Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier: G+P8YTes78NNXv6VUEE6MRTuxowzak5TbCtg5pXMbME=
Subject key identifier: 7D:B7:27:AB:C3:E8:E8:6A:6E:8C:B5:02:38:FC:5A:F7:90:D3:2E:2E
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer: /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial: 019FA89A1CCA7DCF2CDB5EBE78383584BDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:39 +0000
Manifest this update: Tue 28 Jul 2026 12:01:39 +0000
Manifest next update: Wed 29 Jul 2026 12:01:39 +0000
Files and hashes: 1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: vrmptADEMUb1s3xMda4g8jPewDv0SqO6G3M6zvZiPj0=)
2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:1c:ca:7d:cf:2c:db:5e:be:78:38:35:84:bd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Validity
Not Before: Jul 28 12:01:39 2026 GMT
Not After : Jul 29 12:01:39 2026 GMT
Subject: CN=7db727abc3e8e86a6e8cb50238fc5af790d32e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:05:5b:12:20:18:15:d4:08:60:0f:d7:1b:
94:d8:69:56:e2:d0:6a:12:c5:87:a2:a4:66:56:87:
5f:7b:af:8a:a3:3e:69:bc:30:2c:0c:3d:a1:35:13:
38:ea:3c:2b:b7:36:ea:4f:bf:a4:c6:2e:56:15:5d:
53:5f:84:7c:67:43:7c:c9:dd:ae:2e:8e:eb:b4:66:
f8:2c:57:00:17:b2:68:da:fa:a3:96:62:48:26:d4:
9b:32:c5:f5:e7:58:df:35:38:f9:d1:5b:be:20:44:
a1:e1:41:ca:7d:a9:2b:75:63:3e:c6:ec:97:51:e8:
95:09:44:27:7a:cc:b2:90:fe:0f:fc:65:c9:79:4c:
12:d9:44:37:21:26:f7:6a:52:4c:16:42:a3:a1:30:
0f:1c:03:85:52:06:dd:ac:e9:d7:fc:31:95:3d:18:
69:1e:d4:d5:d8:0e:0e:8b:6f:0f:f0:51:f7:f9:c1:
da:45:a9:0b:3a:c8:82:9c:0e:a9:2f:0b:ce:34:a8:
fb:cc:97:d7:a9:03:f1:d4:e0:d2:9c:91:4a:dd:16:
5e:63:d4:c2:0a:3b:4b:56:e8:08:4c:5a:94:76:bc:
46:02:fd:53:b6:84:86:cf:98:87:cc:0e:88:37:a9:
66:e0:2c:80:32:fe:e3:34:7c:56:35:51:29:e4:ee:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:27:AB:C3:E8:E8:6A:6E:8C:B5:02:38:FC:5A:F7:90:D3:2E:2E
X509v3 Authority Key Identifier:
keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8f:11:9d:0c:0a:28:19:f2:1e:c0:ed:f4:dd:cc:63:cd:84:
34:64:2d:8a:fc:0e:f1:db:f9:73:e0:e9:a5:cc:ad:52:03:ea:
ad:b8:a4:25:f8:ed:bd:17:22:2e:0b:79:78:ce:cb:e0:0d:45:
46:02:47:88:fd:8a:19:e4:28:57:0e:db:2a:23:57:23:62:33:
d5:41:c8:97:a5:94:a4:1b:4c:fb:15:72:56:ce:cc:b5:48:01:
be:17:c2:ec:ac:29:ae:64:78:70:7e:f7:1d:9e:ca:f6:fa:9c:
0f:c9:89:2b:ee:16:7d:c3:e7:81:5b:d6:93:a6:cd:8b:bb:dd:
47:fd:37:d9:a2:a5:98:72:cc:ea:e7:50:c2:50:2a:93:c0:0c:
73:d6:2d:8c:e9:f7:b7:f7:07:f2:a3:f1:60:5f:94:8a:ee:2e:
1c:30:f9:e5:47:1c:b7:fd:bb:bb:36:85:f8:54:9a:12:6b:fe:
92:01:23:44:ce:c7:b8:0a:34:39:cd:84:46:e5:9c:a1:6e:a8:
8e:0e:6e:a6:cd:32:da:b9:8b:ac:55:78:c7:4f:99:37:46:0c:
79:fa:be:ef:3f:be:5e:d4:3b:70:15:77:1f:1b:54:6c:b1:04:
05:b1:7a:09:c2:93:3e:ec:e2:fd:4a:c8:e8:cd:26:30:dc:d8:
19:41:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:14 2026 by rpki-client