Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: QFX3PKQPlg7+3evbRQpl3hQrvv7WvBj7W96vuJ6aoCE=
Subject key identifier: BE:EF:40:05:23:14:10:1B:C2:1A:41:3B:C3:37:8A:BE:E2:58:B8:27
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019FA9E2DAEBB22D4A827512C53AB976C9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 19F7
Signing time: Tue 28 Jul 2026 18:00:44 +0000
Manifest this update: Tue 28 Jul 2026 18:00:44 +0000
Manifest next update: Wed 29 Jul 2026 18:00:44 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: KADGgRS5/MElulh6GrMEAcQw0pYIfEcg96FlMoL3If0=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:da:eb:b2:2d:4a:82:75:12:c5:3a:b9:76:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jul 28 18:00:44 2026 GMT
Not After : Jul 29 18:00:44 2026 GMT
Subject: CN=beef40052314101bc21a413bc3378abee258b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:fe:09:c7:92:be:15:60:a1:df:bd:1e:c1:
c8:fb:99:fd:b2:5a:2f:78:6b:55:b1:ba:e3:8d:42:
77:f1:dd:2a:36:af:ed:27:97:51:db:4d:45:8a:b5:
e2:5e:30:cc:77:6f:27:15:79:6b:5e:97:53:b7:5a:
c5:52:e2:34:86:8c:39:3c:2c:d3:cc:45:e1:d0:93:
e0:09:b3:63:92:7f:3a:4c:f5:6e:ad:73:44:bc:bb:
05:bf:f6:9c:5c:57:55:fe:d4:12:3f:b9:e5:91:3d:
d2:9f:dc:be:b2:e3:fa:8d:e8:a5:5d:83:7b:ef:f0:
38:05:3d:9d:a3:5c:44:f1:a6:6b:83:90:d0:8c:07:
48:9d:64:9e:d3:fe:9a:3e:e0:bc:d5:f3:1b:9a:f5:
c4:52:cc:5b:01:50:10:58:f7:b5:9c:5d:9e:5a:99:
e7:3c:5f:14:f5:9f:9d:11:5d:41:4c:99:97:b4:56:
fc:17:76:8d:7f:65:76:2e:d4:c7:27:ac:d6:7b:7a:
9a:93:53:a8:23:e2:17:d2:60:d0:e9:a1:74:be:bd:
51:ad:a9:84:1b:85:11:f8:8e:e4:7b:9e:cf:a6:dc:
5b:80:0a:82:bd:f7:f5:f0:4a:c9:93:c0:28:dc:2a:
bb:05:1d:ee:68:1c:0e:73:42:e4:e2:74:ec:e8:7b:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:40:05:23:14:10:1B:C2:1A:41:3B:C3:37:8A:BE:E2:58:B8:27
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5c:64:31:07:ee:cc:12:59:29:b1:d6:85:9a:b3:5b:9b:3d:
5e:46:e0:a2:a7:5b:86:bc:d3:78:e6:74:62:17:7c:19:b6:6b:
8c:22:99:b8:46:c4:dd:4c:7f:8b:d5:ad:89:9c:9b:84:48:a3:
d1:0b:b8:b9:5f:6f:cf:88:aa:69:1d:08:7f:18:c7:0a:ed:f5:
19:0a:ff:65:d4:97:0e:bf:a9:95:67:db:db:41:16:dd:78:53:
a8:53:5c:57:f1:c7:c4:8e:df:cf:4f:a3:6a:30:c5:d0:65:bf:
50:c6:2e:af:f2:1e:2b:8b:53:a3:dc:e8:87:18:83:95:52:bb:
3f:b3:ad:13:f6:00:2e:60:b7:52:ae:7f:4f:11:c2:f5:79:bc:
45:4c:1c:0f:8e:e5:1b:c2:87:e0:2e:6d:d6:01:ce:f3:30:42:
9e:65:8f:49:a0:69:1e:8a:0d:c2:00:d5:35:c1:a1:57:8f:b2:
dc:ab:6c:a8:82:dd:e1:9c:60:f6:0e:d5:bc:ce:98:de:37:12:
15:bb:8a:de:ca:39:1c:d3:92:32:d3:7b:2e:08:bb:96:73:11:
52:e7:31:be:8a:b2:c0:51:05:ee:f0:b7:36:62:7d:3d:61:55:
3e:7a:6b:16:62:75:b2:a4:54:6a:08:b3:ca:84:08:24:24:b7:
1e:01:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:38 2026 by rpki-client