Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: 7Nv20p5d3+WIK2kVtwytYBrUyhkJoTTipjLoZK40g64=
Subject key identifier: CA:EE:0F:69:64:31:74:70:80:27:50:F5:54:78:3B:2A:1F:19:91:C0
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 019F8FEBC376F236FF4C97939CF3A32DA168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 0A20
Signing time: Thu 23 Jul 2026 17:00:20 +0000
Manifest this update: Thu 23 Jul 2026 17:00:20 +0000
Manifest next update: Fri 24 Jul 2026 17:00:20 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: 8LCkyiaOswyWPNeeNgZ50v4bejzBJlIf6cHUcg0iv4Q=)
2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:c3:76:f2:36:ff:4c:97:93:9c:f3:a3:2d:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Jul 23 17:00:20 2026 GMT
Not After : Jul 24 17:00:20 2026 GMT
Subject: CN=caee0f6964317470802750f554783b2a1f1991c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:55:ae:25:ce:e6:25:55:c7:6e:6f:8a:15:
d2:4f:7c:dc:6b:fd:94:2a:98:ff:3e:8a:14:06:05:
38:e2:35:ac:e8:f7:12:cd:d3:5f:e6:23:34:95:27:
df:33:2a:52:49:fd:14:2d:63:6c:0d:d4:64:51:06:
b5:4f:94:e2:58:07:96:c4:99:7e:02:4c:b0:fb:3b:
85:12:61:2b:66:44:33:ee:c7:39:0b:47:54:f5:3e:
d4:48:26:3d:9e:c2:6f:71:eb:ac:9e:0e:82:6a:cc:
ea:e0:dd:d3:37:41:5e:37:b3:bc:eb:22:fb:cd:c4:
60:6f:c8:9a:0c:fc:3b:7e:d2:2e:ff:2a:86:c2:4c:
76:b4:3b:98:36:68:4b:c7:c2:39:46:98:1e:cb:cd:
e0:a1:32:0c:1e:13:62:bd:a6:2a:a6:cd:48:22:5d:
65:23:77:13:6c:84:e1:1c:eb:34:41:49:42:64:a3:
31:08:2c:4b:ff:56:00:9b:85:24:9a:51:98:7d:d0:
b1:4a:f1:ef:89:40:49:5c:8c:a8:45:e6:b7:94:0e:
5a:77:7e:ed:22:07:4e:d0:07:3b:8c:62:8f:db:19:
cc:31:8c:3c:30:35:be:1c:78:6c:c0:67:7c:2d:97:
25:46:0c:57:69:a0:49:df:3d:34:69:24:71:d0:8a:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:0F:69:64:31:74:70:80:27:50:F5:54:78:3B:2A:1F:19:91:C0
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:10:b5:d9:ae:b6:c4:fd:d2:cb:82:b7:c2:fd:a4:26:b7:70:
54:35:21:df:18:9b:3b:74:e6:19:9f:ca:4d:30:64:f3:30:be:
c4:fa:d8:b7:66:d4:14:eb:67:c1:43:47:90:f7:8a:28:34:0a:
4f:a2:1e:21:13:28:03:eb:b1:bb:98:d0:0d:c1:f2:f8:9b:6d:
46:ef:a3:43:7b:bc:c0:e6:b7:2d:f0:f4:d2:a3:4f:47:15:70:
a7:7e:cc:8c:ad:7e:1b:6c:c3:a4:62:91:47:78:a3:d3:a4:aa:
14:2f:81:01:33:d5:3b:f8:06:83:9c:57:66:29:5a:25:a7:02:
2a:2a:2d:76:44:04:4d:2f:d0:c4:58:e6:f0:d7:8b:d7:df:94:
85:1e:61:40:52:01:f8:cb:63:51:00:e9:2f:40:23:60:df:12:
b0:7e:48:65:62:5e:21:0e:b7:2d:34:4c:41:52:f9:78:47:cc:
9a:8d:67:b7:2c:a7:51:42:7e:ba:86:6f:9e:c9:33:13:0d:f4:
d8:85:32:32:46:24:c6:97:8d:7b:46:fc:35:f6:17:f5:29:fa:
84:98:fd:1e:df:40:15:95:1f:75:36:57:00:24:8a:97:51:62:
91:10:9a:88:87:61:ae:8a:5c:cd:54:09:9f:f6:88:cd:18:43:
67:0c:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:37 2026 by rpki-client