Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: Ivr36yK783vpo9IxaVbHLh2NzywEtIpVzxGpCNxp/SI=
Subject key identifier: DD:33:A9:36:3E:67:54:6B:D6:F5:17:47:53:9F:3D:25:17:B1:B9:1F
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019FACE3E5F48CB905D560358C36F9422E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 0661
Signing time: Wed 29 Jul 2026 08:00:44 +0000
Manifest this update: Wed 29 Jul 2026 08:00:44 +0000
Manifest next update: Thu 30 Jul 2026 08:00:44 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: b7t/p13wYZq0aHtKy/44Y933ojFGgEVyE88umisjepE=)
2: nj_5MaQooSjXGiQr1BUruywSxrU.roa (hash: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:e5:f4:8c:b9:05:d5:60:35:8c:36:f9:42:2e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Jul 29 08:00:44 2026 GMT
Not After : Jul 30 08:00:44 2026 GMT
Subject: CN=dd33a9363e67546bd6f51747539f3d2517b1b91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:8f:30:36:fe:44:40:73:67:59:71:7d:d1:
0a:1b:1a:7e:e6:04:77:03:23:96:53:09:a1:ce:95:
0a:2a:7a:a7:1c:9f:b7:6a:7d:41:37:49:4a:80:66:
c1:b8:aa:20:ea:95:ea:09:b3:9b:90:4f:40:9e:e6:
fb:b0:dc:c7:0d:72:6a:7a:20:b9:01:01:7e:99:82:
f5:03:a1:c4:78:d8:45:83:91:26:c6:be:11:d2:ea:
19:df:26:b1:cc:e3:c2:e2:99:09:4a:1e:43:de:54:
fc:98:b1:a7:36:0e:c1:d2:65:24:76:1f:f6:b9:a4:
78:55:7d:da:0b:e9:81:07:56:c5:96:71:60:57:3e:
4f:34:0d:ec:48:fb:fd:3f:cc:ae:57:6f:6d:f3:dc:
4d:a8:ac:ad:36:29:72:14:bb:a6:01:01:a8:08:2f:
f5:4d:87:b8:c6:70:08:3e:2d:aa:4b:b3:71:ac:48:
26:0a:2f:48:e7:4e:68:9f:4b:7c:05:73:95:31:ab:
30:73:85:72:29:6e:35:c6:1f:3a:e3:89:bb:c0:fd:
35:1b:ab:26:d2:b3:f0:b7:6e:4d:fb:30:41:3f:03:
b3:c6:f1:08:ef:55:49:8b:0d:1e:f3:08:53:6a:22:
da:29:74:e9:40:69:ab:b9:27:d6:42:9d:e5:cc:7a:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:A9:36:3E:67:54:6B:D6:F5:17:47:53:9F:3D:25:17:B1:B9:1F
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:62:16:4e:33:f6:49:e2:93:2c:0c:bf:d9:8d:0e:22:0c:86:
b9:fd:5d:1d:12:ab:bd:4b:5e:69:52:04:42:b0:e1:03:b6:69:
8a:df:f5:4e:8a:5b:1e:b9:21:2f:c2:db:89:39:4a:90:46:fd:
e0:0f:90:db:99:50:33:48:b7:6d:40:03:92:79:ba:ab:fe:c6:
89:b1:ce:1a:51:fc:e9:6b:aa:dc:6d:e5:88:42:92:b2:1d:ca:
3e:58:92:0d:52:df:69:71:45:56:10:bd:87:e3:22:9e:a4:d0:
eb:b3:b4:36:89:3b:15:f8:8b:de:38:ab:05:f5:e4:76:1d:16:
9b:aa:99:62:3d:4c:99:fa:b1:38:eb:c4:1c:08:a0:68:7d:7e:
5d:dd:70:42:7a:fb:91:c9:a9:e9:ff:6f:8e:2a:51:e6:1d:75:
bf:49:17:3c:24:1e:9f:8e:13:d3:c7:4d:35:ed:de:fa:0a:dd:
68:cb:48:88:2d:7e:d2:11:97:e4:26:cc:6d:dc:03:9d:78:5c:
27:f9:47:93:67:91:83:cf:47:a4:12:38:0b:19:db:98:f1:5f:
0e:7b:4b:7a:be:5e:96:f4:ac:64:1f:7d:a0:b8:e8:b9:51:77:
51:26:e7:dc:55:2f:6f:2d:cc:95:70:9f:2a:29:8a:d2:86:92:
a0:f6:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:17 2026 by rpki-client