Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: pIDgHQmqOnInDmmCPznc2kvOd/Krs2FJljmeysxmffw=
Subject key identifier: 17:C8:6C:D5:DF:A0:A6:DD:CB:CC:10:0B:80:1E:E3:CF:F5:13:60:A1
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 019FA9AB8AABC98300F41AF418111A74810B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 075A
Signing time: Tue 28 Jul 2026 17:00:19 +0000
Manifest this update: Tue 28 Jul 2026 17:00:19 +0000
Manifest next update: Wed 29 Jul 2026 17:00:19 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: uDZD47QryDxYKRDxOoUxz0uzg5KIdgh7/EMZw3I89bA=)
2: tkycn5xiTigCQfGPa-xW18TGNfk.roa (hash: 4OjRszRSxwJd25PZFySHlvrHFTMBwczdyRtjAmquBAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:8a:ab:c9:83:00:f4:1a:f4:18:11:1a:74:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Jul 28 17:00:19 2026 GMT
Not After : Jul 29 17:00:19 2026 GMT
Subject: CN=17c86cd5dfa0a6ddcbcc100b801ee3cff51360a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:8b:86:9f:cb:40:9b:52:9a:49:5a:69:8f:
08:d3:ea:4d:b0:fc:24:81:b4:3a:88:a2:cd:8a:a4:
4d:1e:e3:24:3d:e0:37:53:72:23:73:3c:24:36:ec:
90:40:e9:3a:1c:e7:13:b4:a7:fe:11:e5:9c:f5:c6:
34:4e:1a:d9:ff:58:03:99:10:a2:bf:51:f8:47:3a:
e5:48:38:d3:92:b7:4b:df:27:08:75:94:d8:80:ba:
47:3b:83:3c:1a:ce:81:86:19:51:0c:c1:ee:4b:18:
a9:1e:fe:90:97:29:97:64:b9:d1:90:b3:38:e5:01:
95:28:98:2b:8b:ee:61:34:a8:6e:e9:0c:c4:3f:a3:
51:c8:49:29:b0:0d:a9:47:ea:c9:5f:8a:de:59:53:
c6:fc:17:9c:2e:23:49:3a:07:36:e5:66:c1:95:4f:
ad:5d:a7:b3:d3:5e:15:85:fd:76:4f:65:b4:96:17:
61:86:94:ad:7e:4e:bd:63:a9:4f:12:79:9f:30:c8:
ff:f4:08:98:79:48:f6:f1:d3:71:bf:67:57:77:9b:
bb:db:2d:4a:ce:22:2e:80:83:c0:da:8b:9f:76:ff:
b8:69:b3:f2:9d:a3:d2:8e:c4:f2:b1:54:1e:ab:38:
28:fd:13:97:3a:3c:ff:62:5f:e7:e6:0e:b4:77:c6:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:6C:D5:DF:A0:A6:DD:CB:CC:10:0B:80:1E:E3:CF:F5:13:60:A1
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9b:ee:f1:3e:7a:9d:2b:bd:a8:e0:3c:9d:0a:55:03:de:9c:
e1:38:99:b1:bf:a6:df:d1:24:4c:e2:8f:95:6c:c2:a4:fc:3d:
87:ce:64:7a:f2:94:53:e0:d5:a4:2c:bd:bf:72:68:ce:31:3f:
3d:a0:d0:30:59:93:a7:70:b4:8c:14:98:03:c2:35:28:a5:66:
0b:c1:3c:45:4a:a1:7b:b6:4e:85:b7:05:da:c4:4c:65:ef:8f:
97:ff:06:7c:5e:29:be:98:a8:e3:4a:30:2d:6b:8c:47:c8:92:
1e:6c:d9:33:85:58:e5:73:9b:8f:1f:99:b0:cc:c8:d5:82:6c:
e3:f6:7c:35:4b:31:e6:b0:f4:ff:00:00:06:da:ec:f0:73:d1:
7f:4e:2d:d2:48:0b:2f:4d:44:bd:f3:a3:c1:d3:38:c8:e5:b6:
8e:f3:ce:2f:e3:43:af:e9:d5:e3:9d:d6:d7:dc:6b:6d:1c:18:
02:05:7b:eb:44:5b:c7:b4:49:7b:c6:28:4d:be:e3:e7:c1:27:
0f:3f:ba:14:11:e8:46:63:b3:55:fc:0a:6e:b8:0f:95:80:9d:
37:35:eb:ea:3f:e6:ec:66:72:c3:6f:30:22:85:29:ca:98:87:
46:cc:90:c4:17:12:26:a2:f2:5d:2f:4a:e9:22:db:2c:29:c8:
5c:44:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:23 2026 by rpki-client