
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: 2pkVOvzAjAkMiZmBjuPQl0LS1v5SUqOOd1WYlL3b6lM=
Subject key identifier: 27:7A:79:91:09:90:39:3D:4E:5F:63:93:0E:D9:0D:D3:F2:9A:BD:48
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 019EBFC84755B351EFCD217D322CB396271A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 07:00:34 +0000
Manifest this update: Sat 13 Jun 2026 07:00:34 +0000
Manifest next update: Sun 14 Jun 2026 07:00:34 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: lFSVgTyxn1/rOLJPtQXkFOSTRTm/qujTFurYr2VyHMc=)
2: dMl0CEajkrxcgLNcfpnLA8OuL7A.roa (hash: CYX2WX+QfrhOpGiBFy1DWZkIM2JKpSw/oiXkQ7UpKFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:47:55:b3:51:ef:cd:21:7d:32:2c:b3:96:27:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Jun 13 07:00:34 2026 GMT
Not After : Jun 14 07:00:34 2026 GMT
Subject: CN=277a79910990393d4e5f63930ed90dd3f29abd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:76:64:8f:26:e0:80:e9:3d:09:19:1e:0c:
91:7c:53:23:a1:a4:1a:9b:7f:f0:ba:6c:e1:a9:87:
5e:ee:b0:c7:32:55:7e:11:2e:5b:f9:fc:72:44:57:
26:b4:c5:03:00:e9:b9:e6:7a:6f:dd:05:75:3d:9b:
fd:e0:c9:b4:3d:f7:95:59:31:d4:2a:76:2e:f3:4f:
f0:9b:94:cc:9e:a9:93:06:ff:4a:3a:4d:a1:df:d5:
76:3f:ac:35:c6:ec:be:29:1f:f9:ee:8e:41:2d:62:
5e:97:15:f8:f4:d9:07:48:16:bd:9b:22:51:6a:60:
2c:a1:6f:18:11:46:fe:a9:89:a6:58:ad:c3:8b:ce:
c5:e8:d5:de:03:ec:44:6a:8b:fb:b8:39:4f:de:67:
ab:78:65:95:fb:28:63:db:82:bb:13:9d:2f:44:3d:
52:85:bc:74:57:14:49:e7:c5:23:38:75:be:ba:18:
fc:a1:24:b3:17:60:6d:ea:ec:11:ae:fa:20:46:d1:
be:55:a5:43:15:2b:f3:7f:54:63:d5:57:df:e8:93:
df:5c:5c:ce:be:37:43:5a:56:52:75:e9:0d:2f:76:
9d:d8:0e:5f:42:fa:5c:cb:f1:33:40:ff:88:78:01:
9c:db:70:4f:06:ec:c6:a8:57:16:6b:b8:68:32:2b:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:79:91:09:90:39:3D:4E:5F:63:93:0E:D9:0D:D3:F2:9A:BD:48
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fe:ab:b5:d3:25:6f:a2:85:28:65:94:f8:08:34:9e:84:dc:
fc:83:40:bc:25:b9:d4:62:49:98:4a:8c:16:eb:62:20:f7:00:
3e:f7:30:1f:2b:1c:44:ab:73:69:a5:4b:e4:bc:38:cb:a0:3b:
03:97:08:44:47:77:1b:2c:5e:50:0e:a7:9a:b1:28:b1:e4:fd:
4a:b5:1f:00:ed:60:cb:87:20:5b:40:9d:82:d3:fc:c9:45:eb:
99:4c:59:e5:52:9b:c9:8a:f6:96:b8:6f:c9:fc:01:12:36:b9:
19:b3:6a:44:15:16:7d:96:d2:fb:ae:fd:c4:84:70:0c:2f:55:
ba:5b:61:01:0b:06:b0:91:61:db:fc:e8:1a:6e:d6:c0:81:27:
3d:ee:97:f4:42:97:ef:be:5e:38:ed:47:97:26:92:55:fd:03:
cf:ba:dd:9f:43:86:03:e7:8e:cd:fc:85:cc:dd:18:05:af:5b:
3c:5a:6c:e5:36:f4:86:b7:66:00:db:91:9a:a8:e0:20:6a:29:
00:49:2f:24:ef:16:b4:79:2e:a4:b3:85:98:1b:1c:b8:0b:59:
b2:c3:ff:c7:68:ea:65:fa:45:d2:8e:44:61:a9:ad:e1:2e:30:
68:d7:93:a5:0f:2d:17:e1:db:47:95:f1:7e:af:7c:32:5f:5d:
55:fb:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:04 2026 by rpki-client