Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: pLu+t7IJs7yJAXSL9XyUYmIgsmZR51OnPNIfBlHE7eo=
Subject key identifier: 55:11:A1:CB:F2:1E:63:6A:C5:41:2A:91:2C:4A:78:9B:81:49:54:48
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019F90FF556D1BA102740B2127A982128D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 0687
Signing time: Thu 23 Jul 2026 22:01:20 +0000
Manifest this update: Thu 23 Jul 2026 22:01:20 +0000
Manifest next update: Fri 24 Jul 2026 22:01:20 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: baKWpdPamesm7+JvUfqG3L0zREZPdbTqTqu+QEgWGH0=)
2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:55:6d:1b:a1:02:74:0b:21:27:a9:82:12:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Jul 23 22:01:20 2026 GMT
Not After : Jul 24 22:01:20 2026 GMT
Subject: CN=5511a1cbf21e636ac5412a912c4a789b81495448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:46:05:26:be:49:e1:a4:19:6c:7c:b6:b2:
9e:f1:2b:6e:8c:80:2f:d5:1b:57:72:e3:d5:83:f5:
72:db:4b:b3:a5:3b:13:ec:18:f7:b3:ca:6b:29:97:
58:41:75:1c:ab:82:90:01:cd:f2:19:ab:af:70:6c:
78:9b:7c:d0:b7:9c:a5:09:a4:10:2a:85:42:c5:59:
6d:40:fb:cb:98:54:ed:03:b2:32:61:c8:f2:be:8f:
e4:58:c8:b8:f3:fa:3b:12:f1:9b:ac:c5:9e:e0:ef:
21:a8:bc:4e:b1:35:68:b0:61:87:61:4c:fe:59:91:
b6:75:71:9b:a8:35:3a:12:64:ac:07:42:03:6e:92:
0e:55:06:2e:6d:24:96:bf:1f:6a:5f:b9:9b:71:f1:
96:7e:9d:d9:f4:c0:75:55:3f:8c:3f:da:c2:a2:dc:
86:fc:86:8b:da:35:73:fe:c1:89:86:58:6f:f8:74:
04:3f:c0:1e:43:c0:25:ee:d2:1c:77:87:8f:03:a1:
ff:3d:28:21:0b:04:f3:9b:12:33:4f:de:98:fa:97:
cb:e7:b4:01:78:39:5a:0a:ef:eb:8c:6e:d2:b0:2f:
30:8e:bd:f7:e2:32:3f:c0:a8:79:14:8c:39:63:dc:
3f:49:66:75:c3:31:66:75:97:d0:a9:f7:71:9e:34:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:A1:CB:F2:1E:63:6A:C5:41:2A:91:2C:4A:78:9B:81:49:54:48
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:36:09:8c:83:42:08:e0:3b:bb:6e:60:9a:0d:35:0c:42:c7:
4a:11:0b:f7:ba:08:e5:7a:12:f1:fc:74:b8:67:ec:e6:bc:79:
5f:91:93:f7:19:40:25:a2:49:76:be:54:7a:59:82:77:ab:01:
51:61:82:52:bc:90:80:32:ca:d3:47:f0:b6:83:ae:42:22:74:
d7:11:10:c2:20:a8:26:04:7c:c5:d4:01:19:17:35:63:b1:3f:
c1:91:24:50:0d:38:66:aa:9c:98:c5:65:25:f9:7b:45:0b:17:
c8:68:10:e4:ed:d6:34:6c:82:17:29:96:e2:63:d1:16:8c:c0:
dd:33:59:ee:2a:44:27:e1:bb:cc:1e:77:e2:04:38:5e:69:0c:
6e:d9:22:92:a9:e9:a4:76:f7:14:9b:0f:ce:b8:0b:78:0f:c6:
7c:82:1a:76:6d:94:8e:c9:07:22:d0:a9:41:16:e3:2a:06:a3:
ac:56:4e:cd:46:a7:45:8e:27:85:c5:da:51:12:8e:46:db:9f:
82:cd:d7:45:57:6d:b9:29:86:32:61:0c:36:93:cc:75:3b:e7:
ed:e4:f8:03:3a:8c:15:c9:d5:a9:df:1d:2d:fa:6a:67:a2:fd:
35:79:cd:ca:b3:57:dd:74:4e:24:52:28:55:8e:ba:14:58:e1:
3b:d8:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:23 2026 by rpki-client