Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: rTY+G/tt9w7oT7Jy/qY3mOz0yiydePyq+3zPhHIU+/Y=
Subject key identifier: D3:2B:E4:CA:36:74:34:C2:7E:D2:0C:DC:BF:C0:44:CC:F3:B0:62:EA
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 019FAA50BCE66B79AD5E881144DB70DBCB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0CE9
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: zi7P+W+sQ3AFFioH44hFarjETSX6uBRwb0sTXJZKMB4=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:bc:e6:6b:79:ad:5e:88:11:44:db:70:db:cb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=d32be4ca367434c27ed20cdcbfc044ccf3b062ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:85:99:df:72:bd:e4:f2:90:1f:9e:0d:80:
65:5b:9a:24:8f:f2:34:10:04:af:94:69:fe:55:b6:
dd:5a:4c:c3:de:57:0c:14:e6:83:f4:30:44:2f:db:
39:3d:97:06:c0:4a:f1:58:8d:d4:84:2c:94:9b:49:
63:f9:f0:91:92:23:1a:9c:df:f9:d4:92:fa:31:e1:
15:c4:e4:63:ec:0f:4d:cd:52:33:f7:1d:15:3c:59:
45:67:72:c7:43:6b:01:64:73:54:10:02:1f:30:ac:
8f:63:1d:95:66:e7:ac:2d:ac:15:32:19:93:6b:6a:
da:6b:6b:d3:88:60:77:fd:97:65:b1:09:fc:24:ec:
2d:4e:15:0c:11:30:98:97:9f:c7:a1:90:1e:09:37:
03:eb:4f:13:9b:c5:2a:0e:38:89:9e:57:51:37:b1:
22:1d:77:5d:b5:30:b8:3f:22:a7:80:18:b2:b1:c0:
ac:2c:7d:c6:55:6e:6c:5a:5e:2c:8f:3a:08:fd:b8:
26:8f:60:40:af:74:32:2f:7e:19:58:89:9b:a8:89:
d7:39:36:60:00:ab:3d:cc:e6:a1:9d:46:64:19:46:
30:0b:3b:05:26:b4:0d:27:a0:d1:ae:6e:a2:a8:a5:
f7:6a:72:72:9a:16:96:5e:c6:88:16:ec:c8:4b:78:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2B:E4:CA:36:74:34:C2:7E:D2:0C:DC:BF:C0:44:CC:F3:B0:62:EA
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0c:8d:37:0b:bc:8e:14:97:2c:fc:27:61:d5:03:be:ef:3e:
87:70:32:f8:34:13:8f:5b:12:ad:f4:bf:2c:cf:90:d7:56:d2:
42:28:18:21:7d:f0:33:4d:80:84:fa:72:5a:b3:c4:10:d2:63:
ec:2c:53:03:58:75:86:30:cf:af:ad:3b:44:51:66:26:51:5a:
57:9b:84:02:66:71:14:ca:3d:74:12:49:b0:7e:a8:0d:e9:24:
b5:03:5f:b2:a9:42:3b:f9:6c:3f:63:67:39:37:62:a3:64:a4:
42:24:6e:bd:82:6f:d1:a3:b1:dc:6f:60:26:bd:fa:48:94:4a:
8b:f3:b3:b5:6b:2a:89:16:29:82:5c:1e:d4:30:3f:9c:01:fb:
ef:1f:ba:fd:f9:c5:5c:a8:d7:e3:50:7d:d1:02:f3:4c:45:1f:
33:5c:8f:30:a6:2e:ab:50:6f:54:50:a5:07:06:08:74:c2:2e:
05:9a:22:bb:33:e9:95:32:d3:54:a1:fe:7c:b5:c3:ff:86:d4:
17:91:bd:54:77:5b:db:25:a0:82:39:43:7e:a9:32:b9:70:8e:
5d:7b:84:94:b7:32:81:fc:ff:10:4f:c5:ed:12:38:2c:c5:aa:
42:34:bf:03:e4:c5:57:4a:82:9a:a4:39:0e:38:d9:c3:4f:9c:
b6:8b:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:29 2026 by rpki-client