Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: ixih8fRF1F4by/e3vwaX82K5l0aLVmzbL0BbNRpnP58=
Subject key identifier: FF:70:7C:3C:0F:CF:A1:8A:67:42:6C:0F:33:8F:E7:52:92:7B:7B:15
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019F921183AAB7657D10A6C4CBBB179D6D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0AB0
Signing time: Fri 24 Jul 2026 03:00:49 +0000
Manifest this update: Fri 24 Jul 2026 03:00:49 +0000
Manifest next update: Sat 25 Jul 2026 03:00:49 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: LGVQQ8/BkzLjIdmIfyZUiETrizIJ8S7xtJFLx+Brmxg=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:83:aa:b7:65:7d:10:a6:c4:cb:bb:17:9d:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Jul 24 03:00:49 2026 GMT
Not After : Jul 25 03:00:49 2026 GMT
Subject: CN=ff707c3c0fcfa18a67426c0f338fe752927b7b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:fc:17:e5:88:c8:60:e5:3a:32:7e:79:18:
43:5a:0d:2d:a5:8c:18:d7:bd:0b:50:20:72:1b:ae:
51:1b:34:2e:63:bf:ff:ae:cb:b8:c5:b8:59:35:eb:
46:eb:56:89:b5:9c:63:eb:6b:df:cc:37:01:78:8c:
e8:d4:85:15:09:c3:a4:ee:c4:96:43:24:0d:0e:f7:
92:65:a0:3b:0d:f4:7d:e1:0f:6c:e5:1e:bc:d7:96:
26:1f:2f:81:e5:d6:d1:ca:87:5f:dd:c3:00:38:dc:
bc:de:fb:95:2c:2b:44:52:22:28:19:66:e5:f8:1a:
28:b3:25:78:05:20:1a:bf:cd:d7:38:27:72:8f:50:
fa:28:8d:86:c2:2e:89:b5:9b:ad:a2:26:34:b6:b4:
f1:66:97:a9:6a:b1:5f:71:2c:8d:7e:80:95:df:a6:
fb:f0:9e:6d:85:f3:00:e8:80:04:68:2e:9c:ab:d2:
4f:8a:c9:9f:8c:c2:0f:15:6c:1b:fb:5b:b8:a7:40:
de:92:f2:78:f6:db:41:52:b3:f6:52:5a:ac:6b:f3:
80:42:79:85:30:33:c4:6b:4d:34:24:d4:42:65:40:
3c:55:50:5c:aa:2c:7d:5d:97:02:94:97:cb:ca:df:
33:93:73:e3:f8:e6:c2:37:74:a6:95:6c:47:65:9b:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:7C:3C:0F:CF:A1:8A:67:42:6C:0F:33:8F:E7:52:92:7B:7B:15
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:58:58:d3:83:32:bd:ad:12:02:dc:d5:b7:33:12:d3:57:c2:
bd:0d:dc:cb:9a:11:f2:7d:1c:2f:c7:32:55:68:0f:94:dd:c3:
ad:ca:ed:b5:db:ce:7f:ff:e3:54:dc:81:bd:c5:29:b5:0d:f0:
fb:ff:a0:21:30:80:46:44:9a:9e:73:f2:19:9d:23:58:ac:97:
9b:f7:67:21:de:6a:24:e1:ff:c5:7b:a4:0b:74:88:56:bf:79:
e0:ba:d0:df:8b:c0:b2:28:b2:eb:54:2a:3d:53:6f:84:6d:11:
2f:0b:9c:25:c5:4c:42:5b:1f:ab:cc:0d:50:e4:56:c0:1f:8f:
68:dd:aa:81:c0:41:0e:b8:93:17:8e:7d:6c:5c:ed:86:d3:cd:
7a:86:b1:2e:08:d1:87:d7:3f:ef:c0:66:46:af:57:74:bc:6b:
00:36:d2:3b:48:b8:08:11:b7:c2:52:f5:19:bc:18:4c:7d:82:
bf:7b:e2:0f:24:e4:55:77:58:b3:eb:cd:d1:66:2f:5f:bb:06:
c9:11:c4:cf:c0:cc:a7:40:ef:67:51:a5:48:95:4a:be:4b:13:
3d:e3:0a:1c:c7:97:52:ce:99:48:9a:60:0c:79:c4:4f:ee:27:
59:f2:e5:6c:fc:eb:fe:3a:18:a1:88:e8:29:66:20:11:3c:3f:
d3:58:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:59 2026 by rpki-client