Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: Tnb1VCHiaheB5DivJie0+SFUAi+TCptHQ772P4iyRjE=
Subject key identifier: FB:2A:0B:13:A2:80:F7:57:B6:A9:94:89:70:0F:68:57:75:2C:F1:E9
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 019F9090F6726E6EE9265DC8F2CF0BF46BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0E17
Signing time: Thu 23 Jul 2026 20:00:47 +0000
Manifest this update: Thu 23 Jul 2026 20:00:47 +0000
Manifest next update: Fri 24 Jul 2026 20:00:47 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: 1FhfkL6xg6B/uM8KSK/A79ChlyjjzJb3GbMtLN9WJp0=)
2: P79D1v19Ian523KEZhSWszXoZD0.roa (hash: XkrTvVGVwlwgPhzg8wu1CLzCIaP1i1FjUsoY2a47FY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f6:72:6e:6e:e9:26:5d:c8:f2:cf:0b:f4:6b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Jul 23 20:00:47 2026 GMT
Not After : Jul 24 20:00:47 2026 GMT
Subject: CN=fb2a0b13a280f757b6a99489700f6857752cf1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:8f:1b:0b:80:f4:b2:75:69:12:79:f7:99:
fe:bb:32:6d:8d:45:d1:d3:0c:8d:ac:f4:28:7f:7b:
6e:4e:20:c0:ba:81:1f:cf:d6:a8:2f:07:f9:ea:44:
a7:73:2f:fa:04:46:26:9a:96:fe:20:f0:1b:ca:11:
01:75:bc:66:61:fc:22:e9:d9:82:40:d0:d0:09:ce:
c5:94:cf:37:c3:82:5d:c7:04:01:26:0c:27:af:74:
33:aa:d0:99:e8:c4:f4:69:40:33:43:f7:99:d1:69:
03:63:ca:0a:8f:bb:1f:a8:a7:c8:23:99:df:2f:d9:
f7:2c:46:73:e4:cb:46:39:bb:0c:0d:32:5f:e5:1b:
64:ad:dc:ca:10:17:f4:7d:24:51:51:4a:a7:49:1f:
0e:32:66:a5:fb:11:fb:98:e2:cd:4b:18:fb:aa:09:
2d:d4:c2:6e:80:52:8f:ab:3b:ed:63:c6:55:3c:07:
f0:7b:33:c3:31:22:43:85:c1:63:0c:d9:eb:08:6a:
df:8a:51:23:6a:5a:a4:97:e7:0e:d1:8b:b6:d4:d3:
07:4e:45:98:6c:2c:3b:16:da:75:52:c2:32:c2:a4:
b9:5e:3a:14:74:5f:ca:4c:d6:51:b5:fc:14:1e:41:
d2:73:9d:53:f1:f1:c3:d6:77:0f:06:fb:da:3f:28:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:0B:13:A2:80:F7:57:B6:A9:94:89:70:0F:68:57:75:2C:F1:E9
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:16:35:14:dc:d0:c8:f8:d5:d2:01:50:94:b9:eb:12:82:b2:
14:3b:8c:4d:0c:fc:67:ab:cf:33:0e:c8:25:6f:4e:e0:ef:e3:
9a:b2:5c:f0:30:12:dc:06:72:5c:a9:f1:82:9c:e0:c6:34:e5:
d9:61:10:9f:49:bd:52:1c:e0:07:22:53:77:bb:23:38:4b:d8:
9d:63:ee:69:06:2a:c9:99:72:2c:eb:91:26:7b:48:d9:60:7c:
69:5b:24:ba:7e:03:7a:49:83:8b:bd:4c:b5:1a:7f:da:c2:74:
be:f2:64:79:8d:ac:e3:76:b2:0e:7a:c1:a8:0d:85:ae:46:d3:
46:66:94:dd:ff:b2:59:db:3b:1b:79:b9:73:b2:b2:6b:79:fc:
52:91:4c:5d:52:72:16:df:07:ee:bc:45:be:28:d9:29:0d:1a:
4e:2b:9f:1d:5d:68:0e:25:d1:49:d6:2f:cc:40:a0:86:4d:f3:
95:dd:14:c2:43:c9:b8:cc:67:3e:d1:bf:8c:71:a8:1d:df:b8:
f6:3c:4a:a7:b7:70:57:da:23:bf:b0:42:b7:f0:17:40:fa:f3:
4e:ac:4b:5c:03:5a:a3:38:3a:fd:0d:95:3f:9a:8b:de:0f:ab:
86:28:b9:1c:c8:45:e0:01:1f:2f:65:74:12:9f:0f:3c:e5:61:
fc:25:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:25 2026 by rpki-client