Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: GYLzZjkAJVca+4vKGDdY71B7a7uGMTrDuN2avEPH58g=
Subject key identifier: 83:04:A8:C3:20:25:E4:8C:98:36:B7:61:8A:16:75:94:90:5B:F1:37
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019FA9E278013B4BAE45E952CA800D3F9E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 11CE
Signing time: Tue 28 Jul 2026 18:00:18 +0000
Manifest this update: Tue 28 Jul 2026 18:00:18 +0000
Manifest next update: Wed 29 Jul 2026 18:00:18 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: bDW6mmZ8HVKiNK2V0IqwspYXcNPv1zcT60G610hbTXU=)
2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:78:01:3b:4b:ae:45:e9:52:ca:80:0d:3f:9e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jul 28 18:00:18 2026 GMT
Not After : Jul 29 18:00:18 2026 GMT
Subject: CN=8304a8c32025e48c9836b7618a167594905bf137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:fe:ac:8a:b7:e1:7d:82:a0:da:03:01:11:
34:ad:ee:0d:0c:63:0d:59:5d:d4:6c:32:20:84:0a:
08:29:f1:d7:ae:08:65:0e:2d:58:38:20:d3:6f:3c:
dc:95:80:c7:d6:c0:74:ed:76:af:f1:21:b2:f2:8e:
75:5d:28:f2:8d:af:05:58:fd:d8:30:fa:9a:0a:b8:
85:c9:56:a4:a2:cd:66:d6:fb:c9:e7:c3:5f:a8:0a:
bb:38:7f:da:12:aa:02:59:cb:17:d3:e2:cc:63:4d:
d1:7e:83:65:8b:62:ca:7a:9f:7d:00:45:ae:7e:f2:
cb:e9:dc:57:db:02:01:91:4c:40:78:e8:1d:4c:7f:
f4:d0:e1:4f:4f:88:b8:07:36:b4:ff:f0:60:9b:ac:
3f:7e:d0:fb:1e:df:10:14:ff:02:d5:4c:2b:d9:5d:
b8:8a:74:a8:32:b8:83:7e:66:5c:bd:df:c0:d7:ec:
82:8c:e6:d9:eb:1f:70:07:64:98:f4:21:f9:53:db:
2a:8f:46:f0:85:50:93:26:84:08:b7:31:5f:cb:fb:
ea:fb:cd:25:19:91:5c:04:82:4f:df:ed:8d:53:a3:
6b:3c:76:a0:d9:cc:e1:c4:21:8b:e9:b9:a7:ad:ce:
44:3b:7a:ce:f0:5c:45:a6:00:5e:53:7a:24:60:39:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:A8:C3:20:25:E4:8C:98:36:B7:61:8A:16:75:94:90:5B:F1:37
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:fe:1f:ab:f5:cc:55:34:83:fd:91:50:39:3b:83:10:12:
14:6e:3c:dd:2b:42:8b:d8:26:3d:26:96:03:4b:6d:44:65:85:
64:ec:ab:9e:df:17:f3:c3:4b:f7:90:6d:31:2b:9e:43:d2:8e:
a5:a4:a1:94:d7:63:dd:08:6c:8a:83:8c:ea:df:f7:8f:84:b1:
29:5d:47:b9:80:8e:43:37:2b:10:e0:e6:39:38:65:38:7b:25:
9c:09:6b:ef:62:6f:75:3d:7f:20:bc:12:fa:6c:17:17:72:86:
2a:a5:64:e2:d8:23:cc:bd:78:b4:f1:a7:15:be:b4:30:22:4f:
c1:f6:43:09:81:5f:a2:d6:f0:ac:cf:ae:b0:c6:f9:f3:ea:77:
13:da:96:d2:5f:e0:e9:35:fa:73:f8:3e:80:4b:6b:8c:68:82:
09:65:9b:1e:6e:fd:ac:00:8a:fb:17:c7:eb:26:45:a9:e1:ab:
1a:ba:b5:02:68:eb:d4:49:83:05:ef:4e:c8:c3:0d:28:f8:b4:
94:9e:3a:fb:3a:6b:99:ba:f4:d3:4d:9c:a4:a1:85:4e:e1:de:
83:48:a2:a8:59:8b:e9:30:c1:53:04:70:5c:b2:69:04:d6:af:
8e:af:dd:94:eb:63:08:65:b7:76:87:7a:87:eb:99:ea:ba:31:
87:3f:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:13 2026 by rpki-client