Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: JDwPgBVG+nlVdpSkDepr7fFKK5zurh5iXTZpxO4yQpY=
Subject key identifier: 05:9C:86:BE:BE:0D:5E:B9:AF:6F:DA:AD:5B:E6:33:18:E1:7A:F0:30
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019F90FF72CB3FBB38609A48F13D31A9C522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 064C
Signing time: Thu 23 Jul 2026 22:01:27 +0000
Manifest this update: Thu 23 Jul 2026 22:01:27 +0000
Manifest next update: Fri 24 Jul 2026 22:01:27 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: wywQvwMLkWlkXzWCMB44b6dMbmM4+JorzSAlSMXV4qw=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:72:cb:3f:bb:38:60:9a:48:f1:3d:31:a9:c5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jul 23 22:01:27 2026 GMT
Not After : Jul 24 22:01:27 2026 GMT
Subject: CN=059c86bebe0d5eb9af6fdaad5be63318e17af030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:68:f1:85:45:a8:5c:b9:63:58:26:50:9d:
6b:71:78:0a:b4:c7:da:44:b5:ae:b0:da:0c:a3:6d:
10:57:13:b3:54:14:68:ea:0b:9b:93:e9:06:99:57:
a8:0c:36:e6:73:9d:04:bf:89:03:32:0f:eb:9d:a1:
2e:b5:5d:eb:b3:9a:a4:e8:73:73:2c:19:74:9d:51:
aa:6b:ed:97:a4:eb:43:dd:4a:be:9f:d6:db:58:ce:
ca:83:9a:ea:d8:c9:76:e2:6c:f0:ed:f7:25:a3:ad:
b9:3c:0b:a5:f7:7e:b6:5f:d6:e6:6b:13:b1:cf:b6:
4e:bb:7f:23:12:0a:06:6b:82:ed:1d:76:9f:8f:ed:
95:61:fb:91:d6:02:07:03:30:02:c3:36:0b:75:d5:
ff:1a:9b:b5:e8:ae:d9:24:70:6a:fc:af:00:05:0f:
aa:6c:8e:24:c1:92:d8:2b:eb:f7:dc:5e:d9:0a:66:
75:92:80:a0:cc:36:b9:d9:54:3a:6c:95:63:c0:cd:
14:5a:05:e3:55:dd:9b:8b:ba:ed:cb:c4:b6:c6:23:
e9:a7:0a:14:d4:22:f0:31:cc:bb:ea:5f:4d:b7:4e:
4f:d7:23:4f:e9:fc:26:b6:ea:07:96:df:6e:80:65:
e9:77:e8:04:a6:94:0b:66:2a:e3:c2:76:d8:ea:39:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:86:BE:BE:0D:5E:B9:AF:6F:DA:AD:5B:E6:33:18:E1:7A:F0:30
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:00:31:9f:e7:2c:99:24:d4:3e:a6:04:1a:28:38:bc:e7:
57:60:1a:7a:df:0b:36:84:5c:83:1f:06:9c:26:3f:cf:b4:c8:
4d:75:c2:a0:58:c6:9e:2b:d0:56:4e:cd:cd:bb:94:70:6d:26:
53:19:70:85:09:76:be:2d:85:ae:7a:ce:cc:7c:9c:bd:26:92:
c0:c3:ce:7a:94:e4:23:32:d5:19:63:78:3c:04:be:0c:1b:88:
dd:4e:7e:83:bd:d7:66:55:ab:48:4c:b5:60:08:c0:2f:ce:ea:
41:1f:65:c4:b9:02:4b:db:e9:be:51:eb:60:61:46:cf:b1:96:
35:bb:9e:c9:0c:4f:92:40:36:27:cb:7c:0d:9d:3d:67:29:97:
43:58:50:f8:7b:c5:46:ed:81:da:99:f7:5e:d4:51:e3:72:cd:
0b:f8:d2:2a:b4:b4:8d:7f:d1:28:af:b1:4f:8a:28:5b:04:8e:
35:33:e2:85:ce:11:39:2e:f8:7b:46:0f:e7:ee:b3:7a:95:e0:
fd:17:fe:e7:4f:4e:1a:bd:33:0b:45:f0:2a:d3:fb:5c:0f:7c:
4d:bf:f6:e1:a0:8d:55:0c:3d:a3:54:07:be:bd:26:f7:27:21:
06:0b:4a:4e:41:cc:3d:2b:bf:b7:71:94:fd:10:98:36:fd:2a:
2d:6f:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:57 2026 by rpki-client