Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: 7+pJfjyREe3XXkFMY9NfO7lOaNxwSJNh9hHtD5hKbks=
Subject key identifier: 1C:60:6F:FB:8A:ED:24:50:04:0B:0C:FA:56:A1:68:01:71:84:97:BA
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019FAA1A2F3CBB46F9B41B8B058C43E96AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 19:01:10 +0000
Manifest this update: Tue 28 Jul 2026 19:01:10 +0000
Manifest next update: Wed 29 Jul 2026 19:01:10 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: Omtsrn/4nTrgcog9R8CTIdjwm0JPncaoMIygpYS1mXQ=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2f:3c:bb:46:f9:b4:1b:8b:05:8c:43:e9:6a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jul 28 19:01:10 2026 GMT
Not After : Jul 29 19:01:10 2026 GMT
Subject: CN=1c606ffb8aed2450040b0cfa56a16801718497ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:c6:bc:8e:83:65:8b:6c:81:33:8f:88:e9:
c1:c9:87:65:73:e4:2f:d2:73:7a:b4:46:14:db:ab:
51:7b:f1:64:36:d2:fe:54:3d:09:dd:99:e4:95:0f:
77:3c:66:aa:d1:c1:1a:20:e0:e7:5d:9c:21:3c:17:
af:82:b6:77:18:f5:7e:b2:f7:ac:3c:25:6c:37:96:
35:a5:4f:75:78:b6:24:91:9d:30:5c:ce:43:60:51:
ea:fc:8c:e1:ae:08:c7:f0:c2:6b:b1:30:f8:26:6b:
75:af:4c:34:ed:99:6f:56:79:f6:0c:6b:15:2c:d8:
30:ce:ab:83:12:a0:f2:db:76:2c:15:5c:ad:93:e2:
a6:1e:c8:4d:42:00:59:b8:b4:21:97:b8:da:b7:cb:
19:21:e1:60:44:1c:87:68:b3:7f:42:ef:ef:77:b0:
cd:4b:fd:68:3d:7c:83:55:bf:ba:ee:5a:8c:31:06:
e2:b6:1b:35:e7:3e:10:e8:2e:3e:44:b1:8b:83:9a:
bf:5a:63:62:6e:93:13:6d:a3:ef:c8:95:c5:90:79:
26:e9:c8:ef:60:97:c4:5f:78:5e:6d:0c:ad:40:89:
20:7d:87:c3:9b:12:78:f3:b6:7c:1d:08:fc:d4:46:
36:cf:d2:05:95:99:c1:8c:a8:06:ff:29:18:15:2e:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:60:6F:FB:8A:ED:24:50:04:0B:0C:FA:56:A1:68:01:71:84:97:BA
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fc:19:3e:d3:55:54:73:b7:e6:c0:d8:7a:28:bf:c4:b9:eb:
29:68:a4:85:e1:77:22:bf:48:52:f0:13:07:eb:ec:a7:2c:58:
d4:05:86:e2:7e:de:50:f4:41:2b:26:36:1f:db:82:ce:89:27:
f3:43:b4:e8:6d:ab:36:a0:18:22:43:5e:e4:01:24:1c:a5:89:
42:ee:57:34:c1:f6:4c:67:99:cf:60:2c:5c:aa:d6:a7:91:69:
49:2f:de:5f:89:80:d9:97:da:3c:2b:23:e6:81:06:cb:bd:b5:
bb:ac:d6:3f:08:46:e4:3a:27:8c:51:74:c8:49:d5:4f:29:4a:
b8:50:f6:fe:53:86:af:f9:9b:5b:ff:d9:2c:41:ac:83:36:06:
ff:ce:7d:2b:9a:e8:2b:e6:ea:04:75:45:c0:d0:43:47:54:d2:
a9:09:33:b2:9e:4c:9f:4b:76:d0:3a:a2:37:4d:62:86:85:dc:
4e:c8:07:98:89:37:5b:e2:5b:9a:3b:c2:b6:c9:a2:84:84:83:
91:be:3d:5f:66:46:ea:9e:a2:3a:49:98:87:40:4b:9a:82:86:
50:49:c6:d1:58:1a:5e:3b:99:03:dd:a4:2a:8a:77:28:bc:39:
3e:29:de:e9:6d:04:39:aa:06:46:5c:f6:8e:c9:94:94:f0:02:
b5:2c:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:02 2026 by rpki-client