Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: MpKLJra9Mwr7xjNhQtfrz9G4aSr+mXXrncaN3RLykRg=
Subject key identifier: EA:FE:9C:4D:4E:07:8E:D2:66:3D:41:BB:D7:0A:81:91:A4:55:B1:59
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019F90FF86985C56FAA0519F42ACFC6C24D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0BB4
Signing time: Thu 23 Jul 2026 22:01:32 +0000
Manifest this update: Thu 23 Jul 2026 22:01:32 +0000
Manifest next update: Fri 24 Jul 2026 22:01:32 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: e9QG50CuCMSJIEGP7lLjxjRiUd4tLOkjwfQUTpdzI2A=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:86:98:5c:56:fa:a0:51:9f:42:ac:fc:6c:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Jul 23 22:01:32 2026 GMT
Not After : Jul 24 22:01:32 2026 GMT
Subject: CN=eafe9c4d4e078ed2663d41bbd70a8191a455b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:58:f3:29:d8:5a:f2:0a:2c:d7:53:df:d5:
ce:20:49:b4:59:11:04:0e:58:aa:ed:86:42:a5:96:
21:74:d5:96:82:ab:45:d0:18:6b:23:91:90:6c:66:
d2:27:7c:59:5f:f2:48:e3:e9:c9:63:38:18:9a:fe:
dd:90:5d:18:c2:43:d7:a3:c8:f0:cb:3b:d5:47:59:
0f:50:9a:43:e2:8d:eb:33:13:96:8a:e2:94:3a:82:
c9:61:e7:40:5e:5c:cb:f4:aa:8d:5f:13:1b:66:a6:
e3:75:d7:72:a0:42:63:85:8f:e6:4d:9d:40:87:89:
56:db:25:5d:53:0d:37:a1:be:34:4b:f4:f0:65:2e:
f0:57:09:cd:9c:3f:08:ed:5d:f2:7d:56:bb:4f:33:
8e:c8:7e:36:39:02:a2:85:8c:e2:95:be:2e:36:b8:
f2:03:4f:a7:a3:95:35:e2:2e:ae:90:41:c9:44:82:
ea:34:a4:05:9c:0c:a9:83:f6:3b:32:25:e7:a3:9b:
9c:c9:a9:b0:72:65:fd:0f:5e:05:6a:b3:41:34:e4:
a0:f6:9f:81:25:c2:3d:1e:f9:74:51:ee:17:f8:c5:
8c:91:5d:aa:37:80:62:67:58:ff:dc:54:2a:de:15:
0c:01:c4:cc:ea:e8:6f:83:9f:5f:7e:9b:58:19:73:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:9C:4D:4E:07:8E:D2:66:3D:41:BB:D7:0A:81:91:A4:55:B1:59
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:39:a7:6a:dd:af:65:81:20:aa:65:80:fd:6b:e0:33:05:
28:c8:35:48:27:50:f1:ae:ba:fc:ef:ee:ae:87:f8:bb:f4:ca:
a6:38:60:72:bf:f4:19:9b:27:f6:93:f8:53:99:92:50:a6:d3:
2e:e8:28:44:80:11:d4:4e:2b:63:07:4d:5a:56:30:a2:51:a6:
8e:d7:33:c5:31:d8:f1:ce:e2:97:90:55:dd:e7:d9:9a:61:20:
e1:bb:e5:ff:c9:a9:7c:a2:27:c1:64:2c:2f:66:cd:1c:82:70:
e9:3f:f8:0e:d3:26:b5:8c:c5:91:c6:39:2f:de:34:5f:00:20:
88:1c:c2:ba:fd:15:33:b5:76:b3:b1:91:9a:8d:4f:bd:32:45:
17:8c:f5:3a:09:03:7f:ef:b2:b1:db:e3:78:ac:bf:08:ce:f0:
f1:45:65:c9:87:57:84:c5:91:af:f3:e9:ac:28:b0:2d:d4:e9:
7c:7f:6c:98:cf:fe:f7:c3:47:0a:69:4c:54:76:a8:d7:6e:99:
9d:66:b3:90:cd:1e:9e:61:b8:8c:1e:c3:98:d0:66:ea:ac:7b:
ae:2a:4f:b4:56:68:f1:7f:46:59:6c:1c:3b:d3:22:4d:71:63:
a4:91:d3:c9:75:ab:94:26:6e:ea:48:1f:8f:69:39:0c:a6:b6:
54:71:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:44 2026 by rpki-client