Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: vicOdsIGFKx2UWuAW8DwlI25n9P8gGpSid/Q41RHhkM=
Subject key identifier: B9:93:36:4F:A4:66:FB:5F:16:5F:9D:72:A6:04:98:41:1F:32:7F:53
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019F935BFDED33346AC400FA4EFE243BB900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0810
Signing time: Fri 24 Jul 2026 09:01:47 +0000
Manifest this update: Fri 24 Jul 2026 09:01:47 +0000
Manifest next update: Sat 25 Jul 2026 09:01:47 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: O5b5IbOyTsuTZoVWjyAi4cevcn/96nNRxToJuBoqS1g=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:fd:ed:33:34:6a:c4:00:fa:4e:fe:24:3b:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jul 24 09:01:47 2026 GMT
Not After : Jul 25 09:01:47 2026 GMT
Subject: CN=b993364fa466fb5f165f9d72a60498411f327f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:d0:35:6f:0c:5e:fb:52:7d:ef:0f:29:2c:
75:96:ee:15:ac:27:0b:93:bf:75:62:18:99:09:7f:
a4:15:59:b7:ad:ce:8a:ac:08:04:80:41:b9:bf:b6:
43:e1:b4:98:ce:34:f4:e7:6c:4f:42:8f:9e:8c:07:
2a:76:79:a0:0a:c6:37:f4:9a:2e:2f:33:60:cf:ae:
be:9b:36:c4:55:dd:20:fd:ff:f4:16:7b:58:5e:0d:
2c:44:6e:d4:96:45:c6:8a:07:89:12:cb:30:9b:8f:
b6:37:6a:59:c4:19:fd:6b:d7:a0:c1:e8:f3:be:6e:
30:57:31:fa:06:7e:21:42:d6:4a:17:5c:19:50:e4:
ef:7a:ec:5f:1e:dd:f5:99:c8:4c:f8:9e:a2:66:db:
c1:06:3c:8e:71:c3:39:63:2d:09:0d:cc:bf:42:ef:
7c:b5:18:1b:dc:d1:7b:2e:5c:92:52:ed:24:3b:77:
7f:00:f7:69:24:b3:32:f9:4b:c8:e0:db:c4:8b:df:
fa:34:17:4b:01:9e:08:70:ab:3e:a5:d4:01:a6:b6:
cb:f4:00:4c:67:f1:a3:97:fc:47:0d:eb:85:ba:82:
7f:66:6b:0f:f5:8e:ba:25:83:fe:91:a3:1a:3f:c8:
44:f6:64:1d:e7:a3:7c:00:2d:f7:1c:b1:69:78:07:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:36:4F:A4:66:FB:5F:16:5F:9D:72:A6:04:98:41:1F:32:7F:53
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:c2:a5:50:a9:a2:77:83:c1:2d:51:e8:e1:6b:c8:ba:1b:
49:fe:db:43:b4:9f:2c:96:90:e1:16:0a:80:dd:16:d3:c2:7e:
8f:15:8d:5f:86:e7:38:e6:5a:20:27:81:0f:a6:67:6f:d5:8d:
df:c4:2f:89:4f:16:71:fc:90:ef:a4:98:13:e8:97:9c:cf:6e:
72:9a:66:6a:08:aa:1e:1f:02:3c:ca:ce:bc:81:91:fd:a6:61:
86:12:8b:6b:cc:85:ee:3d:aa:2d:92:56:5e:8c:14:be:4d:09:
87:c9:9a:cd:b8:c5:2b:a7:69:a4:74:10:c5:2e:82:15:6b:02:
5b:03:c6:98:55:8f:4d:4a:86:fa:ca:1c:1a:8f:26:67:5a:43:
e2:db:5c:d0:e2:29:27:0c:27:3a:db:4e:eb:68:3a:72:e0:e3:
43:7b:c6:40:29:50:5d:22:26:a9:28:0f:26:d2:38:53:02:d8:
3e:49:ad:aa:c3:4e:c3:04:da:ef:cc:9e:7e:fd:82:13:af:b3:
04:bb:53:05:cf:f0:b9:dd:db:7c:8d:5b:aa:b4:17:d6:67:a3:
b8:77:7c:d7:fa:0e:70:26:93:e1:62:93:ec:5b:e2:d4:42:d7:
d6:2e:66:e6:5d:49:b8:0b:7e:cd:2c:d1:4a:fb:53:c3:fa:a1:
9c:e1:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:40 2026 by rpki-client