Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: H2vARiaFbYdlYEBw4l2TKq2+2GnRG55RS1utJSz9SBQ=
Subject key identifier: 11:0B:B9:EF:1A:79:96:AA:D6:E6:30:A8:CB:AB:AA:08:37:EE:FD:A8
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019FAC7618410F7E18C4031917D79AE17A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 081D
Signing time: Wed 29 Jul 2026 06:00:48 +0000
Manifest this update: Wed 29 Jul 2026 06:00:48 +0000
Manifest next update: Thu 30 Jul 2026 06:00:48 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: OZ94RLMJiYJkYizCdVWlkFBH5WKIHYtXC7pl6sfbRRU=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:18:41:0f:7e:18:c4:03:19:17:d7:9a:e1:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jul 29 06:00:48 2026 GMT
Not After : Jul 30 06:00:48 2026 GMT
Subject: CN=110bb9ef1a7996aad6e630a8cbabaa0837eefda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:a8:a8:63:28:89:89:40:4a:3c:53:c3:cd:
7a:91:76:fd:20:42:95:2e:68:54:8a:38:d7:4c:64:
a0:37:62:0b:16:ca:cd:34:f0:33:06:16:37:49:5f:
8e:74:5c:0a:98:a2:63:3a:9c:cc:c6:c1:2d:d0:a7:
6c:61:34:6b:af:f1:50:41:12:d5:f0:02:ea:99:1e:
3b:36:ad:51:7f:0f:3a:66:9d:02:c1:cf:d6:a8:6c:
31:5c:9b:5d:ea:0c:c5:ae:67:ba:44:0f:f5:54:03:
55:e9:df:a6:77:97:ef:8a:ba:0b:0b:c9:df:79:c3:
be:ad:f8:58:ee:3c:ee:cd:ed:8a:65:76:5c:cf:11:
2a:e9:3b:7c:29:3a:77:80:a5:38:a6:36:19:c4:bc:
ba:e2:59:e8:a3:f6:17:49:45:f7:05:a5:c8:97:75:
a4:b8:78:a0:ef:ea:23:22:d6:ea:12:d1:ed:ee:5c:
e5:c0:cc:af:4d:2c:2d:39:c5:a6:c3:98:d2:cf:62:
08:e6:ae:b6:d7:55:b4:86:e3:68:a3:73:3b:e3:22:
0e:7a:9d:15:19:71:9f:a6:e3:8d:04:fc:00:60:6f:
27:00:8b:33:08:58:80:c5:d7:4b:1a:0b:5f:98:34:
66:ea:63:a6:ed:1a:c3:30:da:63:ba:54:d4:7a:1b:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:B9:EF:1A:79:96:AA:D6:E6:30:A8:CB:AB:AA:08:37:EE:FD:A8
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:53:0e:1c:c8:76:6a:4e:51:ad:6b:8f:b6:81:13:db:04:a3:
c2:84:b5:ae:7a:47:ad:d7:c3:6b:93:ef:41:af:37:6a:c6:3e:
8f:d7:76:47:7b:bc:a5:0c:15:a5:8c:9c:f5:cd:98:98:57:00:
31:ba:d2:91:c0:b8:c6:e2:3a:91:4a:d3:3e:24:d8:ff:54:ff:
02:07:fe:79:84:eb:99:be:dd:f3:59:3a:2d:f3:5d:c9:23:92:
27:2c:ff:fe:3a:03:7f:4b:c0:75:a8:ec:77:a9:8d:e6:b3:3e:
82:eb:a4:0a:97:26:d1:34:af:55:c8:cd:4f:13:c7:49:49:b5:
48:56:01:bc:91:d5:33:8b:4e:79:8b:2b:a3:dc:1c:5c:f3:32:
d9:8f:2e:ad:a5:24:9a:5a:8b:36:d8:3a:f7:9d:68:54:e5:5a:
79:f6:4b:e6:dc:bc:ad:c9:08:cc:1a:87:e5:33:34:00:2b:02:
f0:31:42:5d:0c:85:b8:24:13:d9:1d:45:be:60:28:62:ca:fa:
44:e3:b5:8a:f5:df:4e:94:17:72:32:e7:7a:41:e2:0d:ec:4f:
55:2b:46:fe:43:b8:d8:61:9a:7c:9b:b0:e1:9b:61:f3:4e:e6:
a0:c0:e3:47:bf:57:c2:0e:49:87:a2:a8:24:5e:7f:84:92:fb:
3c:07:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:42 2026 by rpki-client