Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: YVntp87WBf4U52RFOfv421jAr6ysHgCXoRchKFfyL1M=
Subject key identifier: B1:83:8E:9C:ED:12:41:7B:7B:5A:AD:70:22:CE:6E:2C:95:1D:86:7D
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 019FAC770ED8814DB7BE2B64CB22F85AB6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:50 +0000
Manifest this update: Wed 29 Jul 2026 06:01:50 +0000
Manifest next update: Thu 30 Jul 2026 06:01:50 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: Z8eOgCy/nY7zSylsgZU1SgGD7+iWDnrXIab+PTZvl2s=)
2: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (hash: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=)
3: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (hash: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:0e:d8:81:4d:b7:be:2b:64:cb:22:f8:5a:b6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Jul 29 06:01:50 2026 GMT
Not After : Jul 30 06:01:50 2026 GMT
Subject: CN=b1838e9ced12417b7b5aad7022ce6e2c951d867d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:f1:fc:bf:17:32:be:0f:22:e9:3a:f8:37:
e4:24:f5:4e:70:f8:47:59:54:9a:22:5c:cd:cb:ba:
40:35:e5:2f:ac:61:18:0f:66:8e:73:5a:4e:b8:e3:
26:4a:0c:7a:ae:cd:30:de:49:5d:b5:52:3d:f8:2c:
21:fc:b0:6b:78:cb:42:e2:e3:82:fd:08:0e:3e:f4:
d1:97:95:98:85:3f:8e:e2:c0:ab:d7:90:22:53:d3:
f1:fb:c4:f4:14:1c:a3:0a:a2:b6:16:3c:ec:77:cf:
84:db:f0:91:9f:74:23:dc:ad:9b:cb:28:8b:39:f3:
1f:c8:1f:c7:89:d9:22:dd:00:43:ee:74:a9:a7:e1:
78:fe:77:40:5a:0f:13:1f:bd:a9:ae:2f:2a:19:f3:
9a:8c:1a:79:46:7e:47:e1:b2:45:f6:e1:f9:01:85:
ab:8d:77:8a:94:3b:8c:86:8e:99:0d:93:70:19:7c:
d6:cd:50:8f:bf:a3:d7:5b:66:f6:21:89:4f:ba:ea:
1c:59:5a:aa:1a:91:34:29:48:ab:bd:db:4e:36:13:
91:b7:4e:c8:42:17:97:f2:7e:be:2d:12:67:91:b0:
fc:da:97:24:eb:be:31:61:f5:e6:6f:ba:bc:fe:84:
e8:8a:a8:ec:df:1d:ac:e2:4c:6c:0f:0a:8a:7f:0e:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:8E:9C:ED:12:41:7B:7B:5A:AD:70:22:CE:6E:2C:95:1D:86:7D
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4f:33:87:83:0c:f4:93:91:22:8d:77:1d:16:f1:7a:95:9a:
26:74:3f:32:a8:a6:75:d9:f0:5c:56:12:21:c2:f5:b2:30:44:
51:a4:cd:f6:ee:77:2e:de:63:18:87:6d:ff:85:d7:12:f2:f7:
44:a6:0b:27:a3:79:95:e4:c3:e2:28:87:1c:2f:df:03:a3:4f:
f3:8e:3d:c6:15:a2:79:14:2d:63:1d:fe:ba:ee:b4:1c:cc:70:
e0:3e:4a:e4:19:72:13:a9:49:50:8d:b9:94:62:2b:b7:c2:ef:
8b:65:74:0a:3e:05:59:64:83:25:19:f7:6b:d3:c5:8d:51:ca:
64:4c:a0:62:e2:aa:05:99:f4:aa:76:91:41:fe:bc:48:9d:8a:
45:0d:7d:17:74:5d:04:f0:60:7a:8a:41:63:ad:7f:c6:8d:30:
a1:dc:f5:78:2c:dc:9a:35:3d:f1:19:8e:c9:a9:74:a4:e5:20:
44:eb:20:38:a3:20:e8:01:63:3e:95:fc:f1:2e:c3:50:e6:8f:
ad:6b:89:67:c8:38:4a:bd:84:c3:e7:2a:a2:5c:4d:48:45:cd:
32:7d:a0:cd:1f:60:df:fb:ca:e3:fc:f2:65:b9:b5:76:e4:11:
cc:2c:9c:63:15:e3:4f:7a:a9:d3:28:4e:38:c3:78:96:27:bf:
c6:73:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:51:54 2026 by rpki-client