Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
File: 1-ItEPpksZlZYlC5okNKY1ozeZCU.mft (raw, json)
Hash identifier: RHb7jjnLYUJUJd6HE7zmS4VU6NQ3LFMOuEQIDrYRVzQ=
Subject key identifier: 60:F2:BA:5F:93:FF:D0:C4:63:9B:65:8C:30:72:2F:DC:99:71:5E:20
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 019F946E53466B1881519C3DBCFDD969A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
Manifest number: 0175
Signing time: Fri 24 Jul 2026 14:01:25 +0000
Manifest this update: Fri 24 Jul 2026 14:01:25 +0000
Manifest next update: Sat 25 Jul 2026 14:01:25 +0000
Files and hashes: 1: 1-ItEPpksZlZYlC5okNKY1ozeZCU.crl (hash: Eqhd4JcFT1KS999+vGBw1PpeeAOnBn6NX4YgfhsDxBg=)
2: 560UvqVud9DEuhQPr1x60Rz_4no.asa (hash: R22iZnCp/y6i8IZet00/Fkh5m7KFKy8c2ikVMY1ramc=)
3: Kf9QvVgVrtl0XM8frEpJ_fd4yfM.roa (hash: fg4f8lm5urIblTtWM6P0oF5ZkLFnBYAOFc4g9paZJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:53:46:6b:18:81:51:9c:3d:bc:fd:d9:69:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Jul 24 14:01:25 2026 GMT
Not After : Jul 25 14:01:25 2026 GMT
Subject: CN=60f2ba5f93ffd0c4639b658c30722fdc99715e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:f2:f6:02:c3:56:d3:c1:85:d1:3d:e1:fd:
9e:a7:be:03:e8:56:78:af:34:22:91:b2:e0:6c:b8:
1c:82:4e:85:4c:49:7a:1e:75:62:7d:33:06:13:94:
18:ef:0c:a9:e4:e4:4c:75:2c:86:92:a1:8e:d3:d1:
c7:e7:93:57:ed:72:48:2a:aa:27:2b:72:48:dd:80:
7d:58:af:5a:3c:6c:bc:91:84:56:06:7f:60:1b:00:
43:0f:5f:47:72:23:6c:ef:27:1b:4f:df:f8:40:e7:
b5:dc:cd:11:40:10:39:f4:13:74:66:92:cc:04:73:
c4:a2:d9:eb:4d:f0:da:90:3a:51:4e:6c:4a:64:7c:
e8:6d:7a:64:35:d8:b6:79:6d:77:11:c2:72:8f:f9:
cf:7a:06:bd:89:b2:17:5c:0c:87:75:5c:6e:ec:e0:
db:16:91:ef:56:cb:f2:49:e4:9d:a4:2d:cf:f5:df:
b9:a3:7b:e9:8a:bf:1b:7c:13:58:d9:e9:19:9e:8a:
43:a7:0b:67:3c:fe:8e:67:74:58:06:43:a9:11:0f:
08:82:b7:cd:77:c1:c0:d5:03:4e:56:3a:76:5f:3b:
37:e4:84:e1:75:e8:67:4d:96:02:81:57:73:eb:64:
d1:4b:c5:cc:74:b2:f8:0f:8c:63:c6:71:ec:c5:45:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F2:BA:5F:93:FF:D0:C4:63:9B:65:8C:30:72:2F:DC:99:71:5E:20
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ab:65:d6:a7:11:39:8c:f2:1d:60:53:be:92:dc:62:7b:b6:
9b:8c:5b:3d:d4:23:9d:d0:a0:23:b7:5c:07:bc:0f:1e:74:32:
e8:8b:cd:7d:e3:04:45:bc:56:8f:f9:88:84:dd:f8:fd:14:f2:
99:0f:e2:31:ea:a7:a9:e5:5e:ba:b2:f3:fd:cb:19:77:26:14:
3c:f3:4f:31:29:f0:ad:f8:9f:27:5d:77:a8:41:02:3e:33:2a:
6c:46:ad:48:8c:41:da:f8:12:c4:b6:46:33:27:78:9d:f4:25:
7a:6d:24:ff:4d:ca:33:04:8a:cf:f9:f3:b0:79:02:59:0e:75:
82:89:43:ae:f4:21:bb:ac:ad:de:5c:54:27:22:0c:11:bc:b2:
5f:1a:05:c6:dd:25:ce:60:d4:11:0a:99:a9:41:30:b2:db:ee:
ad:cc:22:17:e8:d5:2a:bf:f7:1c:15:3a:bc:1b:a2:9f:ad:0f:
b6:72:a4:18:c8:9e:a9:a7:dd:ce:ae:b2:89:f3:e4:3b:5c:65:
75:f9:4a:f8:47:af:82:5b:9f:d2:d1:a0:6f:b1:fe:79:07:39:
01:5d:f8:d6:da:74:f9:71:34:40:cc:17:26:e0:79:72:d0:20:
03:7f:52:03:f3:a0:ae:b2:f7:24:e6:2a:a0:51:b0:be:c8:f7:
dd:18:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:56 2026 by rpki-client