Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: t9GZAHIkHv79koFgVz6caAIm4Ybon1AAaDoWL0x2pyQ=
Subject key identifier: A3:C8:B5:A7:72:DA:28:03:29:4E:BF:00:AA:D3:91:1D:42:1D:02:2A
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019EBFFF67A5C7716668206BFDA8BE52A120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 0211
Signing time: Sat 13 Jun 2026 08:00:46 +0000
Manifest this update: Sat 13 Jun 2026 08:00:46 +0000
Manifest next update: Sun 14 Jun 2026 08:00:46 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: y8VHWD7TayM0lJBXFCRpvFnym7huIuZSzDpNq6KN6Jw=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: ylydL3qXftFW7Uij6tIt41OMzD8.asa (hash: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:67:a5:c7:71:66:68:20:6b:fd:a8:be:52:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Jun 13 08:00:46 2026 GMT
Not After : Jun 14 08:00:46 2026 GMT
Subject: CN=a3c8b5a772da2803294ebf00aad3911d421d022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:fa:20:8b:bd:93:27:01:fb:1b:15:2c:1c:
b6:dc:59:97:2b:9e:8f:15:fc:2b:48:b3:1a:dd:71:
fb:0a:cd:6e:4d:66:60:21:2d:49:ab:2b:b3:8e:40:
b8:bd:38:6a:e9:0c:4b:c2:3f:c2:9a:48:c5:08:bf:
bc:49:91:2f:26:97:64:02:67:b5:01:28:98:e2:69:
c4:23:bd:84:a2:dc:a5:c7:39:87:73:0b:60:b5:9f:
6e:ef:da:cf:19:ab:16:ec:ef:e6:c4:e0:78:58:09:
82:3f:6c:34:d6:9e:71:3d:92:5d:06:a9:cb:e8:5c:
05:9e:c2:fc:04:9c:ae:26:ea:21:5f:71:8a:49:8a:
1f:61:ff:8d:d9:07:6f:05:a8:e7:5f:2a:42:87:ba:
8e:23:fa:d1:83:ef:f2:52:7c:df:7f:a8:75:fc:e7:
1c:70:52:55:72:91:c6:82:38:67:30:06:be:c3:c9:
ef:df:1a:18:48:1b:62:df:61:1d:30:fe:4e:36:06:
c5:a0:3b:78:32:4b:d1:51:b8:0f:38:93:6e:8c:60:
8f:d7:a8:ae:bd:ae:8b:1e:a7:a1:fa:c1:50:61:38:
6b:a9:55:fa:15:f6:e1:c1:11:38:74:ed:88:31:de:
bf:8e:db:53:e2:13:ba:1a:c1:4b:aa:2f:4e:4e:63:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C8:B5:A7:72:DA:28:03:29:4E:BF:00:AA:D3:91:1D:42:1D:02:2A
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b5:4e:a5:85:ed:cc:7b:d7:03:fd:c3:37:42:3f:82:9c:6e:
ff:cd:c1:94:c2:11:6e:c8:9c:65:51:77:c4:88:b5:31:96:18:
94:51:0f:e7:1f:b6:f0:8a:af:43:0e:24:5c:2f:2a:97:2a:ed:
26:0b:2a:c1:c1:fd:04:2d:47:d3:e0:0b:53:18:0e:95:24:42:
0b:9b:96:db:69:1f:29:7c:4d:19:41:d6:cc:31:e9:59:36:70:
f3:8e:d9:37:3b:fb:a4:ce:77:e1:13:e2:7b:6f:aa:23:c4:23:
aa:a5:0f:4b:05:16:ab:de:9c:16:47:18:e8:ef:70:3c:ae:1b:
48:07:a2:ae:6a:10:16:d6:84:71:49:56:54:66:b5:65:f8:76:
f1:cd:ee:d8:1d:75:ed:a7:e4:33:37:37:28:19:bf:b6:09:a4:
f3:c6:13:d3:0c:3b:c3:e0:d6:ff:c4:ce:90:6e:eb:53:af:e7:
91:33:89:bb:bd:f5:1e:46:93:1b:df:c9:f3:c8:d2:a9:bb:37:
9b:c4:33:8c:85:72:97:75:24:f3:53:fb:b4:18:89:04:ab:31:
72:f6:cb:10:2d:f9:6a:97:30:e7:e1:96:2a:0b:7f:77:16:59:
d7:4f:b4:3d:12:a5:2e:20:a3:a7:87:7f:e1:cf:7c:d6:e7:93:
f1:af:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:07 2026 by rpki-client