Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: Vr8xUC/TfTfqsj38RW2nJlh5PZXFS2AFiljEUam/J9s=
Subject key identifier: 4D:C0:AF:03:93:F1:92:D5:C4:DC:4E:AE:D7:59:2C:CC:51:7D:A6:C9
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019FA907289ECC168D535C11D5AC3452AB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 174B
Signing time: Tue 28 Jul 2026 14:00:46 +0000
Manifest this update: Tue 28 Jul 2026 14:00:46 +0000
Manifest next update: Wed 29 Jul 2026 14:00:46 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: BvRnKNG4xS0/NwPW/ssAXNRDqL3LhGe1ze8gB4xvpWk=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:28:9e:cc:16:8d:53:5c:11:d5:ac:34:52:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jul 28 14:00:46 2026 GMT
Not After : Jul 29 14:00:46 2026 GMT
Subject: CN=4dc0af0393f192d5c4dc4eaed7592ccc517da6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:3d:73:09:e9:0f:da:b1:75:ae:50:b5:d1:
6b:5b:dc:a5:cb:88:50:94:f3:d0:2f:4f:69:48:d9:
33:3e:45:4b:c5:95:0e:4d:60:dd:c3:53:1f:be:a5:
84:1b:7f:85:74:57:a1:a7:0b:16:06:fd:6c:84:fe:
07:fd:a0:e2:c3:bc:1b:b1:67:77:b6:64:51:55:c9:
94:ef:f1:98:0f:84:56:a5:73:17:a2:37:23:57:23:
32:0e:fa:cc:80:8b:51:93:5a:24:bb:ea:31:39:53:
1b:0e:79:71:1e:49:27:45:f6:c4:6c:a0:9c:96:11:
44:2a:ee:47:00:7f:c0:c7:01:25:3d:2c:48:c0:44:
05:9e:48:b7:a2:dc:1d:49:df:c6:e2:e0:fd:ba:50:
df:0c:0f:31:69:36:e1:bb:8f:ca:44:b0:41:3d:7a:
67:2f:e5:3d:f2:86:69:d8:10:8f:2b:a4:4f:95:85:
c1:06:fe:36:0d:61:c1:eb:ac:43:96:e0:56:f1:b1:
c7:80:b0:49:cf:18:4a:7d:2b:86:95:dc:66:cf:a2:
bc:c3:5b:86:42:12:f4:16:ac:e2:bc:0f:82:83:6b:
ea:df:62:a8:cc:7c:f9:8b:89:56:a8:60:02:7b:c2:
77:7c:9b:13:c2:da:e9:c5:bf:18:6d:b6:9a:9f:c3:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C0:AF:03:93:F1:92:D5:C4:DC:4E:AE:D7:59:2C:CC:51:7D:A6:C9
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:21:20:09:e2:32:65:9e:66:f2:1b:9f:5a:61:bc:a5:d8:bc:
30:78:09:3f:66:7a:69:b7:ea:cb:7e:91:7a:af:9f:cb:41:8a:
18:e5:4e:4e:bb:9f:29:5a:65:18:5d:02:c4:e0:49:cd:6e:9f:
06:b7:24:a4:1b:ac:61:1b:fd:25:46:be:3a:32:2f:80:af:cf:
31:00:10:03:43:5e:ab:bc:ea:36:cd:a7:f7:26:dc:d2:ac:4e:
16:55:b3:b6:21:94:a0:56:df:02:8a:75:d0:0f:fa:83:5c:79:
fa:62:e6:22:ba:4e:23:26:d9:c6:91:d4:50:97:99:e8:f8:8f:
f3:60:10:8c:20:91:3e:71:a9:1a:50:02:6c:9b:70:2c:65:3d:
71:7d:e3:14:6e:08:1f:81:35:29:cb:f3:84:cf:6f:d1:24:c6:
f1:f4:ec:4a:34:37:b6:2b:11:e0:fc:39:db:de:a7:48:7f:1d:
26:a9:11:64:10:e5:29:e6:42:15:d5:57:35:da:6e:8b:98:ae:
43:d4:03:bc:3c:3c:fa:eb:dd:96:67:00:8d:51:48:d1:49:1a:
8b:ec:3c:c1:38:c7:5e:2b:35:af:72:c7:c6:6b:12:07:83:52:
27:5f:d6:c4:41:ae:01:04:0b:a7:88:30:88:89:f7:df:5c:a7:
af:17:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:28 2026 by rpki-client