Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: KdCPZ63gS3mXNGjhbkMeUhOrEvZxDMQ8HMKPca7J3po=
Subject key identifier: 1B:9A:23:6D:33:25:D0:02:84:B0:74:CB:B4:42:38:0A:14:2D:16:17
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019FA975440E502A2120A9698EA13FEB0817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 05D3
Signing time: Tue 28 Jul 2026 16:01:02 +0000
Manifest this update: Tue 28 Jul 2026 16:01:02 +0000
Manifest next update: Wed 29 Jul 2026 16:01:02 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: oi6cxdLYXLWNae3IfRCoLtbAK1Iqnmc1yI+4Y3Hh1Bo=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:44:0e:50:2a:21:20:a9:69:8e:a1:3f:eb:08:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Jul 28 16:01:02 2026 GMT
Not After : Jul 29 16:01:02 2026 GMT
Subject: CN=1b9a236d3325d00284b074cbb442380a142d1617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:40:d6:fd:70:7a:53:aa:81:d6:8e:ed:0d:
2f:6d:d0:e0:05:7b:ee:c4:3a:65:cb:bb:3f:40:3d:
9f:27:ad:11:08:bf:5b:06:b5:92:ee:f0:3f:bf:46:
7c:8b:f0:6a:4a:59:4d:df:2d:49:f3:bd:b3:ea:76:
9d:67:7d:76:3c:07:b0:94:ff:59:2d:75:f3:5a:37:
ab:ff:8a:bc:aa:e3:97:53:a8:68:56:f3:7a:7b:46:
85:7b:46:37:9b:f5:7b:9c:05:31:e1:fd:10:4b:c2:
4f:73:ca:27:a9:2e:6d:a5:15:f3:8d:c4:75:df:21:
20:f2:66:40:39:ee:69:bb:26:ac:bc:81:b6:9a:03:
1a:47:4d:67:42:22:f5:fd:91:5b:39:c6:3e:12:d7:
2b:0d:d6:76:1a:ca:eb:3c:cb:98:14:f2:f0:a4:76:
4f:6a:87:70:fb:87:52:3d:40:d6:7b:4d:24:1c:b8:
75:97:c9:3c:43:78:cb:a2:f4:32:fa:85:1c:fa:5f:
4b:d1:9e:a9:41:08:35:bb:5d:49:d8:f2:27:39:b5:
f0:d4:fa:62:fe:85:da:32:0e:0d:73:f5:57:a6:8d:
f1:2e:74:e6:a0:56:18:3a:b0:88:1b:ce:c5:79:25:
27:81:06:89:76:01:78:87:66:20:73:f0:42:ba:00:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:23:6D:33:25:D0:02:84:B0:74:CB:B4:42:38:0A:14:2D:16:17
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:2c:50:87:3a:35:24:4f:aa:ed:52:a8:fe:c1:75:bd:26:
31:7c:e1:5f:63:f4:99:b3:46:3e:34:20:e3:f3:05:09:92:58:
d1:4c:96:61:91:ce:68:c4:f9:f9:d4:4b:07:6a:f1:9b:1e:84:
2a:80:85:7a:e3:6c:13:3a:5c:9b:4d:e1:d9:fc:ee:58:61:8d:
10:d1:dc:c8:b1:cf:7e:b9:91:b9:78:9a:94:3b:94:3c:6a:76:
3e:b3:1c:f1:6b:a6:28:e2:ea:69:fd:a1:5a:37:6c:8f:ae:14:
d2:62:f0:5a:47:d6:1a:48:d4:d4:13:a2:7f:35:d6:d6:5c:3a:
1b:1c:4f:6e:36:d1:8c:d4:b1:1c:e9:58:3c:9e:fd:ca:bf:4b:
a0:9d:f9:33:59:df:c9:e4:aa:ef:2c:73:38:b0:52:73:6c:1d:
08:ea:47:fb:65:79:e5:2e:90:45:9f:7f:bd:3e:32:cf:80:89:
64:6d:73:16:b9:fe:2a:92:c9:eb:ca:03:d0:36:dd:ee:fb:3c:
62:98:01:3d:0a:b1:5c:62:4c:a4:d1:46:7e:71:9d:1b:9e:79:
9e:91:e0:f8:ad:6c:f3:03:f5:62:ee:44:6e:b0:c5:34:0c:96:
f3:f8:7e:59:7c:64:0d:41:b4:d4:9c:ec:4e:59:54:b7:4e:6a:
66:99:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:20 2026 by rpki-client