Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: P3b/QVjqfGRZksFwSGcObbvDLY0mkM9kRztD6bW+EiI=
Subject key identifier: 29:D1:E7:38:05:F9:1F:86:97:67:67:CA:0D:B5:95:AB:54:23:F7:56
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019EC1497F2F872B146E110677B1A99D4B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1698
Signing time: Sat 13 Jun 2026 14:01:19 +0000
Manifest this update: Sat 13 Jun 2026 14:01:19 +0000
Manifest next update: Sun 14 Jun 2026 14:01:19 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: YKArVmpJRPISs/R1wYhnqCO5SUFP3pmo7IsOVFzmP+Q=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:7f:2f:87:2b:14:6e:11:06:77:b1:a9:9d:4b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jun 13 14:01:19 2026 GMT
Not After : Jun 14 14:01:19 2026 GMT
Subject: CN=29d1e73805f91f86976767ca0db595ab5423f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:95:20:7e:8d:7e:3a:ba:40:0e:f7:24:f9:
7b:c6:4b:6e:0c:f2:89:f8:03:78:22:d9:fa:fb:98:
05:62:e5:80:94:99:c6:2e:84:5e:28:56:58:4d:a8:
a8:3c:a1:e0:18:dd:4e:ef:50:7a:c6:fd:99:34:3e:
d1:6f:9f:8e:e3:94:32:d8:6e:cc:91:bf:69:6a:bd:
64:fc:c1:75:87:9c:ff:8f:07:5e:f4:02:71:f7:97:
4a:ec:6a:3b:62:57:64:ac:fe:c8:80:83:f8:c4:24:
ed:55:7c:b8:16:61:02:bc:b8:0b:0a:c7:df:1d:f4:
8c:4a:b4:07:2f:40:e5:6b:24:3d:c8:d2:f2:48:bb:
54:b8:34:83:02:5d:c7:62:21:d6:1d:e3:eb:c5:5d:
df:0d:0e:a5:a3:96:b8:83:f3:67:ec:87:27:5c:a7:
6c:1f:1d:5a:c4:5f:b8:c4:ce:33:d8:f0:b0:1d:52:
17:c1:06:39:72:8a:8d:24:b9:c8:19:88:90:15:79:
fb:df:8b:bc:81:72:39:d4:35:ef:7c:37:20:91:a2:
b5:1b:82:d2:9f:67:be:96:f9:e1:89:ec:c8:4d:00:
6f:1a:dd:ec:fa:56:e3:c4:b1:ca:d5:52:4d:e1:64:
df:d2:01:08:b3:7a:50:61:ce:25:58:1a:6a:c5:7e:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:E7:38:05:F9:1F:86:97:67:67:CA:0D:B5:95:AB:54:23:F7:56
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:0e:ff:d3:0b:68:90:46:e5:7c:9e:20:43:63:ea:9c:4d:
07:7d:67:11:4f:71:e5:9f:3d:d3:04:46:fe:da:a2:c7:b6:f9:
ba:78:9a:5f:fc:f7:32:72:ca:63:6e:e5:d4:a5:d6:b5:5a:4e:
25:58:99:bc:1c:1c:3d:e5:94:e6:9e:88:5b:51:ba:09:cd:9c:
c3:cd:ee:98:ce:65:e7:61:34:17:19:30:35:3f:20:ef:7c:71:
88:ee:9a:47:a2:a2:d9:c4:01:c9:50:e4:b2:4f:18:e2:03:24:
01:63:60:8f:81:8f:0d:cf:22:04:d7:45:d5:f9:24:c2:27:00:
64:1a:29:31:2c:56:da:0c:22:bd:be:2f:00:6b:70:aa:e8:46:
30:96:d4:29:5f:2d:ae:dd:9d:2f:d6:5a:06:79:55:84:31:ac:
02:35:b9:b1:6c:c3:0d:f3:50:5b:96:fb:74:fa:54:18:41:3a:
49:88:9d:d5:e3:19:15:1a:16:bb:bd:33:5c:8f:3e:04:c5:54:
e5:05:0f:4b:96:77:57:63:60:8f:b2:00:c9:0b:73:58:cf:6e:
8c:02:22:cf:00:12:18:75:b7:59:58:58:73:7c:46:5e:e5:17:
8f:e9:c0:dd:b1:76:06:0b:25:10:85:8e:52:13:38:95:46:64:
5b:6b:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:14 2026 by rpki-client