Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
File: 1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft (raw, json)
Hash identifier: l4uBS9TPOn5paEMf8M50msr7ZhrtFN4F0cvueguPGpg=
Subject key identifier: 9B:15:A0:38:90:7E:18:D8:E2:DC:B4:03:8F:C9:62:B0:B6:71:4F:0A
Authority key identifier: D5:B0:A5:EE:AB:3E:2C:73:C6:8F:0F:F3:E6:20:AC:4B:14:BE:34:C8
Certificate issuer: /CN=d5b0a5eeab3e2c73c68f0ff3e620ac4b14be34c8
Certificate serial: 019F8F7E699FF1DF6AC8423B3E1267F1F18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bCl7qs-LHPGjw_z5iCsSxS-NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:54 +0000
Manifest this update: Thu 23 Jul 2026 15:00:54 +0000
Manifest next update: Fri 24 Jul 2026 15:00:54 +0000
Files and hashes: 1: 1bCl7qs-LHPGjw_z5iCsSxS-NMg.crl (hash: a0zwwn5f+YHp9aS/APUFXpcbLg5FfsuwCzQCemSETOs=)
2: R0EcMBcCy6V-hFGWWa5yTokStQc.roa (hash: cLy7/dVcrDgQdBAd54oTe6onNv46S6Goh4UjbfZ2W8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bCl7qs-LHPGjw_z5iCsSxS-NMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:69:9f:f1:df:6a:c8:42:3b:3e:12:67:f1:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b0a5eeab3e2c73c68f0ff3e620ac4b14be34c8
Validity
Not Before: Jul 23 15:00:54 2026 GMT
Not After : Jul 24 15:00:54 2026 GMT
Subject: CN=9b15a038907e18d8e2dcb4038fc962b0b6714f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:cf:9b:bf:98:e7:2b:52:b7:bb:c0:81:46:
c2:bc:ae:2f:65:56:da:ce:47:0b:4a:ba:9f:36:b2:
4c:4c:d6:d3:78:55:c0:43:bc:49:ad:93:a1:30:2d:
2f:0e:12:d3:3a:d4:14:d9:50:d8:e8:05:33:39:5e:
78:16:47:e7:6d:71:33:30:83:bd:34:16:3c:05:6b:
e8:9c:8f:ed:b9:e2:c4:fa:70:ad:41:2f:2e:66:2f:
5c:da:51:1a:9c:42:2e:fd:bb:81:cc:20:15:44:8e:
e7:9e:4e:53:44:17:2c:b3:a8:7a:7a:6e:e2:64:5c:
89:ef:e3:c2:58:d9:09:70:3e:22:1e:1d:74:bd:c2:
6f:2a:ca:36:61:74:da:97:24:7a:ff:dd:8f:df:25:
05:13:bd:55:54:0b:e7:95:0d:e6:d6:d8:57:5f:5e:
ac:4a:79:ca:61:43:56:b1:96:ef:df:0f:d5:5a:32:
5a:3b:bb:97:94:c1:fc:42:e9:43:80:0d:c6:21:8b:
3f:7e:4b:98:16:80:2a:84:1f:9b:0b:a3:4f:2d:bb:
46:cf:0d:63:67:9c:e7:a9:5a:4f:c2:36:e8:39:11:
02:9f:d2:5c:a7:86:d7:48:fc:5c:94:a4:85:df:79:
76:ba:49:e6:d7:92:b0:b0:ea:1d:78:d9:b1:e2:b4:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:A0:38:90:7E:18:D8:E2:DC:B4:03:8F:C9:62:B0:B6:71:4F:0A
X509v3 Authority Key Identifier:
keyid:D5:B0:A5:EE:AB:3E:2C:73:C6:8F:0F:F3:E6:20:AC:4B:14:BE:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bCl7qs-LHPGjw_z5iCsSxS-NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:bc:96:a6:d2:54:8c:7c:95:11:96:3e:d3:54:97:de:4d:
40:25:95:4a:52:ec:73:04:6f:5f:6d:06:cb:6f:96:3f:7b:2f:
7e:63:b4:8a:9a:59:b2:74:84:68:0a:63:e8:45:46:0a:6d:19:
08:0a:e7:5b:ce:90:04:da:e5:2f:c3:6e:ef:3b:18:01:b3:6d:
ae:0a:e8:24:1f:a5:18:b5:ec:65:e6:97:30:4e:ef:01:30:a7:
77:9f:4d:01:c3:38:dd:38:9f:18:11:27:67:5d:fe:7c:0f:46:
f1:2f:92:e7:03:d8:77:cc:0c:9f:93:64:9c:6e:53:fd:c7:e2:
70:6e:75:6f:e0:ca:9c:99:fa:ed:55:8c:bc:c4:0b:4c:12:5b:
b9:c6:bd:0e:c5:2a:bf:5c:6c:fb:cb:4b:85:ad:bb:40:06:9e:
41:aa:19:f3:1f:82:97:e7:7b:b7:84:9e:0b:24:37:00:df:52:
01:1f:61:97:82:71:66:f0:89:7b:cb:6f:11:0d:df:6c:35:f2:
bd:52:38:06:04:e6:40:67:a3:af:74:6a:7e:33:c2:dd:ab:b2:
e2:3b:e6:65:73:47:61:3a:6b:7a:ba:25:bc:0d:c8:80:d5:51:
5f:f1:08:3c:fc:75:89:25:98:bd:09:f1:10:49:4b:cc:e8:7d:
e5:9c:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:03 2026 by rpki-client