Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: vzezcJ6Q0D6J2Lgex/RYyaZ3zwdXsLuIOeik3ZDSU/o=
Subject key identifier: E4:90:09:76:CD:48:0F:55:2C:4C:37:47:B5:FF:8F:03:85:61:86:87
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019F927EF025F232FF6BC1B4F7AF94BFB950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 09A8
Signing time: Fri 24 Jul 2026 05:00:20 +0000
Manifest this update: Fri 24 Jul 2026 05:00:20 +0000
Manifest next update: Sat 25 Jul 2026 05:00:20 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: xgspw0d7fNzpF5dZfgH038GqPbhlX5QJGFvCIVRA/Jk=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f0:25:f2:32:ff:6b:c1:b4:f7:af:94:bf:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Jul 24 05:00:20 2026 GMT
Not After : Jul 25 05:00:20 2026 GMT
Subject: CN=e4900976cd480f552c4c3747b5ff8f0385618687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:6b:25:fe:d6:10:b0:60:2a:6f:45:73:36:
0c:4b:87:25:9f:66:35:5f:eb:ed:cd:35:33:3a:3d:
f9:01:6d:df:86:a4:df:25:6b:24:eb:31:74:90:6d:
7a:e0:b1:81:38:9f:fb:98:71:b0:a3:a2:b1:75:82:
de:72:93:b4:15:f7:55:5e:1e:30:4c:54:ec:f3:0c:
6d:c8:eb:b0:54:66:df:1f:12:94:3e:6d:6f:c0:06:
90:8e:f8:72:b0:ab:5a:3f:80:aa:4d:5c:c3:c5:80:
aa:8f:e6:f8:60:d2:55:9b:35:49:63:20:04:23:43:
e1:45:fb:e1:ac:e0:59:bd:68:9b:e4:b6:46:df:ae:
77:2f:7c:8a:6e:ca:7e:0f:6e:c1:0b:33:8b:01:09:
c9:c5:7d:ae:76:a6:fe:af:a8:fd:72:3f:60:68:b0:
41:8c:98:a0:08:5d:f4:c0:6e:d3:c0:f7:f9:68:7f:
5b:00:72:82:1d:a3:96:66:de:2d:56:cc:0b:ca:5a:
73:61:16:a0:ed:fd:6a:02:90:08:52:f1:04:58:ba:
ad:a3:ed:61:59:b4:9a:99:98:e4:ef:6f:c5:cc:9e:
f7:1e:c0:bb:ef:3a:4c:b0:54:a5:ee:2c:e0:13:44:
65:8d:22:8d:72:2f:89:e4:6d:e1:5d:e5:57:41:57:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:09:76:CD:48:0F:55:2C:4C:37:47:B5:FF:8F:03:85:61:86:87
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:49:9d:47:a9:70:d5:a0:9a:da:45:c4:7c:e4:be:1e:dd:4d:
f8:97:18:ba:ff:c6:33:a5:e9:4d:b2:58:50:a9:bf:1b:23:16:
f0:c9:5c:9d:ff:c8:9e:a9:9d:7f:62:8a:67:af:e0:2f:ca:45:
a3:64:a6:77:7d:0c:19:4d:e0:fe:c9:94:52:e2:2f:d0:f7:1f:
54:02:d7:14:40:f0:78:5f:fd:bc:ba:f9:fd:2a:62:98:af:4c:
85:a4:bf:e5:b2:1b:6b:c4:f5:d9:83:c6:41:ba:30:ef:37:78:
0f:82:8e:00:7d:b0:b6:eb:ba:52:81:d6:31:1d:1d:55:40:1d:
e8:f6:b3:23:b6:3a:55:b7:24:f6:7a:f3:d5:23:8e:77:fd:09:
29:92:92:cd:56:c7:5d:6b:2b:cc:75:82:ba:3c:60:77:e0:f8:
80:74:b5:e8:23:d2:4f:f0:65:1a:7d:b9:ac:2f:51:15:39:7c:
79:00:b3:2e:11:dd:26:19:34:42:f4:6c:c3:64:21:70:7b:da:
3d:16:85:64:7a:8c:88:3b:ba:4c:65:d3:3a:c2:b2:4a:20:8b:
e2:bb:4a:7f:f1:38:a0:62:c7:c9:e0:08:a0:23:6b:6a:53:94:
4f:37:77:85:a4:f1:5f:00:1e:b0:19:70:33:c5:e4:44:68:08:
38:f7:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:36 2026 by rpki-client