Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: pcpvynD6dpZ2gYsaqUxCuDMEV91T2gKLyERQy5azWIs=
Subject key identifier: 70:CF:A7:F0:72:E3:43:7D:8F:48:5D:AD:3F:79:20:A6:CB:F9:2F:39
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019FAA1984533FE4FBBB08295E51D52876FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0F1B
Signing time: Tue 28 Jul 2026 19:00:26 +0000
Manifest this update: Tue 28 Jul 2026 19:00:26 +0000
Manifest next update: Wed 29 Jul 2026 19:00:26 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: fgdSfS40nhPyLI2FMVwZvaDTbn86q+ZyC2Y3JJpLkyE=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:84:53:3f:e4:fb:bb:08:29:5e:51:d5:28:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Jul 28 19:00:26 2026 GMT
Not After : Jul 29 19:00:26 2026 GMT
Subject: CN=70cfa7f072e3437d8f485dad3f7920a6cbf92f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:a8:07:6f:55:25:82:4f:1d:5c:4c:be:1d:
ff:23:4e:ac:83:2b:3a:85:79:66:8c:a0:84:bf:e5:
75:b3:f3:ca:29:4d:d8:1b:bd:c0:00:29:44:2b:66:
37:6e:84:d6:49:47:49:68:a3:bf:cf:d0:cb:f5:7a:
61:ba:99:18:60:14:5b:a9:e0:18:17:43:a1:a7:86:
20:da:ef:0e:e5:16:64:9b:44:89:9e:fe:64:ac:88:
eb:7e:b5:9a:4f:46:0d:c1:14:a9:ef:a5:76:94:30:
c2:45:af:d3:41:a9:4a:b7:ff:bc:e3:f0:49:57:85:
d4:c2:57:a9:4f:7f:9d:1c:c7:87:33:89:79:8e:84:
e0:f1:6a:4f:dd:07:b4:61:ee:39:43:25:e7:3c:e7:
7f:2f:b2:eb:33:ff:e3:9d:1f:8f:aa:69:8e:67:bb:
2a:db:75:04:73:d7:ab:e6:36:9b:44:d5:9d:55:5e:
da:c6:3b:2a:f4:63:6b:29:18:1f:52:64:db:b2:8d:
53:68:b8:4f:d7:5b:c3:83:0f:37:6f:5c:68:12:5c:
dc:26:ff:92:18:0a:df:4d:5a:0a:7a:5a:eb:79:81:
6f:cc:28:04:33:90:38:ce:75:48:cd:f8:23:bc:d8:
ad:28:76:35:34:47:b6:b5:8a:0c:51:87:86:87:6d:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:A7:F0:72:E3:43:7D:8F:48:5D:AD:3F:79:20:A6:CB:F9:2F:39
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:28:4c:1a:b5:a1:b9:c8:41:45:46:3d:19:34:57:3b:eb:a5:
d5:22:c3:0e:a7:31:24:2d:b0:7a:f2:7b:d7:b7:b6:1d:65:fe:
ce:4b:7b:1b:6a:54:2c:d5:e4:c9:b9:bf:23:54:b0:2e:07:21:
c2:13:94:f1:3b:3d:a0:75:eb:3c:e2:2a:46:87:ea:33:8f:98:
ba:55:fe:4d:2e:ca:02:07:8e:4c:ce:6a:e5:56:db:79:42:c9:
86:ba:ed:16:98:39:cd:9d:76:cf:1f:61:45:ac:0d:3e:00:d3:
cb:a8:4c:1a:a4:8f:4e:a8:c2:b9:27:d4:5e:81:d8:f6:e3:76:
3b:05:c7:f4:c8:06:46:e8:d5:c5:e0:a2:5d:b9:48:84:bb:f9:
e9:a0:0f:4d:2f:27:d7:d8:f0:5d:66:17:fe:a8:d8:2b:81:1f:
c1:bf:52:fc:96:b7:64:80:91:12:66:bc:42:d4:db:6d:63:40:
50:4d:37:59:84:e2:44:fb:62:a3:03:a1:96:f5:c0:0a:6c:45:
64:f7:f7:65:f0:28:0b:56:45:b3:40:b0:85:01:e0:e0:05:95:
5a:92:18:73:17:36:6c:9a:12:b0:9f:4e:85:40:f7:ac:ec:42:
a8:c8:61:69:75:0e:28:98:c4:52:e6:05:83:8c:48:7f:b1:1b:
c1:98:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:48 2026 by rpki-client