Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: lPHxZkrxht577XIuPrAUhntu6xjKZEvGe27USsGSvnA=
Subject key identifier: 67:5A:1D:15:DA:A2:B8:2D:8A:C4:A0:1F:74:71:8A:A1:8B:34:38:E6
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019F8F7E5BA149E6E2D0F17576ECC0135935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0CF5
Signing time: Thu 23 Jul 2026 15:00:50 +0000
Manifest this update: Thu 23 Jul 2026 15:00:50 +0000
Manifest next update: Fri 24 Jul 2026 15:00:50 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: hlx93zzvEPHoMeqlBwo+JYXyb+zOT4tWoSpJc8rCOGE=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:5b:a1:49:e6:e2:d0:f1:75:76:ec:c0:13:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Jul 23 15:00:50 2026 GMT
Not After : Jul 24 15:00:50 2026 GMT
Subject: CN=675a1d15daa2b82d8ac4a01f74718aa18b3438e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:88:f2:3a:23:f8:34:a1:27:48:13:0a:cd:
4c:67:12:de:4b:a4:ab:a3:35:2c:e9:b5:3e:9b:86:
65:6b:d5:63:3f:f9:ad:f1:51:ae:65:b1:fc:7a:70:
52:19:4d:5b:c1:34:03:3b:fc:fb:28:70:4e:06:e2:
e3:6d:b6:40:66:67:52:dd:58:37:23:eb:38:dd:b5:
0c:92:ca:44:26:ff:e8:2b:6f:82:f4:18:7d:a3:ff:
83:fe:7e:bf:48:23:69:f0:87:95:a7:47:a7:12:d6:
27:cb:1c:ce:52:9a:22:af:85:1e:eb:e9:02:e4:ae:
f6:b8:12:0f:93:92:f9:dd:d8:09:2e:bc:58:56:da:
ca:41:a2:3c:7d:ba:fe:24:f1:38:53:a9:5e:7d:49:
bc:23:aa:c9:4c:b4:7e:e8:84:52:35:86:34:36:26:
37:40:3e:ff:d9:4f:5d:a8:9f:05:f7:f9:06:bf:14:
63:ac:c2:af:7a:57:80:9a:ab:e6:ff:bd:63:55:cc:
29:85:da:17:1e:9f:45:fb:48:2d:fe:55:a3:a1:5e:
45:03:e4:b3:08:90:60:3a:ea:60:bc:f0:16:b6:95:
53:fe:73:b1:2b:74:c6:44:eb:e3:20:e8:79:32:9d:
be:5d:34:6f:d9:0a:41:17:90:52:f4:db:e1:3a:6d:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:1D:15:DA:A2:B8:2D:8A:C4:A0:1F:74:71:8A:A1:8B:34:38:E6
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:11:aa:c9:cd:86:52:58:99:2f:b8:ea:ce:81:24:22:d2:
7a:70:a9:5b:43:4d:19:fb:55:08:71:57:d5:bf:6d:05:b7:7b:
81:04:57:bc:48:42:3f:c1:3e:5f:48:4d:43:f0:ae:9c:b9:d9:
a5:6b:72:4c:55:a3:72:31:a2:f8:ad:37:6b:6b:d4:6b:30:eb:
41:25:b1:1b:e7:60:aa:d2:5c:3d:81:11:cb:fc:95:f0:4a:06:
07:b7:5a:a0:cf:42:89:30:5d:fa:c8:6c:30:89:98:6a:83:c3:
56:f3:aa:b3:13:6b:d7:f8:47:8b:5c:d3:20:1e:3e:6d:d5:ff:
8c:81:fc:7a:04:ff:24:51:02:87:e9:b8:61:a3:b5:f1:c5:95:
bf:a4:a8:15:7d:4b:20:7d:ad:9e:a8:40:ee:55:c7:7c:ea:ab:
18:eb:64:2d:62:8b:87:f6:be:6a:35:4e:73:85:61:cb:c7:a5:
5b:b9:b0:24:e4:ed:e3:7f:66:b9:01:66:64:9c:a2:05:23:65:
ad:eb:a5:33:22:09:74:00:55:8d:3e:bf:97:b8:2a:d6:9a:58:
26:79:c4:4c:fb:b6:eb:00:bb:d9:f4:8f:03:17:e9:74:5a:ee:
8b:48:2c:9d:b3:05:dd:31:81:d7:53:25:e8:5d:fd:75:f4:fa:
08:09:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:41 2026 by rpki-client