Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: pIp6QRHyLA9S6KN1BGI0BJQ30RTzyh2HdDhJa74N0Ww=
Subject key identifier: D6:51:5F:3D:47:B1:5A:A2:F0:1B:A9:BC:09:F4:06:7F:23:D4:98:1B
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019F8FB4ED0263865F59D5C9E9309E30025C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1944
Signing time: Thu 23 Jul 2026 16:00:26 +0000
Manifest this update: Thu 23 Jul 2026 16:00:26 +0000
Manifest next update: Fri 24 Jul 2026 16:00:26 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: Pd/mb8moW0hlbfIOOSi+JfKpAXmuiGNcyeTlIqmw9b4=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:ed:02:63:86:5f:59:d5:c9:e9:30:9e:30:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jul 23 16:00:26 2026 GMT
Not After : Jul 24 16:00:26 2026 GMT
Subject: CN=d6515f3d47b15aa2f01ba9bc09f4067f23d4981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:4e:e1:24:38:30:b6:88:ae:3e:ee:f7:27:
52:5f:c6:69:cf:ad:11:18:f9:3d:6e:5f:be:df:ae:
39:0b:3c:7c:85:d7:48:25:97:ca:ac:58:d8:fc:d7:
23:69:23:67:4d:f6:6b:93:63:f0:ba:f9:d9:42:60:
e2:b0:91:ee:d3:3b:51:85:ef:c8:5b:bb:72:db:df:
63:96:14:10:46:c8:15:13:53:5b:36:d4:7a:cc:31:
12:ee:05:e5:b7:ea:db:55:fb:7b:52:8b:9c:18:4a:
ea:b9:8c:a3:fe:89:82:1a:87:6d:61:be:33:06:c3:
2b:88:82:06:30:fb:6e:f0:e6:57:91:84:31:b9:96:
71:22:f1:49:28:b1:65:22:24:00:ad:23:11:f5:05:
d5:a8:db:f1:0e:0e:31:95:7d:87:d2:4d:68:28:1c:
ae:9a:a2:6d:ee:f7:62:89:4a:bd:c7:33:9c:13:0c:
42:a0:65:b9:db:22:87:c8:72:0e:1a:be:50:cf:2d:
2a:df:36:32:47:76:0d:1c:e0:ec:af:d3:d0:b5:0f:
9a:02:db:6d:90:9e:c3:4b:44:3b:b5:71:b8:7e:69:
a1:13:f9:66:b2:d4:ca:cc:b0:a9:62:d7:c4:8f:c6:
9a:21:af:a4:72:cb:c6:e0:fb:6c:96:fd:f7:46:78:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:51:5F:3D:47:B1:5A:A2:F0:1B:A9:BC:09:F4:06:7F:23:D4:98:1B
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:5f:0d:aa:a0:7c:ad:b8:0b:86:55:a5:90:98:57:22:b8:
ae:f8:e0:eb:f8:51:4d:ba:d1:19:ef:d1:39:52:d1:6c:1c:51:
6c:4d:2c:60:83:40:37:40:01:47:be:53:fe:a4:ab:09:cf:62:
dd:74:b6:4c:30:dc:1c:64:7a:aa:40:93:c4:7a:20:45:da:46:
7d:0c:28:e8:e8:d6:f5:47:ba:b7:45:c6:fd:c2:bb:31:48:12:
b6:50:b6:b5:21:db:89:7b:ab:b8:f7:1e:f9:60:7f:20:d3:f1:
dd:4b:e0:45:ad:f3:7c:f3:c0:40:68:5c:e7:30:fa:70:7c:14:
2e:05:9d:ee:90:78:8e:ca:ae:4e:45:bd:f7:8e:2e:a3:f1:2f:
27:ec:ec:cb:e9:95:1c:03:0e:6b:7f:35:72:27:3d:73:4e:ab:
a2:cd:4b:a4:51:e0:15:57:90:e4:5e:21:9e:af:93:fe:88:57:
ab:5c:ca:22:b4:d0:02:a6:a5:03:a3:1a:6a:23:7d:a8:de:36:
30:28:36:03:f2:59:ed:71:76:ea:19:7c:ba:77:b2:b0:46:d8:
0c:4a:24:78:01:c9:1b:84:d6:29:00:69:4b:73:54:c1:1d:c9:
d5:73:f6:ae:0e:4d:1f:59:28:a2:3f:80:da:a8:bd:2f:81:67:
e4:61:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:34 2026 by rpki-client