Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: F5PlaAc02a6uNk7Leu89g+N33lZIAYKKlOPwcnzRLvY=
Subject key identifier: 69:FF:4D:C2:7D:3B:E6:C9:80:51:A4:3E:04:F8:6D:93:82:77:D3:F0
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 019FA907A8C94EEE7919F09FEEE9FAFAE291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0FF9
Signing time: Tue 28 Jul 2026 14:01:19 +0000
Manifest this update: Tue 28 Jul 2026 14:01:19 +0000
Manifest next update: Wed 29 Jul 2026 14:01:19 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: JxFQeS3Mk7J8tthoXYHm86yqO7q2DQ8sdXI3Y+7kKhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a8:c9:4e:ee:79:19:f0:9f:ee:e9:fa:fa:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Jul 28 14:01:19 2026 GMT
Not After : Jul 29 14:01:19 2026 GMT
Subject: CN=69ff4dc27d3be6c98051a43e04f86d938277d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:0a:ff:a0:23:3c:2f:78:d6:a7:65:ae:73:
90:7c:73:41:2a:9b:34:94:89:21:0d:fd:fb:d9:90:
44:db:3a:b7:7b:1a:90:17:fa:d5:64:6f:4b:ad:6a:
6d:6c:33:84:97:4d:e9:e1:7a:bb:5d:c3:b3:d9:89:
b3:63:a3:35:8b:77:f5:55:aa:48:91:56:5e:29:f4:
85:8d:ee:39:b5:d3:d4:ff:83:29:3c:65:75:4d:80:
2e:a7:5b:33:52:18:37:ce:58:c5:c5:e3:98:fc:13:
d5:c6:60:54:c8:0a:42:7c:95:b7:cd:7d:10:47:cd:
c8:24:e7:79:2d:1c:dc:89:70:3e:e4:55:b7:71:fa:
ff:c3:0a:c1:e5:71:05:d4:39:be:6d:f3:32:03:a1:
94:33:8d:5e:64:58:45:35:35:7f:bf:a6:40:2a:32:
8f:52:72:ac:10:6d:2b:aa:09:42:4d:20:09:6e:ef:
ca:06:29:6c:77:a5:dd:c7:a6:64:fb:af:bd:e0:eb:
a6:2b:86:22:b4:02:41:f4:fb:45:8c:3b:7e:f5:eb:
0b:bc:46:e1:9f:c2:f8:89:a7:99:e1:c5:25:e5:ac:
c0:13:e6:52:c3:84:6b:85:1b:26:5e:ee:00:a7:b3:
e7:eb:54:60:c6:08:a8:82:a1:40:e7:9f:fa:15:ca:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:4D:C2:7D:3B:E6:C9:80:51:A4:3E:04:F8:6D:93:82:77:D3:F0
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f8:ef:cf:f4:3c:1a:ac:5f:dc:7b:5a:06:c3:59:e5:c2:1a:
b3:a7:5a:c4:e1:c5:21:49:f1:86:de:41:43:c8:77:16:00:35:
e3:2c:a2:51:e2:91:63:92:ad:57:86:ff:59:27:ad:77:6c:24:
9a:41:63:51:58:ce:0f:68:f8:02:45:74:ca:5f:c0:db:c9:18:
81:49:b9:89:ff:b6:41:94:06:04:14:0c:72:d4:50:49:69:4d:
de:16:c4:1c:61:b9:4e:8f:97:a3:55:28:54:a6:c2:53:65:90:
83:f9:1e:4f:3a:af:34:64:23:1b:b5:6d:0d:45:d0:0f:af:8a:
d7:72:d7:8c:a5:c1:89:83:21:ed:b1:0e:03:a3:b0:0b:13:34:
ba:32:d6:d2:17:be:2a:66:29:ed:20:93:fc:5a:18:48:cb:ef:
4f:74:a2:1c:3d:45:29:50:91:16:a6:da:e7:d7:f8:86:4b:0a:
fa:a6:5d:f7:8c:f1:92:5d:8e:22:47:03:0a:54:c0:d5:60:d2:
00:09:2b:b8:12:b4:bf:50:c5:3d:ae:58:92:80:9c:5d:5e:60:
40:7f:f3:c5:43:cf:84:ab:1d:29:51:d0:26:98:de:33:00:df:
16:4e:85:5b:ef:e7:3c:62:80:46:28:3e:b6:93:60:0a:b5:16:
5c:89:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:42 2026 by rpki-client