Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: uE0xR3P18uSOW62Vv9jQwGcbN/g1xajZhl4okbW9XIc=
Subject key identifier: CC:F8:42:0C:B9:E3:7E:96:EC:25:91:AB:BF:28:3F:1B:3A:89:BE:DE
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019FAAF576E84DBC7D67553A14660EEEE105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 13D7
Signing time: Tue 28 Jul 2026 23:00:41 +0000
Manifest this update: Tue 28 Jul 2026 23:00:41 +0000
Manifest next update: Wed 29 Jul 2026 23:00:41 +0000
Files and hashes: 1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: Ftk0cUPeB28YmvC3m1KXffEJI2gZOGyTQyr231I4Wtg=)
4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:76:e8:4d:bc:7d:67:55:3a:14:66:0e:ee:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jul 28 23:00:41 2026 GMT
Not After : Jul 29 23:00:41 2026 GMT
Subject: CN=ccf8420cb9e37e96ec2591abbf283f1b3a89bede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:8f:55:64:8a:6a:d8:00:64:9f:ab:d0:9b:
f0:84:63:f9:f7:06:31:4e:99:55:1f:a3:f6:6f:fc:
69:5e:43:c3:2e:e6:6c:e4:97:31:e9:4d:b4:05:4d:
ea:12:6c:05:76:81:97:9f:b6:d7:39:f1:e4:66:2d:
32:b4:b7:7a:0b:11:c0:46:67:1d:45:7f:c9:af:8c:
69:fb:73:ba:21:f6:67:97:03:8d:1f:20:19:a4:f6:
d9:01:d9:39:03:dc:cb:14:54:ce:41:55:05:d2:18:
97:ee:f6:a8:53:80:d4:ca:8c:5f:81:e7:c5:c3:d4:
3f:a2:ce:27:d8:fb:f9:73:04:ac:44:e3:fa:1a:a6:
d8:9c:2f:ae:1a:10:b6:b7:7d:f8:c6:dd:9e:e1:3d:
87:9b:ca:da:48:14:af:a8:e6:4e:64:7a:a8:6e:96:
1f:0d:39:99:20:67:ef:ef:cd:71:3e:75:52:77:c5:
2e:2e:86:d0:bb:a0:05:0f:cf:84:f9:32:77:54:1e:
3c:41:5f:25:12:d9:48:82:c1:9d:e3:e7:de:37:8d:
c8:f3:ed:ca:cd:7e:f5:86:9f:51:02:cf:15:43:79:
d0:0d:d3:b8:8a:54:45:8d:1d:93:fa:f1:c5:e9:1c:
ec:40:93:f0:90:f6:a2:fc:ea:8b:66:56:71:b8:3a:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F8:42:0C:B9:E3:7E:96:EC:25:91:AB:BF:28:3F:1B:3A:89:BE:DE
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:4b:7f:d0:6f:dc:f5:fd:0f:5e:4f:46:12:32:bc:df:f1:
ad:ff:7e:1d:af:b2:7d:a5:cc:b1:f1:9d:e1:02:b7:95:a0:e9:
39:f8:05:9f:c5:70:ca:33:4c:08:67:51:c4:37:d4:c1:a7:a9:
e5:0a:86:f9:c6:6f:0c:14:f0:14:b5:1d:d7:74:9e:dc:e6:8a:
6c:2f:b7:8d:39:7d:65:03:5b:02:f4:33:ac:f6:1d:f3:c8:ce:
4e:7c:a4:85:9b:a5:e1:d4:6c:78:b1:89:d2:b4:7d:72:3a:8f:
8e:0e:04:17:d4:db:de:a3:16:cc:ab:0f:99:1d:38:8d:c8:09:
d6:7c:7d:9c:43:d6:e9:9c:12:75:d8:c0:2b:12:d9:a6:16:e1:
a9:4b:c0:e7:a7:8b:c1:73:35:b2:9c:91:61:af:7a:7e:8f:4c:
57:76:63:71:73:d8:4e:b6:09:80:97:55:8f:37:f0:33:a6:88:
6b:dc:46:52:a5:74:29:77:fd:ac:18:6f:e0:df:79:dd:e1:4b:
d5:b1:87:e2:25:3b:c3:13:e4:5c:59:ac:87:fa:7a:71:11:0a:
7f:dd:e1:0b:6c:23:04:ac:50:38:11:98:7c:74:95:10:72:1a:
c2:4b:64:eb:87:c2:c2:29:8c:52:1b:bb:55:03:ef:58:2c:d1:
fc:f5:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:33 2026 by rpki-client