Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
File: 1-_LbWO2p3N4jau7HeVUO9rjLRow.mft (raw, json)
Hash identifier: cp1V8kVMpOOBFSyLBjljkSPQg7vKfwDwlfmUWiLTj8Y=
Subject key identifier: F1:24:DC:9B:FD:4C:30:19:4A:99:25:CC:E8:56:CE:42:74:A5:5B:47
Authority key identifier: FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
Certificate issuer: /CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Certificate serial: 019FAC7623FAAFA8D934092E2BB03CC2D8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:51 +0000
Manifest this update: Wed 29 Jul 2026 06:00:51 +0000
Manifest next update: Thu 30 Jul 2026 06:00:51 +0000
Files and hashes: 1: 1-_LbWO2p3N4jau7HeVUO9rjLRow.crl (hash: 1IWVyObfGkanOSi4ElAvyRcHU2Af1gprOfZNrVJdHqM=)
2: 2EDW-s-ud7-nCTr1Sgos54mN1mM.roa (hash: YCcPBkAYBuUswz1BVwdFoQLrC8n9zW+jV/kRYtdf2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:23:fa:af:a8:d9:34:09:2e:2b:b0:3c:c2:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Validity
Not Before: Jul 29 06:00:51 2026 GMT
Not After : Jul 30 06:00:51 2026 GMT
Subject: CN=f124dc9bfd4c30194a9925cce856ce4274a55b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:c4:74:51:7e:49:4f:b1:eb:60:d2:2b:9b:
53:71:8f:8d:fc:1a:4a:0d:f0:bc:04:c0:e5:f3:51:
bf:30:fb:9b:0f:96:36:9c:72:10:cc:f2:75:ec:c4:
b0:20:d7:20:f9:66:aa:7e:72:4a:e5:5a:5f:ca:62:
2e:ea:a2:b7:b9:61:fa:aa:4c:32:37:9f:f1:a9:57:
6f:c7:5b:f7:a7:8d:5c:4f:5c:06:e4:10:7d:c4:b8:
4d:41:90:81:f7:c9:c4:7e:4d:ec:e4:69:07:76:e9:
cf:82:ab:83:6c:b6:05:ff:20:e6:d5:d8:01:13:64:
0a:c3:3d:47:95:27:09:ce:96:a1:51:df:3d:81:10:
ef:b4:d9:46:7e:56:da:31:bc:85:b0:fa:67:a9:a9:
9c:1e:70:13:68:50:a3:41:21:04:79:cd:27:25:cc:
7e:e9:ef:f8:e3:48:b2:02:4b:a1:4f:c7:fd:14:39:
e1:65:04:0c:7d:a2:c5:2c:21:56:69:39:f3:70:45:
96:34:25:6b:29:2e:8c:6d:da:ba:c3:f2:03:97:0b:
9e:3f:f6:71:9e:4f:4a:8e:1d:31:f4:0a:bd:8b:68:
f3:16:18:8c:a7:54:e0:ad:8c:a5:28:0d:2f:c4:48:
7b:a7:37:cf:0e:af:e9:ac:89:ba:5b:54:34:81:a6:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:DC:9B:FD:4C:30:19:4A:99:25:CC:E8:56:CE:42:74:A5:5B:47
X509v3 Authority Key Identifier:
keyid:FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:87:67:6d:34:ea:75:f1:b3:61:94:8d:15:02:be:23:b2:
04:5c:1e:1c:a4:71:f4:3a:af:b4:1e:ca:86:db:0c:49:3a:92:
84:47:bc:b0:bf:fc:43:7d:98:f9:83:b0:ba:5a:e4:63:1c:e7:
f7:84:7d:49:ca:41:95:eb:24:4a:5b:2b:66:72:08:97:68:89:
19:86:74:88:2c:5c:da:7a:bc:d2:0f:e6:03:79:bf:f9:b1:cc:
8d:ed:46:4d:78:9d:25:62:80:26:43:7c:c1:68:27:a3:47:2a:
b2:3e:2f:30:6d:b3:05:ad:b9:29:c7:98:5c:23:4f:52:0f:63:
2d:8e:4b:e2:a6:d2:66:79:40:10:0d:df:e9:4b:ab:a8:65:b0:
4d:d7:30:a0:d3:e6:32:67:d6:a6:0d:bc:c0:b0:28:8c:9f:14:
d1:f5:a3:97:e2:34:02:9e:3f:4d:5c:ba:af:6c:25:ea:e2:84:
db:d6:8e:60:b1:02:1e:87:a6:96:47:52:b5:a7:09:e4:b9:dc:
f7:c3:ae:a9:8e:00:e5:20:b2:a5:77:b1:47:0f:87:dd:f1:39:
b4:fd:d5:17:18:1a:5e:5e:bb:a4:3c:94:91:26:a7:10:76:59:
9d:ae:ec:8d:26:91:40:83:32:d1:60:80:bb:81:39:fa:3f:d4:
68:8d:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:27 2026 by rpki-client