Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: B9B6Ugndg0o/nX7kH0iXFd4Y1rbqSmFeIb7CpJx4sXo=
Subject key identifier: 69:2B:F4:82:1F:5E:6F:2D:34:87:14:3E:CC:C5:3E:A3:AC:66:85:4B
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019FA93DB9A1D324E5F9D302B1953108CE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 1968
Signing time: Tue 28 Jul 2026 15:00:22 +0000
Manifest this update: Tue 28 Jul 2026 15:00:22 +0000
Manifest next update: Wed 29 Jul 2026 15:00:22 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: KAmb9HeB6JTFhMfB2L7twu5xA8gyUQX8/IW2p0JvQ+U=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b9:a1:d3:24:e5:f9:d3:02:b1:95:31:08:ce:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Jul 28 15:00:22 2026 GMT
Not After : Jul 29 15:00:22 2026 GMT
Subject: CN=692bf4821f5e6f2d3487143eccc53ea3ac66854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:64:ff:92:81:99:88:1a:f1:85:a5:7d:6d:
bf:93:38:bc:c2:fe:48:ff:60:f7:2b:35:7c:c2:de:
d4:a0:9d:41:50:2f:ab:db:fc:c9:ea:8c:d1:4b:2b:
9f:8f:bd:7c:a5:2b:75:75:5b:6e:1b:c7:b9:88:a3:
7c:fc:bb:00:a7:9f:ad:83:72:6a:02:d2:e4:36:d5:
41:68:e4:2b:41:49:35:f9:8c:9d:de:dc:bc:51:4b:
f1:df:79:cd:0f:e6:56:94:98:4e:96:4c:f0:f1:af:
ee:64:80:78:d2:bd:7a:85:da:f9:e5:a9:99:89:4f:
3b:5a:13:cf:fb:1e:1e:e1:ac:74:05:bc:61:05:c9:
46:34:b7:18:94:aa:f6:7a:0f:fa:4b:11:10:de:b7:
07:f2:9d:cc:52:34:84:c0:8a:75:65:c7:b1:90:27:
3a:fb:61:b9:71:17:db:3a:c3:6c:9e:46:45:31:ae:
d4:94:77:5c:08:c5:58:f3:6d:c6:70:89:6c:ff:81:
22:e6:0b:af:08:3f:6f:46:e7:8b:df:47:18:2f:24:
3a:ee:7a:9b:50:e9:62:f3:12:2b:f3:50:12:d3:4e:
a4:9f:74:70:44:34:c8:8d:94:83:bc:7d:22:58:a2:
e8:fa:35:91:a9:7d:79:52:09:5e:a9:0f:34:1a:e5:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2B:F4:82:1F:5E:6F:2D:34:87:14:3E:CC:C5:3E:A3:AC:66:85:4B
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:49:69:5e:98:ef:16:23:19:88:c5:7b:01:ac:43:02:77:ff:
95:4d:cf:fd:a7:18:72:b6:d3:44:ad:fe:88:17:0a:3c:7c:51:
d1:bb:46:48:ca:93:6c:01:5d:42:e6:4a:8a:18:f0:63:79:94:
72:d3:49:74:47:8a:8e:da:5a:14:0a:c3:7b:1f:b8:7a:8b:1f:
2e:f8:2e:f3:be:be:fd:64:dc:62:35:bf:2f:d3:2f:a4:c3:8a:
fa:f7:63:f2:a7:58:99:3f:f1:0e:2e:10:be:fa:6a:3f:7e:e0:
6b:29:62:d7:fb:44:5e:a0:83:c1:7b:ea:26:52:f9:16:13:d8:
23:0f:c3:c9:74:4e:43:e8:18:00:4d:93:72:c2:6b:88:f0:65:
82:4c:bf:80:d1:79:de:92:ef:1f:dd:6d:dc:3f:a7:90:1a:fe:
74:8f:35:93:85:0f:ec:32:c0:f6:c5:6e:09:1b:f5:fc:26:67:
00:1f:19:06:c1:7f:2c:41:83:f7:10:02:2d:d5:7a:16:13:92:
cc:6a:90:10:c9:c8:a8:b3:07:7e:57:9d:65:77:d8:0d:cb:c3:
ac:23:db:7f:42:2f:c3:d1:5c:0b:c9:0c:92:04:4d:67:62:1a:
4e:1c:35:4b:d7:33:d7:16:9a:66:08:b4:a9:4a:c7:64:f9:be:
6d:d0:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:33 2026 by rpki-client