Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: DNPJNJJSoywg0DWd5mumNCkl8iqSf6VkMBa0F+HoBrU=
Subject key identifier: 9C:E7:E9:17:32:45:8B:E6:0F:1C:1F:73:95:03:77:3A:5F:D9:D8:37
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019FAA8814DAB64211496E0564551B8E2095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 1A0F
Signing time: Tue 28 Jul 2026 21:01:12 +0000
Manifest this update: Tue 28 Jul 2026 21:01:12 +0000
Manifest next update: Wed 29 Jul 2026 21:01:12 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: OLZhbif5D/RYreKOSVFVO7DVGYcPlanpfFhiKwJs3Ts=)
2: 5-XXkJnoSv_A8Qd17OtJN5i2rPk.roa (hash: rBTciEGp1PgrUjVxBEytWIpO/WAFqjVb6jKVmXXYoDU=)
3: 9DQTs2wKqScndspLuFL690S9C10.roa (hash: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=)
4: pWRALXZDcGIRN6-GnVjoFkZeL3A.roa (hash: UHgKeTRC2dK6fhSvGnNYC1kohBjWKd03S8mx0XnPWh8=)
5: q-8noEh6b2f7clZvsd5WphsHq0A.roa (hash: Pn5ZPx0J/yGGt821PM9wYpMm6lTxTXU+s7PYclcgTP8=)
6: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (hash: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=)
7: sz14VBxRIpqGXYJ3gs7N-duef7M.roa (hash: iuoNPKOygQGtJNdRme+MrNnya4r/5gpGXaK9IsmECOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:14:da:b6:42:11:49:6e:05:64:55:1b:8e:20:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 28 21:01:12 2026 GMT
Not After : Jul 29 21:01:12 2026 GMT
Subject: CN=9ce7e91732458be60f1c1f739503773a5fd9d837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:c6:c3:c9:a2:76:02:87:1e:23:46:98:fa:
c9:15:e2:46:7a:df:ec:31:d3:2a:78:71:6c:e0:5f:
ac:58:d4:1d:34:e0:50:5c:4d:57:be:d6:12:2e:b8:
bf:e8:99:8c:e3:ea:39:bc:ac:bd:78:49:42:92:70:
5c:3d:20:a1:e4:36:50:a0:21:5f:d4:14:a6:4d:4c:
fc:36:06:7c:0b:2d:46:b5:a1:6f:1f:71:26:55:8f:
7b:ae:d5:d1:1e:3c:c9:c8:e1:93:04:36:f3:b7:ce:
1d:e4:6a:1d:fa:4c:3c:0c:5a:b4:d4:6e:68:c2:f1:
46:ab:06:f1:85:1f:fc:b9:59:df:60:af:3d:82:20:
ab:0c:b7:e2:a7:c2:07:32:90:f6:69:c1:92:32:c3:
fd:48:fd:d6:51:00:3a:3b:48:b3:1f:36:eb:3b:2e:
bb:c6:2e:ed:ff:ea:68:f0:09:9f:b6:65:82:21:ea:
71:18:72:96:56:24:4d:b8:64:0f:2d:3d:ba:7e:63:
a4:17:22:e2:71:26:c2:4e:b7:d4:27:34:1f:8f:d0:
ff:4b:f3:42:4d:fd:a9:c9:af:e0:77:1a:f2:9f:77:
81:1c:fe:cf:64:57:1d:d0:79:f1:bf:83:d4:bc:2e:
09:73:29:41:9a:e6:4d:fa:f2:e8:8b:88:44:42:78:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:E9:17:32:45:8B:E6:0F:1C:1F:73:95:03:77:3A:5F:D9:D8:37
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:56:3e:c7:2f:59:e5:7e:3e:38:c3:7e:1b:6e:69:67:ba:
cf:c2:3b:b4:84:be:78:5d:12:e1:9b:40:fa:ed:d4:1f:de:b3:
88:de:35:7b:30:ab:f7:d5:0f:ba:b5:6f:23:1a:d4:fe:7b:72:
55:e4:d9:a9:a9:ac:b5:c0:7a:0f:f7:1b:f0:02:ac:4d:25:a9:
ba:04:b1:9a:69:80:51:85:7c:58:12:11:aa:14:e2:39:27:cb:
fc:e6:13:60:59:45:2d:6a:34:bb:75:f7:81:b9:f2:75:0b:d2:
c8:1a:6d:bd:ea:29:c6:a9:ba:1a:11:15:5a:f1:39:72:af:61:
76:c7:d8:6b:89:ea:6c:27:9b:2f:02:8a:2f:6d:73:8d:0f:37:
6a:21:7d:41:55:89:34:ae:5a:20:b8:67:dd:6d:0b:4e:c2:96:
f9:3b:47:27:82:a0:d8:77:6c:4c:75:7e:e4:65:14:cd:86:36:
9f:6d:0f:ae:7b:f7:a0:d4:63:29:83:0e:25:7b:88:ef:22:49:
64:32:a6:e8:46:3a:09:bc:e5:42:5f:dd:a3:48:d0:dd:14:43:
74:61:11:ac:bf:44:e0:8c:b0:96:f9:dd:1e:e3:d8:a9:7f:cb:
d9:6e:ea:0a:79:49:14:38:9f:8c:97:7a:c0:c9:11:fa:10:86:
86:13:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:52:22 2026 by rpki-client