Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: ako8+N1j2fbvrzv1SXNPW4LxaaBp4ZWqTvGbyZ+Jruk=
Subject key identifier: D2:B1:E2:CC:24:DE:F1:A9:29:89:93:B2:BD:88:CB:20:3C:86:07:CB
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 019EBE10D502303F9DF60EC0859B2D9827C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0DFF
Signing time: Fri 12 Jun 2026 23:00:34 +0000
Manifest this update: Fri 12 Jun 2026 23:00:34 +0000
Manifest next update: Sat 13 Jun 2026 23:00:34 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: vcPIUd5X5llYpONMV8NqHaxnaop3Lt4mmgRFh2dgq9o=)
2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:d5:02:30:3f:9d:f6:0e:c0:85:9b:2d:98:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Jun 12 23:00:34 2026 GMT
Not After : Jun 13 23:00:34 2026 GMT
Subject: CN=d2b1e2cc24def1a9298993b2bd88cb203c8607cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:4e:66:b6:0f:f6:65:cb:1a:80:a2:c2:c1:
e6:d1:99:f6:25:ed:2b:cf:31:fb:00:37:ab:33:0f:
48:e6:57:5c:de:da:17:a1:2e:9d:db:b7:19:05:64:
fa:27:a9:a6:7e:9e:33:16:ed:c3:f3:2d:5d:3f:b2:
de:fa:51:2f:02:39:f8:58:d6:01:eb:c8:13:34:16:
56:04:47:b5:16:5e:9b:ab:0d:f1:22:42:8c:17:9c:
12:92:da:58:57:5d:56:63:7a:73:98:0d:24:87:05:
a2:e7:a1:c7:fe:72:a5:09:b1:f2:28:dd:92:fa:48:
1a:e5:4a:87:ca:71:ac:7b:45:67:89:34:41:33:39:
54:d1:3b:6c:c4:19:90:19:3c:77:42:3b:f1:2e:19:
33:d4:25:73:e9:1f:62:a2:ce:67:52:a6:92:62:98:
0d:c8:eb:b6:ee:07:4b:47:04:d3:5d:d0:40:50:16:
f9:0f:c7:8f:be:b5:73:38:16:8d:09:67:9d:b7:37:
ec:85:b3:44:64:f0:ad:bb:a6:39:2a:53:42:aa:6d:
99:aa:03:c0:48:9d:28:65:7e:87:23:f9:4f:8e:a5:
2c:a5:e8:19:56:90:d3:bd:de:96:8d:2d:91:32:55:
70:92:ef:5b:b1:cf:73:d5:a8:a5:8d:6a:84:fb:98:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:E2:CC:24:DE:F1:A9:29:89:93:B2:BD:88:CB:20:3C:86:07:CB
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:23:a4:e2:ae:bd:95:6f:d2:1e:b0:01:bc:85:35:a9:2b:5e:
28:4b:c9:8c:57:fd:81:9d:f1:29:5f:83:90:72:91:63:7d:7b:
1f:27:ed:d6:a1:9f:bc:68:eb:e1:69:b6:c0:8a:bf:5c:d4:28:
9b:8b:b6:d7:fb:05:5a:6c:ca:ce:47:a9:3e:a3:e4:73:5c:34:
35:7c:9a:59:f4:24:48:da:5c:1d:be:ae:0d:61:ad:16:5f:7f:
70:e1:ba:b0:73:0a:3f:1c:97:a5:5b:50:17:06:d1:57:e0:da:
80:aa:9e:7e:c3:ca:59:6c:cf:bc:7b:5f:26:17:5b:15:b8:d1:
d6:b2:10:af:ed:16:b5:11:73:e4:dc:0a:be:75:c9:29:7d:d1:
42:00:98:70:62:2a:a6:22:ea:9f:e9:7f:55:23:d5:fc:c7:a7:
b4:d7:99:72:bf:2c:97:0c:84:ab:fd:e5:13:09:95:53:fc:7d:
99:e7:fd:18:26:45:b7:7f:92:1e:4e:44:41:30:a9:8c:aa:f1:
44:0c:41:3e:b4:02:70:11:95:56:3a:e9:13:cd:9e:f6:e1:53:
cd:0a:88:7f:b4:92:a1:be:1a:d9:40:86:e2:25:7b:3b:e2:b0:
5e:0b:01:83:ca:9d:f8:6b:06:ff:45:8b:73:6c:8d:57:9c:d1:
72:78:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:21 2026 by rpki-client