Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: zWr3po2cGyIMFBsj8ft6NGRU7XgTIiYkjaIMVQ2yJOE=
Subject key identifier: 39:10:98:CE:7C:89:A7:DD:F2:37:E7:8A:C8:DA:CA:BB:E0:58:29:CE
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019FA9754DAFA9D0895C0A12F9967D447675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 16B7
Signing time: Tue 28 Jul 2026 16:01:04 +0000
Manifest this update: Tue 28 Jul 2026 16:01:04 +0000
Manifest next update: Wed 29 Jul 2026 16:01:04 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: DVYQUKdOMYev5lERprUSnsE4rZDTHzSNh/1ZbKSHGw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:4d:af:a9:d0:89:5c:0a:12:f9:96:7d:44:76:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Jul 28 16:01:04 2026 GMT
Not After : Jul 29 16:01:04 2026 GMT
Subject: CN=391098ce7c89a7ddf237e78ac8dacabbe05829ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:53:a5:99:56:1e:75:72:87:97:18:24:b6:
5d:13:1b:3c:a1:b2:a0:fc:3c:70:b8:40:b7:1e:d8:
f8:c1:5b:91:ed:32:a1:62:6b:89:6a:05:94:50:06:
85:23:d2:d9:ad:84:07:d0:be:1f:c4:fb:dc:f6:49:
44:da:6b:97:9d:5d:9f:28:08:b4:91:c5:7d:75:01:
12:50:b3:01:ae:82:ca:4b:68:a9:98:2c:09:ff:d7:
17:81:ef:12:16:b6:3a:43:b8:06:09:cd:a2:7b:27:
22:4e:11:92:33:4c:bf:14:37:3f:4d:8e:bc:0e:43:
8d:9c:a4:2a:61:99:84:e6:80:67:61:07:23:23:d4:
63:68:b3:a9:28:1f:50:db:dd:07:29:ae:ea:79:c6:
61:13:53:7f:82:ef:81:1b:4e:37:fd:e7:0a:10:64:
dd:de:2e:ce:9a:73:a8:b5:83:4f:22:19:a7:ae:60:
6d:73:c4:b7:eb:60:45:aa:8a:93:d0:28:04:2c:0a:
61:a6:e7:f7:9e:c7:c8:3a:2a:ea:61:43:b9:39:18:
0b:15:31:b9:89:a0:c9:e3:57:cd:4d:61:b6:ba:e6:
6e:56:89:0c:d8:ba:9a:aa:75:5a:09:af:12:6f:14:
3e:79:84:14:70:6a:c7:a2:d0:56:98:d7:e2:b9:63:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:98:CE:7C:89:A7:DD:F2:37:E7:8A:C8:DA:CA:BB:E0:58:29:CE
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:48:62:39:65:7b:41:0d:fe:fd:6a:d5:41:58:d6:5a:47:63:
34:7c:0d:43:14:ba:0d:96:58:9c:69:1b:b4:82:c7:1b:b5:7d:
82:92:02:28:05:33:43:81:f1:5e:b0:3d:92:15:3b:c5:99:a8:
81:4c:9a:81:96:20:e5:8e:a8:ab:de:5b:b4:57:14:95:41:7b:
1b:67:d6:78:78:9b:05:92:2d:ef:06:55:41:67:31:c4:6d:97:
13:c8:ba:2c:f6:f6:ce:fa:95:5d:f6:7a:7a:1f:d0:e8:ca:cf:
50:5a:20:8f:4f:72:82:e2:73:d6:2c:33:6a:9d:ba:9f:3b:9e:
81:92:c3:66:41:38:3e:ee:fa:9e:34:a7:bd:d1:40:fc:01:65:
14:1e:7e:8a:0d:1a:13:07:be:32:b7:7f:b1:92:c7:e3:d1:fe:
ee:56:30:ae:a8:f6:d6:6f:2e:b9:61:f8:82:5c:12:de:f3:d1:
fd:49:f8:7d:51:a5:55:6e:2f:f7:d2:cf:03:25:18:98:c8:4b:
44:55:a6:ec:09:88:4d:4c:47:06:ae:8b:fe:35:dd:43:53:23:
1b:0a:8f:d3:71:df:5c:e9:7a:22:8f:3d:7b:02:e6:78:e2:cb:
70:d5:7e:01:37:cd:5d:db:0f:89:e6:75:95:38:a0:ec:4a:ed:
37:7e:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:47 2026 by rpki-client