Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: MLkVburaLitlVruZd/HiDjZmlaVq2KfGS4xKOtlQdWU=
Subject key identifier: 98:7F:D3:B3:49:4C:64:AB:E4:CE:CF:1A:47:63:D1:61:FE:E3:CF:CE
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019FABD18D422D0E2197D8F5FDAD0A7EB604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:01:04 +0000
Manifest this update: Wed 29 Jul 2026 03:01:04 +0000
Manifest next update: Thu 30 Jul 2026 03:01:04 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: UJMG6tlnYAsU0Tnox/t6+lpzNtdmxMCQT7vJtvNeOEs=)
2: Rho95ZWPheaVQQ9rPl1_APX-IdU.roa (hash: C+usd2BKZ4KTjGvMtB8Sy6rObSrr4wOsZ9I+pM/IkIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:8d:42:2d:0e:21:97:d8:f5:fd:ad:0a:7e:b6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Jul 29 03:01:04 2026 GMT
Not After : Jul 30 03:01:04 2026 GMT
Subject: CN=987fd3b3494c64abe4cecf1a4763d161fee3cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:37:91:05:15:9b:fd:a2:e5:61:02:a8:9c:
50:c8:ee:99:34:13:43:41:20:5f:d0:4d:7a:78:25:
7e:d3:8f:66:fe:8a:d7:63:3e:1c:04:fa:16:e2:be:
fa:f7:f8:f9:84:2b:85:df:f8:51:46:fc:06:fa:e4:
2d:b2:62:d8:60:f3:5a:fc:93:63:12:29:6b:71:74:
12:be:81:0b:0e:98:f7:6d:f5:21:a6:2b:68:56:65:
33:bf:6d:10:89:cc:d9:4c:eb:2d:90:7a:7c:32:50:
20:dc:f5:83:28:18:bf:c6:11:62:55:ba:41:1d:c0:
25:2b:14:73:68:77:b4:71:ba:86:57:14:7b:81:38:
b4:08:49:55:ad:2e:c1:fa:b7:a3:27:eb:ab:d4:c3:
88:a9:d1:82:43:f7:f7:1e:94:f0:31:df:1f:52:bb:
26:66:5c:2b:89:fc:12:22:2d:4d:38:a7:2d:1b:8a:
b5:22:68:d1:e2:24:8f:d8:c3:0b:e9:bd:43:ba:b9:
a6:be:d9:89:9e:3b:bc:c6:44:56:9e:96:ee:a2:64:
a0:ff:28:dd:17:19:07:4c:03:a3:4a:89:3e:a5:26:
54:71:d5:03:f5:69:ed:d1:7b:ed:54:8c:07:fb:a4:
ec:d7:69:8c:51:72:a4:74:96:49:a8:32:b0:fc:ca:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:D3:B3:49:4C:64:AB:E4:CE:CF:1A:47:63:D1:61:FE:E3:CF:CE
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:26:5d:52:1b:16:02:06:0b:ef:81:4a:bc:3c:28:96:82:9b:
c8:57:b8:c4:7c:af:fc:10:69:ca:4b:ed:84:ce:93:49:c2:80:
81:18:a9:d2:75:8c:4c:91:13:5f:9b:4a:2a:71:30:2b:f1:9d:
b3:89:2c:94:4c:76:cf:48:07:4c:e5:28:89:eb:82:ae:ca:25:
75:7e:7a:92:2d:7b:b6:db:a8:60:ab:eb:46:64:b8:c2:11:b4:
4d:e4:2f:3c:05:6f:d9:ff:4e:b7:e7:8b:8e:80:9e:51:7c:6d:
20:c1:74:79:04:2e:83:d5:ca:dc:d0:b3:9f:ee:69:a1:a1:fd:
88:d7:42:96:96:92:1d:35:f0:3a:0f:0c:aa:0c:49:7a:38:ba:
bb:e3:14:a1:95:42:1e:d5:8e:e6:13:5e:7b:4d:32:e8:8b:db:
2c:d9:f0:5d:05:4b:0a:cc:da:04:67:9d:75:c0:5a:aa:0b:9f:
16:d3:d5:e9:48:2b:eb:4a:de:bb:bd:27:7b:1c:c2:06:87:3f:
c8:23:a0:27:7c:c7:ba:9e:b0:cb:aa:fc:61:10:aa:15:10:f0:
ed:42:4b:01:39:98:a3:c0:b3:51:e5:a7:2b:50:4f:d6:25:6d:
f3:83:0c:2b:c0:e8:6c:e1:c2:32:b6:d7:5f:81:8b:54:c2:48:
1d:76:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:31 2026 by rpki-client