Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: RqrawZmmf1PWq82Xw7g61+9u6ErzU1rGpEBIm9hjjhY=
Subject key identifier: 88:1A:D1:F6:DC:31:B6:F6:B2:86:E0:1C:02:FA:A6:A7:7B:A3:46:BB
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 019FAA884892EC6787F0FC2DC7F0F4085ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 0789
Signing time: Tue 28 Jul 2026 21:01:25 +0000
Manifest this update: Tue 28 Jul 2026 21:01:25 +0000
Manifest next update: Wed 29 Jul 2026 21:01:25 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: kp2KtQQBraUsrjg9OeEpYi7/9O+uqZ4QOuY8fCZP9wE=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:48:92:ec:67:87:f0:fc:2d:c7:f0:f4:08:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jul 28 21:01:25 2026 GMT
Not After : Jul 29 21:01:25 2026 GMT
Subject: CN=881ad1f6dc31b6f6b286e01c02faa6a77ba346bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:0f:09:a1:ee:ab:e6:cb:bb:54:b3:fc:8d:
93:03:d8:00:f1:6d:c5:68:11:ad:14:2c:e6:86:4d:
76:d2:d9:19:c4:45:57:37:aa:81:b1:fd:92:5a:cd:
a9:dc:0b:63:f7:61:9e:9a:90:63:21:38:c8:94:9c:
8f:11:82:bf:9d:9c:40:89:9b:ac:8a:01:99:66:ef:
d7:15:b6:ca:ba:cd:78:7c:ac:98:bc:8f:65:b2:89:
75:c3:23:1d:f8:0e:e6:1b:40:08:b5:e0:9b:80:62:
8f:93:a0:1b:c0:f9:d8:49:bb:66:52:6c:69:d0:44:
d1:43:54:8e:0a:73:61:ca:8f:e9:06:d5:24:41:b9:
09:f8:b1:01:22:cc:e3:42:79:bf:ed:63:1b:5a:db:
2f:11:26:99:c2:91:80:3a:ca:56:77:0a:76:83:cd:
fe:b5:2b:90:2c:81:4f:11:59:c3:e6:c5:36:e2:f2:
81:ed:17:0c:c7:cc:f6:19:25:3b:ce:79:6c:80:0c:
31:2a:9c:ad:2c:ed:c7:aa:bf:b8:20:f1:8d:42:46:
95:42:d5:7a:eb:58:8f:81:16:ab:b5:66:3a:14:8c:
93:a5:d0:9a:85:a1:2c:7e:31:87:34:22:ca:00:bb:
85:7d:09:4f:d3:15:d4:7f:4e:e6:c6:0e:c6:54:fb:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:D1:F6:DC:31:B6:F6:B2:86:E0:1C:02:FA:A6:A7:7B:A3:46:BB
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a0:bc:2c:a3:2e:4c:a3:9c:25:e9:ee:31:5d:95:a2:ec:4a:
48:bb:c3:9d:cf:91:f2:ff:07:a2:c0:e0:af:e0:38:2f:eb:3f:
31:48:c8:ad:40:f9:67:a7:60:86:69:da:07:6a:3d:99:87:35:
ed:92:9a:66:01:77:c3:14:0b:2c:6f:60:8b:60:ee:72:f3:e0:
33:46:13:37:ea:5f:9b:a8:ac:02:98:f9:d0:b3:ce:44:8f:b2:
7e:bd:86:c6:29:a7:db:b3:43:17:a1:66:2c:8f:ce:bf:de:16:
88:78:31:8e:58:6b:4a:3b:37:02:01:8f:4f:e9:c7:f6:e4:06:
5d:00:95:b8:61:43:34:69:73:55:68:62:82:eb:b1:46:5d:a8:
9d:3e:94:05:0c:48:9d:df:ff:3d:32:c6:99:0c:fd:63:d1:dc:
be:91:ac:ea:cd:de:7c:a3:aa:ee:8a:02:be:7d:a4:7d:54:d8:
8b:91:a2:1a:24:3c:90:27:ba:b9:6b:69:77:38:40:d3:2b:bb:
97:21:ce:3d:32:49:af:90:88:aa:41:23:55:3e:db:c7:af:74:
d7:29:f4:32:85:23:f9:0f:e4:17:16:17:2c:f9:4d:06:7d:66:
c8:53:8e:6c:bd:9f:6f:6c:d5:3d:be:77:6a:ec:23:fe:68:f1:
08:5d:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:10 2026 by rpki-client