Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: EDf5R5ayWztSL1GxnojlpeSYDTorK0PGh/5NA9aJ2Kk=
Subject key identifier: FD:70:9B:9E:6B:A6:37:3F:47:BD:03:5E:85:E1:99:64:D7:6C:CF:C6
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019FA8D0228A4711D06435EBC12C2DB0176C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0C3D
Signing time: Tue 28 Jul 2026 13:00:40 +0000
Manifest this update: Tue 28 Jul 2026 13:00:40 +0000
Manifest next update: Wed 29 Jul 2026 13:00:40 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: YfWD6C4cEV5VIPOJ2a2aqeRLXY0msjzrdhfp86qva48=)
2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:22:8a:47:11:d0:64:35:eb:c1:2c:2d:b0:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Jul 28 13:00:40 2026 GMT
Not After : Jul 29 13:00:40 2026 GMT
Subject: CN=fd709b9e6ba6373f47bd035e85e19964d76ccfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:2b:cc:cf:78:a3:65:64:ad:c1:df:9c:a5:
04:91:53:5e:e6:36:13:ec:fa:bc:35:40:d7:30:37:
50:70:b3:a8:9a:d5:51:af:c2:36:ce:12:d3:f7:49:
7e:32:88:3a:e8:b0:75:62:51:65:70:fb:70:c9:fc:
93:90:2d:34:02:f6:3c:f2:f1:35:e1:51:fb:7f:2e:
29:89:b6:db:19:a7:e1:99:3f:09:01:bf:86:c7:f8:
57:71:03:c4:17:71:0a:57:a8:c3:f8:12:6d:27:59:
89:ae:de:e5:cb:33:55:c9:10:bb:eb:1d:0c:7c:d3:
35:5e:e4:5b:22:a4:5d:95:b3:4e:c0:40:5d:db:46:
8f:67:75:30:40:f3:f6:72:f6:0f:c5:34:a8:3c:73:
c6:db:70:4c:8a:20:ee:b8:ca:a4:52:f0:13:7f:43:
b1:80:61:c6:d2:90:cd:f9:a7:d3:e2:30:31:13:c4:
56:79:a5:77:cc:54:8f:fc:8c:79:15:d3:bf:7a:0a:
85:46:0d:66:03:ee:31:ee:f0:42:7e:61:8a:f7:32:
5e:c3:70:86:ea:82:08:2a:d5:50:38:f0:16:2b:a2:
f1:3b:ed:ea:c3:64:a4:91:7a:54:01:ed:60:50:24:
4e:2d:f4:e7:ff:e2:b5:6f:ed:01:d6:ed:af:78:39:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:9B:9E:6B:A6:37:3F:47:BD:03:5E:85:E1:99:64:D7:6C:CF:C6
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cb:82:d7:2f:86:2f:52:a5:1f:3c:b3:2a:81:12:f6:e8:46:
ab:19:79:ee:a6:a9:3f:05:22:2c:af:6f:4a:09:54:33:aa:cb:
77:7e:d0:60:b8:5f:ed:75:6c:ff:67:0d:a1:4f:77:54:fd:02:
65:72:ed:03:e1:2d:fa:92:67:e6:6e:94:6f:f4:73:23:7e:cd:
e9:47:ee:aa:e5:8d:51:62:b8:30:2d:8a:04:69:2a:fd:fc:ea:
f6:7f:45:66:fb:0d:8a:68:93:d0:29:b3:a7:93:2c:cb:48:93:
1c:8a:b5:ec:03:b4:e1:db:d8:83:b2:6d:0a:52:69:9e:b2:05:
06:fb:53:6a:8b:4c:c1:b0:c7:bf:5c:5a:f1:16:ce:1b:81:b7:
ef:7f:e4:49:d4:00:bb:d7:86:78:0a:20:a1:0d:dd:28:e6:72:
8d:ea:f7:75:d5:55:28:b4:67:13:01:31:ed:46:7d:ea:98:bf:
f5:7f:04:10:50:ef:27:39:cf:97:ed:49:12:1a:cd:90:cf:25:
89:46:20:23:8f:76:7b:1f:c6:c0:b1:36:47:ae:13:be:7a:b9:
92:31:65:d7:7a:1c:3c:43:7c:8c:87:64:44:ca:7b:09:e8:0a:
91:b4:f5:f6:e1:a3:20:b0:9d:f3:51:55:fe:76:02:f6:d6:b5:
c9:02:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:56 2026 by rpki-client