
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: J68cpB3vGtcCVmrgrhGcQcDy+6feoSzzrgl+O/Q/BH0=
Subject key identifier: A3:F8:55:61:22:10:F1:FB:78:BC:5E:A2:EF:70:FD:5B:C6:42:15:45
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 019F8FB588418081715542ADA9C3C9809F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 109C
Signing time: Thu 23 Jul 2026 16:01:06 +0000
Manifest this update: Thu 23 Jul 2026 16:01:06 +0000
Manifest next update: Fri 24 Jul 2026 16:01:06 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: yqpQ4B12gnG/yasEcpDTk0t4LF5/W5XbMiCY8hUaQjA=)
2: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (hash: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:88:41:80:81:71:55:42:ad:a9:c3:c9:80:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Jul 23 16:01:06 2026 GMT
Not After : Jul 24 16:01:06 2026 GMT
Subject: CN=a3f855612210f1fb78bc5ea2ef70fd5bc6421545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:ed:42:6a:76:d5:9d:08:d8:77:82:ae:f6:
72:2c:9a:49:01:aa:ef:8b:83:36:fe:88:b0:26:1f:
5d:3e:aa:2e:9f:56:0b:f6:94:c6:22:36:16:23:65:
96:88:4a:c9:e7:f2:09:a6:94:d6:8c:49:7b:37:e5:
50:a6:03:76:3d:70:eb:ba:cc:73:bd:78:f8:d4:b3:
1d:10:7e:7d:61:2b:d4:64:66:5c:d5:5f:b3:10:b2:
4e:11:3f:d3:67:dd:46:50:b8:f0:96:30:14:50:4a:
6f:da:f4:8b:ea:aa:a8:b3:b5:2d:d7:ee:df:07:53:
f3:67:51:98:f8:d5:3f:01:21:47:f0:f4:30:75:73:
6b:0b:38:dd:7d:c7:c1:ba:61:69:a9:e2:fe:ec:69:
c9:3d:4f:57:f6:e0:0e:37:17:a6:2b:cc:07:2c:b0:
18:01:29:81:aa:d5:8b:aa:2c:48:62:b5:2f:ff:60:
d3:43:4e:5e:53:a2:ea:b3:40:9b:6b:b4:b3:40:00:
24:09:d9:14:e3:cf:3a:59:e9:e8:7d:c7:68:81:db:
fe:08:19:48:41:6d:3b:c1:a5:77:57:c5:09:ee:69:
dd:76:7f:2e:de:1a:db:f1:31:b6:2c:c6:1a:37:a0:
9b:8a:d2:d1:c4:c9:fe:eb:8b:71:ef:86:3d:5d:e7:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:55:61:22:10:F1:FB:78:BC:5E:A2:EF:70:FD:5B:C6:42:15:45
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:14:c1:97:f0:e1:c2:78:ed:8a:f8:14:5f:71:f8:81:1a:
cf:15:a2:72:f8:fd:19:40:e6:c4:bc:c8:19:42:df:10:1b:11:
ad:fd:71:e9:9d:05:50:d9:63:54:93:45:24:e3:b6:92:d2:af:
8d:62:bf:6d:4a:72:cf:44:5f:e5:ae:0a:5f:db:b5:d3:f1:85:
22:48:3f:ee:58:72:d8:7d:18:7c:f9:a6:1a:5f:e3:07:5f:79:
31:68:ab:b3:81:c0:f3:79:fb:e8:9a:22:e8:8b:c8:a5:93:cc:
57:31:9f:78:a3:17:43:64:b4:37:01:0e:69:f7:b1:f5:50:6e:
02:b2:90:25:94:45:1d:3f:22:6e:97:22:f6:45:14:91:b2:b7:
02:c4:1b:cc:90:b7:86:9c:29:d0:87:97:9b:39:5c:46:56:a9:
ef:e4:b4:7b:a5:be:f3:8f:84:e2:92:00:7a:72:6d:a5:49:08:
4b:47:5c:74:f1:a3:3a:93:04:d7:7b:83:b9:ec:c7:b9:fe:ac:
e3:da:91:0b:eb:38:ff:cb:e9:99:e4:ad:c6:1f:bb:58:06:af:
67:85:99:c3:29:54:f1:92:a9:ec:15:ed:64:82:ab:f5:28:c5:
d3:11:72:31:43:a2:c7:0c:dd:d6:af:a9:8f:5d:5b:ab:6b:ee:
9e:09:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:32 2026 by rpki-client