Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: n+mf3Oo7fTRsdq3nWkrOttUEUaogQRbfkOx0kT7QdiE=
Subject key identifier: 85:86:CE:5C:69:6F:A7:B7:07:2E:64:8E:AD:F4:2D:5B:85:B7:99:CA
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019F91DA6D6A473F0C120596E4E3E4B933B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 136D
Signing time: Fri 24 Jul 2026 02:00:38 +0000
Manifest this update: Fri 24 Jul 2026 02:00:38 +0000
Manifest next update: Sat 25 Jul 2026 02:00:38 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: UX0haunmUScjfQw+viQe3/ZWd36BMvb6p5zIRAsy1zc=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6d:6a:47:3f:0c:12:05:96:e4:e3:e4:b9:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jul 24 02:00:38 2026 GMT
Not After : Jul 25 02:00:38 2026 GMT
Subject: CN=8586ce5c696fa7b7072e648eadf42d5b85b799ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:cd:7f:6f:6e:07:8a:75:28:20:bd:d9:11:
61:49:d6:e0:f2:e3:47:48:e3:95:46:89:99:3f:39:
ad:e9:55:84:25:b6:aa:63:36:b7:71:4c:88:8b:3a:
6e:ad:e9:50:74:ea:2c:34:0e:db:b2:7d:85:46:ab:
a3:58:df:37:15:f8:6d:42:4f:7d:8c:06:51:df:df:
33:7a:2c:88:6d:79:3f:55:46:fe:87:06:69:e7:e7:
24:d9:22:dc:69:d4:f4:b8:79:9a:c9:4c:d5:a2:ac:
4d:7b:ff:0d:cb:55:9c:2a:de:94:87:71:2d:5c:e5:
f9:9a:92:ea:59:12:45:15:eb:66:bf:59:58:a9:91:
0d:03:aa:b6:f1:e3:a3:f8:91:53:50:ba:db:23:73:
63:19:b4:f0:fc:73:47:2a:71:ab:df:31:7a:d3:ec:
bb:09:c9:37:92:a2:4b:9b:21:4b:f5:44:37:36:67:
d3:b1:d4:db:da:a9:b1:76:d0:6f:3d:26:cd:11:28:
33:6b:57:78:1b:33:e3:59:0e:f4:c3:03:d9:e6:7f:
6f:dd:c7:cc:ab:c6:5e:ec:a6:35:ac:3c:18:e2:54:
57:a8:35:54:3c:18:af:9d:c2:ab:fb:91:b9:18:df:
ba:81:0c:a7:87:ab:37:2a:fa:fc:fb:52:b3:a7:ff:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:CE:5C:69:6F:A7:B7:07:2E:64:8E:AD:F4:2D:5B:85:B7:99:CA
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:c9:0d:b7:1d:d8:5e:74:96:63:ec:69:c1:a8:a0:60:f2:
16:1a:02:4d:09:31:84:a0:f4:44:92:69:5b:d3:5e:dc:db:bf:
5c:49:96:39:7d:6f:51:12:fb:7c:1b:91:ec:2a:87:00:47:45:
0f:e8:c8:4c:59:26:d4:09:98:b9:60:a0:e6:72:d4:f6:58:a9:
73:6d:77:88:d3:4e:6b:00:01:13:ce:30:91:43:8a:ff:86:8d:
a3:a5:f9:c4:6e:81:b6:a5:6d:79:ff:95:b8:e1:ae:ee:da:6a:
46:5c:6a:29:cc:a6:f7:6b:a8:5d:bc:8d:56:2b:04:af:21:6f:
cb:cd:62:98:a0:22:08:33:c2:2c:9e:93:41:8f:a5:ee:e3:e9:
0c:66:c9:96:31:65:a0:ab:b1:4a:0f:32:69:b2:17:86:bb:9c:
46:ba:e1:f4:e5:5d:2b:32:41:16:c4:d8:a8:c7:e0:09:f0:7a:
37:6e:58:36:5e:6e:1f:58:a6:d9:55:7a:14:09:0c:3d:d9:18:
0b:ec:d8:7c:b4:82:72:15:2b:ba:dd:b1:b9:50:bf:7a:5b:11:
79:32:3c:e0:39:12:84:53:4f:3d:a7:d8:a1:dc:27:31:53:18:
bf:1d:60:2f:cb:50:3d:43:82:49:f0:c5:60:b3:fb:a5:a9:21:
25:c8:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:22 2026 by rpki-client