Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: nhSV3Xe1W2rxufXlPOn5xbq7ujNLGdWp0zEFMKo0N94=
Subject key identifier: 00:8E:11:2C:BC:05:61:A4:32:7A:14:BC:D5:38:66:FD:C2:E0:56:2D
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019FA7BDB26CC817596C4100F91B06E5D36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 0289
Signing time: Tue 28 Jul 2026 08:00:54 +0000
Manifest this update: Tue 28 Jul 2026 08:00:54 +0000
Manifest next update: Wed 29 Jul 2026 08:00:54 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: ImXFQwQpYCfKmsy8GgziaPL2C2Egjj40lV274ZPM5Yg=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: ylydL3qXftFW7Uij6tIt41OMzD8.asa (hash: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:b2:6c:c8:17:59:6c:41:00:f9:1b:06:e5:d3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Jul 28 08:00:54 2026 GMT
Not After : Jul 29 08:00:54 2026 GMT
Subject: CN=008e112cbc0561a4327a14bcd53866fdc2e0562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:de:be:8f:64:2b:85:90:5d:ce:e0:56:70:
fc:63:1e:98:ef:60:1f:97:26:3c:9f:76:45:43:64:
c8:57:1d:b2:81:72:ec:7f:3f:c3:32:b0:73:47:db:
f6:17:00:02:2d:49:82:f2:66:dc:1c:08:4e:84:6f:
5c:38:b1:cf:ca:ce:1d:d9:2b:e4:e2:f5:a7:24:f7:
5b:77:9e:9a:2c:45:86:a1:2a:04:0a:f8:ff:82:9a:
26:ad:6b:dd:6d:55:0e:a8:c5:d2:14:23:39:c0:01:
27:13:aa:63:87:99:2f:eb:a7:26:af:1b:50:d1:bc:
d8:22:a0:85:30:3f:97:58:ef:1f:59:71:84:ba:96:
b0:5c:f7:2c:bd:b5:31:29:7f:e8:24:3d:54:76:2c:
76:6d:75:6d:f1:0a:f2:54:04:0a:db:fc:6a:3b:3c:
08:b9:d1:83:26:71:eb:b8:1f:21:8f:3e:0d:5c:9a:
b1:56:d9:1c:dc:e8:63:e3:44:84:53:77:22:82:83:
56:22:86:bd:ff:29:36:7c:b8:9b:3f:a6:4d:f7:c9:
b8:f5:5e:58:38:fd:e8:56:0b:65:d1:10:ad:cd:48:
0f:76:92:4e:0e:55:76:df:bc:1d:cb:90:1e:51:f7:
a5:10:1c:c4:6d:f9:1c:1d:55:18:19:77:3f:48:98:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:11:2C:BC:05:61:A4:32:7A:14:BC:D5:38:66:FD:C2:E0:56:2D
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2c:8f:75:6f:49:1b:2b:a0:6e:1b:28:cb:c8:de:f3:56:2b:
dd:98:06:fd:fa:80:69:63:79:9f:a3:13:75:2f:65:12:d7:c4:
37:da:f0:74:e5:cd:53:01:bd:d5:2d:50:f5:70:97:48:01:36:
68:6b:75:51:02:8f:02:49:cc:3c:f5:59:dc:78:36:98:63:1b:
e9:aa:44:81:48:9a:77:a7:32:51:62:86:ac:ff:13:1a:90:3a:
91:44:b2:61:56:82:f4:1d:74:c7:f0:4f:e0:26:2a:07:3f:b2:
b6:3e:07:0d:a2:a7:cb:c4:d0:d5:29:78:5f:99:d1:89:50:5e:
e5:15:e6:60:99:84:ae:90:58:77:34:61:21:f9:6b:05:95:b1:
c7:17:16:8c:0b:ef:15:b0:71:77:b1:67:ae:ac:ab:d7:bb:3d:
91:aa:7d:73:dd:4a:be:fb:79:05:bc:e9:05:2f:76:dd:e8:6b:
29:73:92:ad:93:0c:ef:12:37:7f:9a:8a:9b:0b:f8:e7:4c:7b:
3e:85:47:e7:e3:e5:fa:fe:02:5c:84:4d:22:f1:13:53:2f:36:
cb:94:7b:50:9e:47:f7:aa:17:f0:41:8d:f8:86:07:c6:15:99:
4f:6b:86:0a:dc:92:26:5a:f5:9f:38:3e:4e:73:05:02:d6:9d:
e7:45:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:38 2026 by rpki-client