:6A:48:1D:39:12:5A:0D:1F:2D:9A:44:29:E9:8F:3A:7B:4E:53
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019EC1EE6179536107A04215C2515CBAE798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 022C
Signing time: Sat 13 Jun 2026 17:01:25 +0000
Manifest this update: Sat 13 Jun 2026 17:01:25 +0000
Manifest next update: Sun 14 Jun 2026 17:01:25 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: tzeHkrvnYMOyoNcuQsQUv1epo1tQ9wfVXoxnKH6Oi28=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: mwCzzvweJkXnsuKQFU_XqrjgkuY.roa (hash: oIsIZ9PAHY73DINk0iQBEaX5PRlBNYPUighzgQGS/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:61:79:53:61:07:a0:42:15:c2:51:5c:ba:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Jun 13 17:01:25 2026 GMT
Not After : Jun 14 17:01:25 2026 GMT
Subject: CN=b93b6a481d39125a0d1f2d9a4429e98f3a7b4e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:f2:97:99:af:03:65:9a:41:33:89:cc:ef:
90:12:0b:de:14:c1:cb:e0:ba:23:e9:61:2a:d0:2b:
02:7c:a9:6f:e2:30:9e:5c:06:11:c9:b7:f9:0b:af:
e4:d7:32:8a:ed:29:24:6c:69:c6:e7:78:0d:50:2c:
f2:4b:9e:eb:60:31:e6:4e:9c:fa:8a:0b:e4:e9:37:
5e:90:4f:c9:4d:96:e7:a0:79:94:59:74:e5:89:78:
fd:7d:63:a4:fd:c9:05:48:6c:ec:a9:20:a7:86:7c:
a2:fb:91:90:0b:cc:4c:08:8b:9f:ff:61:56:77:f8:
0a:64:e7:0c:f1:cc:05:98:a8:f2:46:2b:19:2d:f9:
58:ab:b7:12:2b:7b:3c:2a:52:4c:7a:8d:b3:66:b4:
19:1c:58:56:2c:1c:e0:ed:07:df:35:af:5d:64:0f:
dc:71:27:fd:81:da:f6:1c:51:08:f0:39:6e:f5:85:
c3:1b:f5:bc:a5:40:f0:bc:19:c5:c6:e9:f9:95:5a:
64:33:84:de:5e:85:23:2b:d0:0a:84:dd:76:46:55:
c3:42:6c:bc:b3:47:d0:b3:31:6f:88:53:6a:7f:4f:
e3:d8:71:ee:7f:1f:81:5c:84:81:04:d2:0e:3d:1d:
69:92:7b:e1:95:01:79:65:3d:99:34:a6:86:06:91:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:6A:48:1D:39:12:5A:0D:1F:2D:9A:44:29:E9:8F:3A:7B:4E:53
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2d:33:a1:df:48:e5:5b:81:4e:ab:81:67:db:72:a7:44:31:
40:4f:48:2f:12:e5:ff:ff:94:af:26:fa:7b:ea:20:ca:ab:55:
24:1e:b5:e0:a1:7c:3a:cc:be:3f:d3:a7:ee:85:52:dd:df:c5:
9d:fd:dc:4a:bc:b2:7e:3c:91:1e:ab:4e:9a:31:e2:b8:d1:38:
e9:27:95:19:93:0a:c9:2d:19:5b:d6:ee:c7:f9:52:cc:d9:05:
74:4c:59:94:77:61:cb:8c:7c:47:ba:c7:d3:dc:a5:3b:16:c3:
e3:26:1b:35:f6:01:ba:fd:58:38:e3:93:6c:b3:81:24:c7:59:
de:7d:ca:4f:9a:d8:39:30:8b:79:ad:99:f0:6e:da:d7:0e:6d:
9b:f3:a5:3b:f7:6a:eb:b8:b1:dd:7b:55:a0:c8:f6:63:42:ab:
eb:63:bc:a5:b6:04:e4:21:37:7d:12:4a:c7:5e:51:52:9f:56:
c7:bf:47:f4:cc:e7:c3:33:0d:c2:52:b7:c6:79:a0:7b:3d:7b:
88:ac:1f:2e:28:35:fc:3c:44:e7:62:d3:b5:96:46:f5:e6:8d:
b7:4d:21:3d:f8:a0:ce:a7:84:94:ff:02:08:34:8c:85:14:63:
d6:70:d6:e5:b8:49:fb:48:3e:53:dd:2d:89:ef:ec:c9:59:9b:
92:4a:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:26 2026 by rpki-client