Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: OSuswauiqqeP8gLIjQ1934PK069CN8Jv3BKQwgBzMC8=
Subject key identifier: 3D:88:4C:C4:CF:B3:DD:FA:AA:43:95:4E:A1:C1:37:C4:2E:58:47:E9
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019F91DB016CD13F944AF059E9501C040F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: 03AA
Signing time: Fri 24 Jul 2026 02:01:16 +0000
Manifest this update: Fri 24 Jul 2026 02:01:16 +0000
Manifest next update: Sat 25 Jul 2026 02:01:16 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: ZahPnu0XMzGLbvC+YV/WnoBXOHPA/2QFGUYA7Boezl8=)
2: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (hash: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic=)
3: rxT-eoR75onud9U3--RgqGGLVNo.asa (hash: fP2TlKEDg1oZrwu3TKIn5MO/RcxmBw/JPEOwqIIPtTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:01:6c:d1:3f:94:4a:f0:59:e9:50:1c:04:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Jul 24 02:01:16 2026 GMT
Not After : Jul 25 02:01:16 2026 GMT
Subject: CN=3d884cc4cfb3ddfaaa43954ea1c137c42e5847e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:ea:c5:3f:43:ca:63:89:f4:47:93:c1:99:
9a:68:97:b8:cc:e8:9a:51:58:98:ef:c2:4b:c6:3d:
d8:f3:e2:b6:5a:a3:71:3a:39:63:42:31:22:95:a7:
fb:cb:2f:9c:78:e3:ae:af:26:1e:ce:58:4f:0f:2e:
0b:91:41:93:71:d9:0c:62:38:f7:95:e9:83:3b:d5:
ed:30:4d:d6:7a:45:2a:5d:35:07:22:b2:cb:95:58:
46:de:9f:00:dd:b4:a0:0b:57:40:f7:e1:23:cb:c1:
8d:88:a7:ec:0b:17:66:08:9d:b0:b4:7f:44:03:e9:
1f:b9:90:9b:33:82:89:36:f1:96:f7:16:87:91:8a:
59:73:0d:51:59:c6:8d:23:d0:cb:ab:3c:24:ef:38:
ed:47:54:59:04:ed:a4:99:d3:84:74:f5:73:f2:88:
5f:53:92:63:38:57:3f:6d:6f:f2:25:63:17:3b:16:
3c:b5:4d:4c:cd:e3:56:7c:c4:be:80:52:26:50:12:
04:d9:6f:07:b2:2b:45:d5:ed:c3:ef:8c:19:24:f9:
7f:b5:81:e5:43:ac:9e:cc:b8:b0:a5:30:2f:94:59:
bc:c7:a7:8f:04:4a:b7:69:ee:b8:05:6a:21:bb:db:
38:2a:b2:36:ba:21:90:1d:17:fc:a4:6f:6f:6c:9f:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:4C:C4:CF:B3:DD:FA:AA:43:95:4E:A1:C1:37:C4:2E:58:47:E9
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cf:59:a7:d6:a1:e4:65:c1:be:59:9b:e1:a9:d8:7a:8d:bf:
0f:50:27:f6:59:b9:40:dd:f5:c1:01:86:90:74:08:61:6c:f4:
1b:b4:ab:3e:79:c4:46:a5:fd:fd:82:21:a9:26:94:0a:11:a8:
c6:d5:6f:7f:10:29:97:01:3c:2a:de:14:a3:79:03:10:c2:fe:
02:85:e2:28:8a:b6:78:84:a7:f7:2e:0a:2d:14:95:e6:25:c0:
7b:92:74:0b:40:7c:2e:5a:2b:7f:aa:dc:e1:3f:05:ad:db:8d:
3d:2b:c0:14:60:05:dc:6a:b7:6e:d5:2f:0d:c8:85:51:6f:86:
1d:65:79:35:b2:f6:ef:05:5f:a1:d0:c0:8a:0f:95:19:68:ae:
24:2f:56:95:3e:55:ff:8a:f0:ec:f0:05:4c:71:5c:af:1c:9d:
4a:4b:1d:2b:c0:4e:86:24:df:07:aa:d1:47:95:ea:22:10:36:
92:a4:18:f5:83:c8:ba:26:73:9f:b9:76:a5:35:74:22:60:b5:
43:a4:39:50:9a:0b:1b:0f:10:5c:a0:d6:dc:bf:f1:e3:dd:06:
95:24:07:c9:8b:d6:27:17:ca:82:c3:64:41:fc:0e:aa:ea:8a:
80:90:5d:00:1d:ef:c5:46:ea:6f:f5:e6:1a:b5:87:6d:64:ea:
26:62:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:08 2026 by rpki-client