Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: r9gqicEsP21Zk7gi0dfzOgfPNpd6mom82Je2dIktJoc=
Subject key identifier: 10:4F:AE:11:38:AB:E0:0D:79:DE:BD:CE:6E:9B:3A:9D:98:FB:CE:A5
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019FA9075A581F263B6BD814F230D771F364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0DFE
Signing time: Tue 28 Jul 2026 14:00:59 +0000
Manifest this update: Tue 28 Jul 2026 14:00:59 +0000
Manifest next update: Wed 29 Jul 2026 14:00:59 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: y0p72HV5YEN6TySGvjwy4/JQc/QQG2rjyrd0/mqghhM=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:5a:58:1f:26:3b:6b:d8:14:f2:30:d7:71:f3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jul 28 14:00:59 2026 GMT
Not After : Jul 29 14:00:59 2026 GMT
Subject: CN=104fae1138abe00d79debdce6e9b3a9d98fbcea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:0c:5a:4c:20:73:98:b4:f2:63:6d:a3:51:
88:b0:dc:3e:de:27:83:c5:8b:c5:6c:cd:b2:88:6c:
54:fd:72:0e:7c:ab:9d:34:8b:f4:d7:d0:b2:37:9b:
90:15:fa:43:95:3b:ef:9b:58:3d:65:00:2c:09:44:
26:72:83:a9:f6:47:4d:27:ee:fa:30:6e:53:da:95:
6f:e0:9e:cd:77:3c:43:3a:16:dc:e4:a2:7a:f3:b6:
c0:7d:1b:de:7f:82:91:ef:2e:d9:80:52:7a:49:85:
41:c9:10:1f:d2:d3:d0:08:cb:91:7e:b5:c7:88:3f:
61:b4:1f:69:4a:5f:ea:13:c7:b1:aa:ab:bf:cd:2e:
bc:91:bc:0e:65:8e:f7:a8:85:9e:d8:1c:d9:c1:d1:
25:fc:a0:3c:59:2a:a8:f5:1d:c6:5a:b5:d5:20:44:
b1:5f:5d:df:4c:a8:f4:f5:63:31:80:c4:23:c5:f7:
50:ce:58:c6:6a:8d:02:3e:0f:60:a3:81:6f:7c:81:
f4:27:c2:ce:0b:4f:d7:26:c3:30:d0:fd:8f:e1:71:
0e:c6:b4:32:d4:68:7d:e4:fe:08:27:0b:b6:09:ea:
24:f4:95:b2:da:2e:26:a7:5d:45:43:e3:71:77:ef:
cb:fb:1f:25:60:33:1e:97:28:32:06:91:d1:6f:9e:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:AE:11:38:AB:E0:0D:79:DE:BD:CE:6E:9B:3A:9D:98:FB:CE:A5
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:ac:99:fc:ba:e0:12:e3:2e:a6:72:0a:7a:0d:45:30:17:
dd:3e:96:c2:5d:f0:2e:ab:ff:b0:27:82:cb:ea:4c:d1:d4:47:
2c:1e:fa:4e:e4:6c:32:cd:74:24:15:85:5b:e9:1d:a1:4b:a6:
fa:7e:5c:79:e6:ee:1c:4c:ad:66:87:0f:9c:b7:bc:41:cd:33:
c0:72:90:f3:4c:26:b3:1e:d6:77:9d:f1:3b:be:9a:d5:e4:ab:
80:dd:95:54:a6:18:7f:98:64:4d:ca:e9:59:b3:49:89:4a:26:
35:fd:2a:cf:84:aa:49:87:ae:e8:b8:df:db:d6:9b:40:3d:44:
16:ff:37:c0:32:3a:cd:a1:e5:13:a2:e6:c1:d5:3a:89:e1:f3:
01:49:03:bf:9a:f1:0f:1f:22:d3:54:52:3b:e4:0a:e1:67:5f:
3d:b0:99:c5:57:11:3a:32:08:83:87:8b:e9:a0:4a:27:80:2e:
8c:9c:ec:c5:d6:c5:b5:60:e8:96:22:18:54:73:08:af:91:f1:
4b:5c:8b:23:42:c4:93:1a:50:79:c2:ce:25:3b:e6:ce:ab:23:
57:58:ca:31:1d:8b:71:0c:d7:3f:dd:81:a4:fb:d3:5f:4d:9d:
20:47:e0:2b:3f:f2:ef:b9:7d:2e:f8:72:41:21:4e:04:b9:c1:
72:10:c1:da
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+pB1pYHyY7a9gU8jDXcfNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj
MDM0NzAwHhcNMjYwNzI4MTQwMDU5WhcNMjYwNzI5MTQwMDU5WjAzMTEwLwYDVQQD
EygxMDRmYWUxMTM4YWJlMDBkNzlkZWJkY2U2ZTliM2E5ZDk4ZmJjZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtkMWkwgc5i08mNto1GIsNw+3ieD
xYvFbM2yiGxU/XIOfKudNIv019CyN5uQFfpDlTvvm1g9ZQAsCUQmcoOp9kdNJ+76
MG5T2pVv4J7NdzxDOhbc5KJ687bAfRvef4KR7y7ZgFJ6SYVByRAf0tPQCMuRfrXH
iD9htB9pSl/qE8exqqu/zS68kbwOZY73qIWe2BzZwdEl/KA8WSqo9R3GWrXVIESx
X13fTKj09WMxgMQjxfdQzljGao0CPg9go4FvfIH0J8LOC0/XJsMw0P2P4XEOxrQy
1Gh95P4IJwu2Ceok9JWy2i4mp11FQ+Nxd+/L+x8lYDMelygyBpHRb54J4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBBPrhE4q+ANed69zm6bOp2Y+86lMB8GA1UdIwQY
MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0
LWI4MThmYWVjYjcxNy8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA3LzZhM2YzNS0zNWI4LTQ5ZTAtOWY0NC1iODE4ZmFlY2I3
MTcvMS8xLWs1QVUxbWlFeGNJX0FKRGpVY2xhT0xBTkhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmms
mfy64BLjLqZyCnoNRTAX3T6Wwl3wLqv/sCeCy+pM0dRHLB76TuRsMs10JBWFW+kd
oUum+n5ceebuHEytZocPnLe8Qc0zwHKQ80wmsx7Wd53xO76a1eSrgN2VVKYYf5hk
TcrpWbNJiUomNf0qz4SqSYeu6Ljf29abQD1EFv83wDI6zaHlE6LmwdU6ieHzAUkD
v5rxDx8i01RSO+QK4WdfPbCZxVcROjIIg4eL6aBKJ4AujJzsxdbFtWDoliIYVHMI
r5HxS1yLI0LEkxpQecLOJTvmzqsjV1jKMR2LcQzXP92BpPvTX02dIEfgKz/y77l9
LvhyQSFOBLnBchDB2g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:52 2026 by rpki-client