Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: QWOovJfBU87eDQcwacycEoToUU8+MBx64hxI3G9DWWs=
Subject key identifier: 32:71:5F:B8:47:06:BE:EC:D0:C0:A0:DE:FF:42:A4:33:48:94:01:FD
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019EC0A4376D2194F627422A56D448679761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 15FC
Signing time: Sat 13 Jun 2026 11:00:47 +0000
Manifest this update: Sat 13 Jun 2026 11:00:47 +0000
Manifest next update: Sun 14 Jun 2026 11:00:47 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: VsgcRJ66NuAdtfwmHEO38xBrhal+Z9mF3V7HymGBslY=)
2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:37:6d:21:94:f6:27:42:2a:56:d4:48:67:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jun 13 11:00:47 2026 GMT
Not After : Jun 14 11:00:47 2026 GMT
Subject: CN=32715fb84706beecd0c0a0deff42a433489401fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:9c:75:b4:6c:b5:36:64:a1:45:e8:08:07:
65:b5:bd:b6:8a:2d:8f:55:db:fc:67:18:fe:6f:24:
7d:a4:db:c0:a9:89:c5:a7:92:2e:23:e4:c6:4e:6e:
28:d2:40:4f:3a:3c:89:c4:e4:6c:93:f5:55:bd:bd:
6d:f5:23:68:a4:20:49:71:c6:a4:95:42:6b:05:23:
9e:df:08:a4:74:67:e4:95:fa:75:d8:9d:ed:71:86:
e9:a9:37:46:61:c9:77:9f:57:74:5e:3f:ca:e7:e0:
3f:ad:a7:b0:47:a8:e1:50:9f:7f:d1:11:c9:75:a9:
eb:c4:e7:cd:8d:95:94:f4:3f:fc:1a:82:7e:2f:73:
fc:d6:a3:09:89:e3:ad:ad:1b:98:bb:9e:71:0e:65:
4c:8d:90:6a:d0:b2:c4:71:d4:a9:8b:24:ab:7e:0a:
c0:3c:79:11:e4:3f:ef:f4:19:b1:69:46:19:18:f4:
21:ff:f6:27:f7:3f:ff:2e:00:02:05:8c:60:4a:db:
16:61:42:4a:de:11:5d:2c:a5:b9:a7:e2:da:69:0d:
eb:8f:8e:80:34:9c:d0:ff:f8:b1:e5:67:97:35:6f:
f1:16:6c:3f:f6:67:4c:ff:2a:46:7e:f0:da:3b:eb:
ec:98:ea:3b:e5:73:4b:90:e6:b7:98:39:62:80:e1:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:5F:B8:47:06:BE:EC:D0:C0:A0:DE:FF:42:A4:33:48:94:01:FD
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:69:6a:b5:ca:98:ac:eb:b7:7c:4a:a5:d5:42:35:7f:cd:
25:58:9b:46:f9:cb:fc:ef:f8:fb:84:dd:80:c1:a8:73:01:c1:
19:b2:39:ff:f9:5b:45:52:3b:db:b6:61:45:ac:4b:a7:1b:5f:
3d:15:7b:3b:5b:65:1a:a4:74:15:f4:f5:7b:8d:95:63:9b:e7:
50:64:3c:74:61:b5:1d:30:74:6c:61:70:4f:ef:f1:ba:a6:65:
fc:ce:4f:0e:34:23:ee:a7:f2:8f:aa:d7:16:b6:7c:cd:e3:90:
0e:f9:a6:0a:59:f5:f3:cd:08:b2:99:ff:2d:6e:6c:7c:ab:71:
36:95:ac:73:84:0a:f3:ed:8c:24:31:2c:26:ba:82:44:85:7b:
af:6b:da:de:81:f2:64:12:2a:a5:5b:1b:b8:11:ce:d8:96:7d:
f5:86:3f:ce:26:b9:ca:bd:06:69:dd:76:8a:3e:27:6a:a6:cb:
c9:67:b6:9d:26:77:4c:d8:3c:5a:f5:c2:8d:2b:56:bc:45:a0:
37:71:47:cc:b6:0e:36:04:60:1d:15:a4:eb:4c:dd:02:83:35:
b3:2b:74:dc:f0:f5:24:cd:05:0c:21:b9:10:b4:c7:ae:97:85:
37:c8:1c:41:19:2e:eb:83:6c:d4:df:e3:f8:47:f9:ac:c5:1d:
8f:d1:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:24 2026 by rpki-client