Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: oV7BPVVIDcLFwVCpzAxlmL3vD6xa3U4xLsn4Ugx8+Fg=
Subject key identifier: 4F:78:75:BB:F5:11:B0:10:EC:C1:1D:D1:91:2E:D7:B0:EE:8B:29:37
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019F90C7DE787CB37DD978975558CA1E12D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 10EF
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: BR7opSPzHIkzyB/Wk/HeJUTuxgTkSM6nTwZoWIzIE24=)
2: oRIsfmte-X2jgFEWjQtLvblexNM.roa (hash: MABvxM4XCQeB057f0MMoN4gprPL+JKjwKeyBUI1E5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:de:78:7c:b3:7d:d9:78:97:55:58:ca:1e:12:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=4f7875bbf511b010ecc11dd1912ed7b0ee8b2937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:80:6b:5d:df:19:a4:e9:67:bd:f7:c5:5a:
80:b0:0a:11:84:fe:4b:8e:a4:d2:dc:19:22:d8:e1:
aa:47:7f:40:7f:01:47:fb:0e:9b:0f:ac:89:66:52:
a5:c5:4c:8e:9a:cd:cc:de:7b:6d:5e:8c:f8:18:20:
05:7e:57:3a:a8:9b:ab:b4:28:fd:39:ea:ad:8d:71:
c5:16:c3:d2:4e:ec:59:ac:e8:0c:b5:25:ba:e4:91:
ad:cb:08:16:ea:28:8c:9c:37:f3:24:7f:c3:b2:74:
3c:a1:7c:6c:00:d5:cd:31:8c:8a:6d:85:b0:08:9a:
6a:0e:c5:a0:79:2c:4e:e4:d8:6b:76:ff:2a:89:90:
2a:25:87:22:a9:08:ea:27:ee:47:fa:ca:77:80:39:
6b:08:88:d8:7b:dd:4a:32:d9:47:d7:82:57:ed:fe:
2a:8e:f7:f1:02:80:e6:7b:71:82:13:0e:aa:60:8b:
4d:7c:25:de:b3:a7:00:b0:57:49:ea:ea:da:f3:2b:
25:dc:cc:e0:2f:75:06:85:52:7a:25:11:ec:23:eb:
fb:c7:d5:c9:fc:f6:a4:a2:28:2c:d0:90:0a:bb:d9:
ae:9f:7a:73:68:33:5f:2c:14:32:c5:c2:53:6a:d8:
e8:c5:b0:b8:36:97:c1:3e:b4:f2:11:5d:a3:5b:6b:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:75:BB:F5:11:B0:10:EC:C1:1D:D1:91:2E:D7:B0:EE:8B:29:37
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:e1:15:b9:86:06:a2:d2:40:d7:cd:00:50:6a:82:68:a3:
46:d1:1e:07:8c:12:22:71:c5:7c:46:f9:ab:79:8c:0f:dd:53:
45:4a:7e:35:a3:b9:ab:3c:84:aa:af:b9:5c:83:81:1d:22:ad:
c7:6a:dd:3b:26:f8:5a:6f:b7:da:1b:15:94:45:98:d0:28:8f:
d0:7e:87:3c:18:fe:0e:46:98:9a:33:39:6b:e4:09:5a:ed:e3:
bd:01:09:cc:07:1b:42:a5:1d:1a:62:0d:b8:6b:57:dd:ae:7c:
c0:89:15:4d:d5:29:7c:89:41:dd:58:a9:3a:28:98:41:13:03:
64:bb:bf:d7:90:a1:20:74:f4:65:59:e8:b2:03:72:b2:62:9e:
37:01:8f:bc:b6:34:64:6e:e4:13:63:c1:9d:dc:9a:ac:bd:8a:
df:8a:9b:4f:89:c4:ee:fd:fe:da:41:28:d9:d4:e3:73:91:49:
78:cf:1c:57:ab:6e:fc:d0:b9:ef:06:13:ef:df:01:83:08:c7:
a6:dc:04:f0:23:9c:24:15:81:ce:d3:b0:39:e3:f5:28:83:22:
51:9e:18:94:4f:4a:db:0a:54:ad:cd:19:d5:52:bd:90:7a:c1:
09:01:8d:fd:6b:43:34:69:b6:36:78:fa:ba:17:d1:de:56:c6:
e6:90:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:01 2026 by rpki-client