Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: mH3/xc7sl0wDVxL2Xb7EUlioL25aH+4HmzhG5V+dya8=
Subject key identifier: E4:28:63:7B:1C:2E:45:D2:89:7A:7A:25:53:F5:A5:18:A0:30:C6:66
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 019FA7F425F4E6ABC79A8BDD8CE58B4F5E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0ED7
Signing time: Tue 28 Jul 2026 09:00:22 +0000
Manifest this update: Tue 28 Jul 2026 09:00:22 +0000
Manifest next update: Wed 29 Jul 2026 09:00:22 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: S8fCipCS8QhDCtRs/vd1f14cNcC6u7AjWoIwnwjIl8E=)
2: OESlpPK-jzIeY_kWKji03hACpHA.asa (hash: NcdspYFEkIzBfyRyPM+LLSVIvHJYNJkjtuc1feLbI+0=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:25:f4:e6:ab:c7:9a:8b:dd:8c:e5:8b:4f:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Jul 28 09:00:22 2026 GMT
Not After : Jul 29 09:00:22 2026 GMT
Subject: CN=e428637b1c2e45d2897a7a2553f5a518a030c666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:46:4b:21:f0:84:30:49:3b:9a:cd:d1:ca:
c2:80:99:ab:3a:30:16:95:70:ae:01:ed:e2:65:b0:
e1:14:ad:28:da:8d:7f:cc:68:a8:29:39:7e:08:6f:
5f:73:ae:90:0d:a5:bd:b0:e2:fd:0f:90:d9:95:9c:
62:ec:9d:ab:57:91:57:84:67:09:0e:ab:5b:ee:82:
6d:07:d9:0c:8d:fa:47:72:42:94:ea:98:ac:f7:e9:
2c:f1:69:b3:2e:bd:76:5f:82:92:62:fa:e3:f5:dc:
bf:a3:3e:fd:34:e2:1c:ed:71:ff:3d:d9:8a:74:03:
a6:f5:ea:21:2c:0d:45:07:12:8b:e9:a8:5c:f3:47:
f1:5d:8c:2d:3c:d0:9c:cd:c8:94:3f:23:c5:8a:30:
f5:3e:dc:5f:00:6c:32:8a:92:f1:67:b6:b9:f3:4b:
fe:dc:8d:cf:44:ac:82:8f:45:e5:e0:d1:27:11:c8:
b9:cd:3d:e0:ce:b1:13:d4:67:46:49:ce:48:94:f4:
53:0c:d3:1a:95:7c:c6:40:88:f8:1e:bc:d3:5f:29:
c5:f2:1d:7e:c7:73:98:fc:61:66:fb:91:66:e8:27:
19:8c:ec:c0:0a:2d:c9:56:a9:40:80:27:9f:77:80:
70:c7:8b:8c:41:97:1c:b8:58:de:30:a9:10:31:eb:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:28:63:7B:1C:2E:45:D2:89:7A:7A:25:53:F5:A5:18:A0:30:C6:66
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:21:3c:d6:26:19:57:c2:e9:16:db:08:7e:30:58:bf:94:
a5:2f:0b:af:5e:51:48:f2:1b:f0:18:4f:1a:a7:8b:25:c2:e0:
ca:5a:e0:df:c7:a7:7b:df:0e:c1:fa:3e:45:e9:16:1c:5d:c8:
4d:9a:6f:4b:4f:77:69:3e:eb:22:7e:c0:6b:37:57:a4:5e:77:
0e:6e:a5:90:de:87:94:d7:99:f6:38:02:66:c5:5f:44:3c:4b:
f4:c3:b5:7a:84:13:c8:94:f4:0c:d0:57:dc:ba:05:7f:89:09:
18:81:da:0c:ee:fa:43:54:35:99:fa:d8:30:8a:1a:10:62:7a:
dd:4e:f5:0e:f3:56:94:96:c7:34:6e:0a:0d:46:15:21:0d:72:
0f:be:e6:27:25:9b:f6:7f:ca:d4:1b:a1:06:6e:2e:e3:9e:32:
51:ad:eb:88:c1:88:17:93:b8:78:6f:e1:95:b5:a2:1c:de:ee:
9e:e5:f8:50:e9:9a:c2:fb:38:b9:37:d1:7e:34:01:5e:51:26:
cc:44:8a:85:ee:07:50:6f:ba:b6:c2:af:6b:65:f5:cc:2c:1f:
57:88:47:b6:d2:61:7f:2c:f2:58:46:34:10:d4:8f:77:ca:a3:
f3:df:4c:c2:1a:a2:17:41:28:94:c1:7f:4b:ba:84:bf:bf:61:
78:d2:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:11 2026 by rpki-client