Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: FgQhJ/+AKVRjjs+uDIKXOQgVfyfmyBCZ7LdoI8AXu7Y=
Subject key identifier: 70:91:25:26:20:B4:14:82:25:B1:11:1E:45:01:A7:56:D2:BC:7F:FF
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019EBE7F3994CB04E4BB972BBE7FC42A7CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 108E
Signing time: Sat 13 Jun 2026 01:01:09 +0000
Manifest this update: Sat 13 Jun 2026 01:01:09 +0000
Manifest next update: Sun 14 Jun 2026 01:01:09 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: PjpFOYLYVgxIJHNbHHc1hOUIigWRgRMWJ4X2fkr9WnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:39:94:cb:04:e4:bb:97:2b:be:7f:c4:2a:7c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Jun 13 01:01:09 2026 GMT
Not After : Jun 14 01:01:09 2026 GMT
Subject: CN=7091252620b4148225b1111e4501a756d2bc7fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:98:b8:a0:92:08:45:bf:6d:3e:28:d8:30:
98:6b:be:3f:69:18:37:d9:70:4d:db:4d:9a:57:a8:
94:3c:9e:31:93:75:ed:bc:a4:79:fb:df:3a:aa:54:
a3:62:da:35:23:51:35:21:e8:89:cf:2d:cc:ee:ef:
17:28:75:da:c5:ca:b8:7e:ab:62:dc:01:7b:13:50:
81:70:39:7b:6f:44:a4:d7:55:4c:4a:ee:c3:ad:8d:
82:de:ca:6b:58:ef:17:d8:1a:c4:5a:95:17:e5:e3:
82:d2:32:c1:12:1e:b8:b6:8b:32:1e:86:16:e9:81:
0a:a6:18:6c:84:d0:c4:2b:a4:c6:64:6c:3d:94:92:
64:5c:a5:28:32:b6:3a:32:c4:30:1b:8b:00:bb:67:
ab:ce:44:33:e3:88:92:72:dc:c6:a8:f5:75:aa:84:
c6:f4:a9:d5:c7:bb:63:3d:fb:95:44:cb:15:2e:47:
b2:51:4f:f3:3d:a0:13:97:55:e2:5f:e5:fd:69:cf:
ed:4a:58:a7:65:2e:24:2a:9d:49:b9:4a:1e:64:1e:
53:a6:79:da:06:f7:ad:c6:a5:af:e2:82:af:f8:12:
3a:79:54:93:b7:dd:12:46:96:81:6f:2f:a6:cb:bf:
90:3f:5e:b3:5a:21:60:1a:b5:b1:fb:c9:99:58:10:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:25:26:20:B4:14:82:25:B1:11:1E:45:01:A7:56:D2:BC:7F:FF
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0b:fb:4b:2f:b6:ba:9e:a7:e4:de:5a:2c:85:1d:d2:79:ef:
24:92:17:03:6d:a6:f0:5a:06:62:f7:53:66:c7:74:98:c9:1f:
b7:ae:db:d0:a4:7b:e2:7d:d9:3e:af:a3:9a:6a:46:bb:bb:b0:
f1:cc:35:25:ef:ba:2d:d9:20:24:27:18:bb:51:b8:5f:f8:11:
1e:47:9b:e8:f2:64:2c:6b:cd:d0:b7:4e:c3:fb:c9:da:d6:4a:
22:3a:36:78:55:6c:56:86:08:82:2f:8d:66:16:84:28:7d:ba:
3a:4f:42:0b:21:69:5c:27:a5:af:c4:98:95:01:c6:50:ac:fc:
50:08:4e:31:11:01:bf:6b:60:56:62:86:43:29:fe:e7:ce:89:
40:ba:6a:b3:96:c9:5b:e5:7f:78:b7:5d:81:27:53:aa:1a:1a:
bd:58:47:98:14:ff:d3:04:b6:04:ce:d7:9b:56:6f:11:e4:6d:
55:b8:e4:a7:9d:7d:92:b2:dd:92:67:2e:b4:06:39:3e:9c:a9:
75:29:7b:d9:1c:9c:0d:d9:6b:d9:7a:a5:f2:3f:15:57:98:47:
a3:c9:d5:e1:d1:37:b5:6d:6c:3b:f3:8f:d3:09:c6:d2:f0:30:
89:ee:2b:fa:dd:51:ad:2e:12:bf:1b:3d:8a:ad:21:11:55:fb:
aa:12:fb:1e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+fzmUywTku5crvn/EKnzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWE4M2ZiYjNlMWI5YjYzODMxYTY4MWY2YjcyMmEyNjUw
MTZjOWMwHhcNMjYwNjEzMDEwMTA5WhcNMjYwNjE0MDEwMTA5WjAzMTEwLwYDVQQD
Eyg3MDkxMjUyNjIwYjQxNDgyMjViMTExMWU0NTAxYTc1NmQyYmM3ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5yYuKCSCEW/bT4o2DCYa74/aRg3
2XBN202aV6iUPJ4xk3XtvKR5+986qlSjYto1I1E1IeiJzy3M7u8XKHXaxcq4fqti
3AF7E1CBcDl7b0Sk11VMSu7DrY2C3sprWO8X2BrEWpUX5eOC0jLBEh64tosyHoYW
6YEKphhshNDEK6TGZGw9lJJkXKUoMrY6MsQwG4sAu2erzkQz44iSctzGqPV1qoTG
9KnVx7tjPfuVRMsVLkeyUU/zPaATl1XiX+X9ac/tSlinZS4kKp1JuUoeZB5Tpnna
BvetxqWv4oKv+BI6eVSTt90SRpaBby+my7+QP16zWiFgGrWx+8mZWBDXSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHCRJSYgtBSCJbERHkUBp1bSvH//MB8GA1UdIwQY
MBaAFPoag/uz4bm2ODGmgfa3IqJlAWycMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ocUQtN1BodWJZNE1hYUI5cmNpb21VQmJKdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQzLTQwZDItNGRlYi05NmI0
LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFCOXJjaW9tVUJiSncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlLzU5MmQ0My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3
MzMvMS8xLWhxRC03UGh1Ylk0TWFhQjlyY2lvbVVCYkp3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQv7
Sy+2up6n5N5aLIUd0nnvJJIXA22m8FoGYvdTZsd0mMkft67b0KR74n3ZPq+jmmpG
u7uw8cw1Je+6LdkgJCcYu1G4X/gRHkeb6PJkLGvN0LdOw/vJ2tZKIjo2eFVsVoYI
gi+NZhaEKH26Ok9CCyFpXCelr8SYlQHGUKz8UAhOMREBv2tgVmKGQyn+586JQLpq
s5bJW+V/eLddgSdTqhoavVhHmBT/0wS2BM7Xm1ZvEeRtVbjkp519krLdkmcutAY5
PpypdSl72RycDdlr2Xql8j8VV5hHo8nV4dE3tW1sO/OP0wnG0vAwie4r+t1RrS4S
vxs9iq0hEVX7qhL7Hg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:32 2026 by rpki-client