Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: 3xw/7Wylv9LX6i9UaL2X0NrXjipsrguHowKS0C9NngU=
Subject key identifier: D0:06:26:1B:C5:31:41:B6:A3:09:2B:36:5E:EB:27:AB:4C:A9:01:01
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019FAA505F58718CDE893764DD7351801886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 20:00:21 +0000
Manifest this update: Tue 28 Jul 2026 20:00:21 +0000
Manifest next update: Wed 29 Jul 2026 20:00:21 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: +DGCT8fV9jYV7GsmDdRYs6fhNC6sJX+MTRr0HRuG+JM=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:5f:58:71:8c:de:89:37:64:dd:73:51:80:18:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Jul 28 20:00:21 2026 GMT
Not After : Jul 29 20:00:21 2026 GMT
Subject: CN=d006261bc53141b6a3092b365eeb27ab4ca90101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:9d:f7:57:f5:bc:e8:9b:2e:c2:7e:c7:10:
9a:48:22:a6:b1:b2:6f:b3:3c:4a:4a:05:10:d8:d3:
cb:26:d6:b2:66:c5:94:b6:f8:ed:a3:68:c9:59:78:
54:1c:d2:49:e0:d9:12:0d:e5:ca:46:d5:69:b1:51:
2e:7b:65:8a:df:ca:4a:b1:94:d6:35:5b:1c:2e:b7:
e5:1c:41:b3:9b:6e:87:66:b2:ee:14:f2:19:2d:ba:
23:b3:4f:80:12:d6:a4:c9:88:f3:e7:d6:a5:f6:d3:
cf:b1:f7:5e:81:1e:61:53:cc:18:2b:ac:c3:3b:db:
49:6e:8f:63:8d:5b:23:b7:34:89:10:d6:97:a5:0a:
15:4d:d3:34:64:5f:61:0c:e7:a0:2f:54:8e:23:62:
bb:02:22:70:2e:ac:c5:0e:e9:2b:e6:67:74:13:8a:
7b:32:2e:b3:4c:23:de:41:c4:7b:d5:b4:f9:cd:cd:
49:6d:21:be:cf:46:ac:fe:4a:de:eb:c1:15:10:c6:
b6:91:95:87:14:93:24:dc:9d:ac:a3:7e:a9:d2:94:
b0:8e:76:dc:db:8d:23:77:e8:58:11:8a:a9:82:ff:
01:83:f0:8e:d2:da:c7:c6:a2:1f:fa:15:4d:87:dd:
4b:8a:16:c0:5e:28:bc:bc:c5:ef:93:9a:57:25:8d:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:06:26:1B:C5:31:41:B6:A3:09:2B:36:5E:EB:27:AB:4C:A9:01:01
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:87:ae:d7:d0:77:90:33:57:a5:ce:ec:a1:81:56:0a:df:
f0:a3:3a:b8:ec:ee:cb:db:f9:d6:0b:2a:94:a3:27:5c:d6:75:
04:03:0b:79:7f:a4:eb:15:53:df:14:81:48:c2:8e:81:ea:39:
c9:ef:6b:a0:9b:09:41:ea:38:7c:12:f6:41:bb:58:b3:60:2e:
3a:2c:d0:e7:60:ad:87:b4:c0:59:41:a8:6c:21:36:77:08:10:
ad:0a:e8:56:b4:67:da:f4:25:a6:3c:ad:a6:5e:64:d5:d9:8f:
e9:ff:c3:4d:4e:36:3e:7f:b1:be:c5:05:25:c2:68:f1:cd:16:
f2:1d:24:b0:c5:a3:60:25:3c:17:8a:39:55:d6:cc:ed:43:a7:
bb:7b:7c:0b:a2:7e:60:53:57:3c:13:bd:ed:f3:17:86:68:e4:
09:eb:70:d2:e4:b5:07:84:49:5b:2e:b3:fc:00:c3:d6:50:50:
56:46:1d:2e:5a:de:33:83:5a:1f:43:af:85:6b:72:fd:12:57:
f8:8d:56:51:ae:8c:cb:af:1f:b3:ea:49:6a:57:5c:ab:43:2f:
37:a3:f5:91:8b:73:5c:cf:a4:71:6f:75:94:0d:2c:57:de:09:
0d:1c:75:dd:6b:66:1f:c2:07:89:93:be:37:6d:e6:c1:e5:81:
98:7e:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:12 2026 by rpki-client