Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
File: 1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft (raw, json)
Hash identifier: ELslj+NHKEopnHkiGXXT7kLY8lGr/aJarWyeQZ0cLsw=
Subject key identifier: BD:1B:00:EF:30:C0:28:65:82:43:37:5F:85:A0:12:78:0F:B1:53:4B
Authority key identifier: FA:2F:09:ED:84:9D:68:8C:6B:C8:B9:A7:52:B2:0F:CB:C8:BE:7D:F5
Certificate issuer: /CN=fa2f09ed849d688c6bc8b9a752b20fcbc8be7df5
Certificate serial: 019F8FEBACA85BEAF36CF2DEC8E2920727A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i8J7YSdaIxryLmnUrIPy8i-ffU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
Manifest number: 1B
Signing time: Thu 23 Jul 2026 17:00:14 +0000
Manifest this update: Thu 23 Jul 2026 17:00:14 +0000
Manifest next update: Fri 24 Jul 2026 17:00:14 +0000
Files and hashes: 1: 1-i8J7YSdaIxryLmnUrIPy8i-ffU.crl (hash: BiQbNbuxfCUXlTGkLLDGx0W+vO+RpPNVKRCb67AzZx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i8J7YSdaIxryLmnUrIPy8i-ffU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:ac:a8:5b:ea:f3:6c:f2:de:c8:e2:92:07:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2f09ed849d688c6bc8b9a752b20fcbc8be7df5
Validity
Not Before: Jul 23 17:00:14 2026 GMT
Not After : Jul 24 17:00:14 2026 GMT
Subject: CN=bd1b00ef30c028658243375f85a012780fb1534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:82:a1:cb:3c:f1:ce:e3:32:ae:b1:a1:2c:
84:d3:54:50:9b:d5:bb:0e:e1:aa:1e:aa:eb:f8:d2:
3b:ce:cd:02:c1:4a:98:1a:2b:f8:40:8f:4c:16:40:
bf:61:71:56:c0:79:40:42:3a:a3:f5:39:f4:2d:cb:
d1:06:2a:48:10:08:17:14:ed:2c:e9:38:b5:9c:b5:
e2:d3:07:fb:08:bf:e5:2f:cb:e0:5c:ce:fd:6c:88:
07:c3:57:ce:b2:02:8b:04:c3:3d:6f:04:d0:8d:78:
8b:9c:d5:88:9d:be:0f:26:d1:89:d9:78:53:f6:db:
c4:74:62:65:c4:bc:cf:11:85:9c:d8:14:e9:71:29:
9c:88:bd:4c:0d:da:39:5e:a1:86:5a:03:a2:15:76:
cd:29:e0:90:f0:3b:04:53:a4:3a:29:be:11:93:5a:
f6:59:ac:d6:9f:c6:06:04:77:11:fc:43:89:9d:e9:
e3:bf:fc:90:ac:3a:ae:1b:7e:88:f1:4c:ac:ac:a8:
3c:a2:1e:9d:65:b6:48:02:8c:e0:75:df:3f:6e:5a:
01:5c:66:fe:39:93:b3:48:78:92:79:b5:2f:0c:b2:
14:2c:49:32:d2:ba:a7:82:03:46:db:65:69:90:82:
02:c8:f2:1a:0d:c7:b4:6c:20:ab:47:bc:c9:63:3f:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1B:00:EF:30:C0:28:65:82:43:37:5F:85:A0:12:78:0F:B1:53:4B
X509v3 Authority Key Identifier:
keyid:FA:2F:09:ED:84:9D:68:8C:6B:C8:B9:A7:52:B2:0F:CB:C8:BE:7D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i8J7YSdaIxryLmnUrIPy8i-ffU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:76:8e:ea:47:8d:52:3d:7f:5d:52:30:ea:f4:d0:0a:a2:
16:a6:80:e1:55:17:a3:3d:a4:6f:c7:a1:dc:ed:9c:32:29:d9:
e9:dc:61:53:eb:54:c4:5a:16:49:b7:ce:5d:53:7b:d4:f3:69:
df:45:29:54:2c:41:6c:33:d7:fd:e3:1e:dc:ea:e3:8f:a5:2c:
94:3f:e7:09:b7:49:f9:31:d0:63:71:5d:48:6c:c2:bd:e2:b1:
0c:f5:2d:db:00:47:73:fc:ab:8e:e3:39:7e:9c:26:be:52:19:
16:a0:2e:11:5e:d1:4f:9e:d9:85:c6:d9:ee:6a:01:4c:c5:b5:
95:be:72:4d:8d:5a:e3:6f:99:67:4a:aa:80:a8:e0:6c:66:04:
d3:0d:a1:1c:1f:67:5a:4a:89:11:a5:8d:22:a2:ee:15:63:c4:
ca:f5:12:c3:7c:a8:b2:e1:45:56:74:55:63:ca:3e:c5:19:9f:
9c:7d:fd:1f:7c:40:60:90:ba:b1:e3:0d:5f:06:ba:2e:85:d9:
1f:11:5a:99:da:12:49:85:f3:cb:6e:24:d1:cc:f1:f1:a0:8e:
f7:0d:a8:ee:7d:95:d4:05:2b:3e:5a:8a:69:cc:66:0d:0d:e3:
f1:7a:ac:4a:bc:5d:7c:bc:c7:bf:fc:30:c8:de:23:31:4b:a6:
32:9e:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:53 2026 by rpki-client