Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: ZSdZz6LhQhhpFPUAs0+8Jo67ujprzc9F8YwrbO/yLKk=
Subject key identifier: 6C:0C:24:C0:D9:1F:85:79:E6:2E:5F:C9:A6:AF:54:A6:9F:8F:8F:28
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019FA9E352637FEDABC35B9F160A1C9F5A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0C9E
Signing time: Tue 28 Jul 2026 18:01:14 +0000
Manifest this update: Tue 28 Jul 2026 18:01:14 +0000
Manifest next update: Wed 29 Jul 2026 18:01:14 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: S5aP2pP3Dxu6HWw/6UOyWvAhGLbsbA8GzsgiT3hU9IU=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:52:63:7f:ed:ab:c3:5b:9f:16:0a:1c:9f:5a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Jul 28 18:01:14 2026 GMT
Not After : Jul 29 18:01:14 2026 GMT
Subject: CN=6c0c24c0d91f8579e62e5fc9a6af54a69f8f8f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:d4:88:43:2b:d7:c1:5e:43:4f:cb:a7:9f:
d2:66:91:66:98:39:d5:6c:cf:47:30:29:8f:04:41:
b7:85:22:17:bf:5f:83:93:0b:fa:a1:f4:71:fc:15:
73:89:01:e3:71:2c:ea:e5:4f:74:c5:80:96:0c:66:
d6:fd:cd:34:9a:9a:e3:96:94:33:c6:f4:35:34:e5:
84:01:0d:e2:d9:ad:fb:21:aa:bd:dd:77:bc:a5:4a:
e5:3c:c0:78:a3:a4:a2:38:ab:71:31:6d:cb:20:1d:
ba:2f:82:52:4e:87:ea:b9:37:ca:46:79:e0:0c:18:
4b:4f:ea:57:26:6d:9e:58:fc:f4:8d:a0:76:6f:bc:
3b:13:ef:ec:20:71:56:a4:30:77:6f:a8:c0:96:2a:
e5:02:c7:b1:4e:ea:63:6e:23:97:25:ec:0e:5f:9a:
5b:9e:15:30:fd:59:26:45:29:9f:04:db:48:f0:24:
42:86:03:91:ff:76:41:f9:2c:c7:76:a6:14:ad:27:
85:14:04:a8:38:7f:70:e1:06:6a:35:45:8f:22:ab:
85:89:f8:ab:b5:68:24:82:35:5f:2a:a8:0d:8b:61:
43:64:e2:27:1b:0d:59:d6:68:17:48:b7:16:e8:11:
5a:8b:6d:f9:a4:57:c3:80:db:06:3f:d9:a7:2a:b7:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0C:24:C0:D9:1F:85:79:E6:2E:5F:C9:A6:AF:54:A6:9F:8F:8F:28
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:02:b4:37:21:49:e5:35:ff:e1:cd:4f:bc:70:02:0e:fa:81:
98:b6:8a:5c:cc:e8:49:ad:5c:7f:68:ad:f5:5d:b8:d0:51:05:
d8:3b:2c:3a:74:df:8d:ae:96:87:57:6a:88:b7:3f:ec:15:bb:
30:07:88:0e:7e:19:01:ac:49:7b:97:03:99:74:2f:62:b8:77:
4d:24:3a:50:e3:07:ed:38:08:13:90:5a:76:32:c8:97:5c:ff:
b2:63:b2:f0:59:36:3f:83:d7:12:98:7a:09:f3:64:18:b0:95:
72:3c:8a:c5:b6:a1:87:d2:10:f4:58:b1:ec:35:45:8c:50:e8:
86:43:a7:84:d8:29:a2:cb:3e:10:92:f5:da:0e:a1:fe:66:7d:
fc:a3:3a:d0:ae:63:ff:cc:4a:95:67:a8:c0:ff:5f:8c:81:bc:
78:d2:7f:92:c9:91:09:af:3e:29:0c:f4:29:5e:ad:81:48:c9:
e6:f5:d8:bc:49:c1:9d:f0:1a:cc:2f:6a:07:7b:d5:ac:78:cd:
aa:6d:b5:14:e8:02:b5:72:a8:01:23:30:80:91:70:12:10:36:
2c:e9:ec:79:fc:52:94:be:a4:5b:2d:32:20:ee:ec:b9:b9:73:
0c:32:11:18:9d:42:24:b4:cd:ea:7d:2c:c3:5f:a7:46:38:a6:
bf:52:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:41 2026 by rpki-client