Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: +3lx4VIrqCtYYejresPeqipHJyY48Qt3E4CRP3zrJBs=
Subject key identifier: CB:08:B4:FF:C0:D0:26:2C:DC:0F:27:DC:53:25:E9:4A:64:D5:FA:0D
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019FA8D0959326EC4F7418BBAB91E32D8C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1951
Signing time: Tue 28 Jul 2026 13:01:09 +0000
Manifest this update: Tue 28 Jul 2026 13:01:09 +0000
Manifest next update: Wed 29 Jul 2026 13:01:09 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: e4PHfAulcPOvpNNrCCoWfjVuBVrl+mmboaINGQ7cECI=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:95:93:26:ec:4f:74:18:bb:ab:91:e3:2d:8c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jul 28 13:01:09 2026 GMT
Not After : Jul 29 13:01:09 2026 GMT
Subject: CN=cb08b4ffc0d0262cdc0f27dc5325e94a64d5fa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:5e:54:27:02:41:27:16:da:e0:b0:49:63:
40:82:02:84:24:05:2f:6b:c2:02:3d:67:9c:08:fa:
4b:20:4d:88:75:43:73:de:a3:38:06:99:ff:95:a1:
0a:12:a6:af:15:99:2b:49:ef:e6:46:20:40:d0:39:
29:58:09:fe:61:b0:4f:51:c1:26:7d:58:65:60:09:
90:8d:eb:4e:15:30:c3:f3:0e:a7:05:6d:9b:b3:c8:
d9:26:00:08:ab:b5:5a:7f:f5:c9:d2:fb:16:34:44:
56:3f:38:c5:91:52:d9:6b:1d:1e:4f:c9:a4:86:b8:
63:4e:c2:0d:fd:1c:99:f5:fc:21:4b:b5:e6:27:23:
a0:9a:26:ea:28:32:21:4e:50:1e:da:30:1f:37:4f:
c4:9d:92:40:69:5c:cf:99:3b:06:be:63:9b:bf:6d:
b4:c2:c1:9e:14:95:0d:8f:55:61:5b:6b:a5:4e:cc:
84:a5:97:b9:a9:71:cf:7e:a9:d0:81:6c:ef:b7:35:
5e:cb:53:21:a7:b8:f8:a2:0c:5c:d9:b5:2f:13:ce:
a7:97:e8:c8:d7:8c:f2:20:26:eb:b9:86:6e:f0:b0:
47:d2:a7:bd:48:eb:b3:82:13:76:2b:f1:27:a4:34:
ac:bc:bc:6e:21:38:08:89:1b:b2:55:1e:89:24:ae:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:B4:FF:C0:D0:26:2C:DC:0F:27:DC:53:25:E9:4A:64:D5:FA:0D
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:cc:84:50:1b:0d:5a:7b:55:2b:6a:28:78:37:d7:9c:e7:
11:b4:67:10:24:72:dd:2f:25:3b:1c:ed:af:0a:b5:55:b5:b6:
7b:12:fd:c4:8a:d6:3a:f3:2f:47:94:71:af:81:e1:48:fc:68:
11:7b:67:ef:2b:4e:07:97:ee:8f:52:05:e4:9a:d5:83:af:17:
7d:53:d0:67:d3:df:0e:28:d6:62:86:0f:82:4b:11:3a:61:06:
c8:f2:ab:12:f3:b9:19:5e:78:c0:c9:bc:29:60:65:69:2d:f8:
27:96:cd:45:f7:d2:9e:90:ea:03:4d:38:a9:9f:f3:0e:38:82:
8c:5b:0e:f7:dc:57:62:23:bb:81:1b:74:59:41:bb:6d:5c:9b:
e2:a2:70:3f:6f:9f:f9:a4:80:07:b4:42:43:0f:aa:03:a9:f4:
24:b8:20:55:d4:5a:71:1d:80:70:54:0c:80:9b:db:59:14:3f:
27:9c:e9:d2:83:c1:d2:ff:67:bd:b5:87:55:2d:77:3a:4c:5a:
26:01:f3:9a:42:47:3e:6d:08:96:80:7d:d3:01:6e:96:64:ca:
ca:10:87:09:d0:78:91:a2:77:d2:73:67:b4:86:4f:1f:73:df:
51:65:8f:bc:be:b5:53:e8:1a:08:5a:06:41:3f:7c:41:78:72:
62:b8:82:ae
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+o0JWTJuxPdBi7q5HjLYxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjQ5OTE1YTQ3OGVhODZkZmYwMDAyYzViZWQ5ODI5ODI1
Zjk4MTMwHhcNMjYwNzI4MTMwMTA5WhcNMjYwNzI5MTMwMTA5WjAzMTEwLwYDVQQD
EyhjYjA4YjRmZmMwZDAyNjJjZGMwZjI3ZGM1MzI1ZTk0YTY0ZDVmYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydpeVCcCQScW2uCwSWNAggKEJAUv
a8ICPWecCPpLIE2IdUNz3qM4Bpn/laEKEqavFZkrSe/mRiBA0DkpWAn+YbBPUcEm
fVhlYAmQjetOFTDD8w6nBW2bs8jZJgAIq7Vaf/XJ0vsWNERWPzjFkVLZax0eT8mk
hrhjTsIN/RyZ9fwhS7XmJyOgmibqKDIhTlAe2jAfN0/EnZJAaVzPmTsGvmObv220
wsGeFJUNj1VhW2ulTsyEpZe5qXHPfqnQgWzvtzVey1Mhp7j4ogxc2bUvE86nl+jI
14zyICbruYZu8LBH0qe9SOuzghN2K/EnpDSsvLxuITgIiRuyVR6JJK7UUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMsItP/A0CYs3A8n3FMl6Upk1foNMB8GA1UdIwQY
MBaAFPpkmRWkeOqG3/AALFvtmCmCX5gTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU1pGYVI0Nm9iZjhBQXNXLTJZS1lKZm1CTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2Iz
LTdlYWQ2MjY0ZTY1NS8xLzEtbVNaRmFSNDZvYmY4QUFzVy0yWUtZSmZtQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFiL2JjNGYyMS1hOTc3LTQ3ZTItYmNiMy03ZWFkNjI2NGU2
NTUvMS8xLW1TWkZhUjQ2b2JmOEFBc1ctMllLWUpmbUJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzzM
hFAbDVp7VStqKHg315znEbRnECRy3S8lOxztrwq1VbW2exL9xIrWOvMvR5Rxr4Hh
SPxoEXtn7ytOB5fuj1IF5JrVg68XfVPQZ9PfDijWYoYPgksROmEGyPKrEvO5GV54
wMm8KWBlaS34J5bNRffSnpDqA004qZ/zDjiCjFsO99xXYiO7gRt0WUG7bVyb4qJw
P2+f+aSAB7RCQw+qA6n0JLggVdRacR2AcFQMgJvbWRQ/J5zp0oPB0v9nvbWHVS13
OkxaJgHzmkJHPm0IloB90wFulmTKyhCHCdB4kaJ30nNntIZPH3PfUWWPvL61U+ga
CFoGQT98QXhyYriCrg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:02 2026 by rpki-client