Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: ve2+4isic8+4vAm+5DESPFsTGnOhRa0+GYIEeYPMnN8=
Subject key identifier: 50:C2:A0:A0:A8:BB:D1:57:2A:04:F3:B9:79:62:26:29:3F:00:F9:65
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019FACACDC84B4996D8604068EA88189046A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 027A
Signing time: Wed 29 Jul 2026 07:00:37 +0000
Manifest this update: Wed 29 Jul 2026 07:00:37 +0000
Manifest next update: Thu 30 Jul 2026 07:00:37 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: wmKYEuP+8OzDJiySGcuQELZil/ziUEs1nEVeQ95wSG0=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:dc:84:b4:99:6d:86:04:06:8e:a8:81:89:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Jul 29 07:00:37 2026 GMT
Not After : Jul 30 07:00:37 2026 GMT
Subject: CN=50c2a0a0a8bbd1572a04f3b9796226293f00f965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:67:74:7f:f7:e8:f6:11:49:e2:22:ef:85:
90:f1:3d:73:1a:c7:ed:99:6d:a5:78:0f:fc:fe:8c:
85:e6:bd:8b:a5:01:cb:ef:31:d6:1e:c3:3e:9f:90:
e2:a7:f8:22:bf:32:26:ef:3a:f7:d6:00:0f:15:ff:
d6:8f:8b:c5:43:32:4d:3c:e8:8f:ff:05:2c:bb:8e:
a8:0e:60:1f:31:a5:73:17:59:5c:e4:d5:a3:40:fb:
c3:ab:1f:24:c1:cd:25:b4:ed:7e:96:6e:20:2b:a4:
98:73:3d:20:0f:19:60:1e:5b:c4:c2:b3:9b:7f:c2:
8b:92:34:02:42:8e:19:0e:e7:9d:8d:16:04:29:e5:
78:29:c5:51:9d:ee:73:e5:e3:65:10:d3:0a:a8:37:
a4:d8:55:c2:e5:d2:89:2d:81:06:fb:1a:88:83:b9:
55:3f:49:90:26:30:b2:86:42:78:e3:16:b1:1f:0d:
e4:73:4b:da:50:be:79:a1:84:6c:bd:f1:2b:cb:82:
fc:11:1d:a2:33:68:04:2a:ca:f2:c2:dc:17:dd:53:
86:90:02:f0:f7:67:95:fd:ef:f0:83:05:f2:06:8f:
86:d4:a0:03:24:f8:3b:d8:26:b8:03:f5:e8:79:91:
aa:64:c7:3a:0a:cb:eb:84:8b:28:ea:f8:9b:2d:c3:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C2:A0:A0:A8:BB:D1:57:2A:04:F3:B9:79:62:26:29:3F:00:F9:65
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fc:75:f1:43:fa:6e:d2:27:66:39:6d:53:73:49:67:bc:12:
68:de:35:1f:dc:1b:63:c2:8d:e0:2e:75:a5:e3:ae:86:8c:85:
60:24:9c:01:55:c8:28:f1:2f:c0:10:b4:ef:bf:f1:b3:97:77:
80:fa:4f:4d:14:fe:91:8e:c2:e9:62:42:72:14:7e:85:d2:a4:
78:8c:99:89:ba:7b:b2:fe:94:66:11:a9:e9:65:93:98:21:4c:
76:09:d4:9b:d8:68:4a:f4:18:a3:8c:b7:ae:2b:f0:1c:d9:b1:
e3:21:4d:b2:c6:df:fd:db:48:65:b6:43:71:ca:a2:9f:fe:84:
db:60:59:36:79:5e:47:0e:88:34:ec:c1:ce:e8:c4:75:91:36:
10:6c:c0:c8:b4:1a:2a:96:fb:ca:b1:8d:4c:ec:4c:02:42:a5:
dc:15:be:ae:f7:e1:34:c2:10:47:2f:34:61:1e:f5:7b:7d:93:
1b:96:85:b6:32:e3:c6:e6:06:ec:29:e8:39:ab:a4:9b:4d:cb:
14:96:a7:5e:a4:eb:0f:2b:dc:0a:3a:c2:72:62:2c:f9:db:4c:
7f:88:39:bb:28:35:d4:d8:53:e7:a9:53:53:c0:fc:b5:f3:5a:
45:4b:86:bc:1e:23:ee:27:0a:59:c2:9e:88:e1:a1:7b:c8:c0:
3a:32:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:56 2026 by rpki-client