Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: Q+erqyOFws3QuFY6ie0Vo5ZJy7xNXp+a/hxAoMf29Eo=
Subject key identifier: E9:8C:08:FD:D1:77:9B:40:08:63:D6:95:CB:F3:48:67:8E:89:51:3E
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 019F8F7EAE30CD057E387EF9AF617374AD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:11 +0000
Manifest this update: Thu 23 Jul 2026 15:01:11 +0000
Manifest next update: Fri 24 Jul 2026 15:01:11 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: gwFLNgRz8Bcg0rt8n5Z1/d4AGupegxM7LwCysYhxdl4=)
2: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (hash: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=)
3: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (hash: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ae:30:cd:05:7e:38:7e:f9:af:61:73:74:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Jul 23 15:01:11 2026 GMT
Not After : Jul 24 15:01:11 2026 GMT
Subject: CN=e98c08fdd1779b400863d695cbf348678e89513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:83:d8:0a:db:bd:ff:6a:af:7a:75:e8:93:
36:0b:92:45:a3:50:39:3c:2b:35:38:56:f3:7d:4a:
d3:4f:8e:83:2b:c7:8f:f2:e2:02:34:10:16:ed:3e:
8d:e3:e5:40:96:eb:13:88:9e:e9:25:2d:24:d0:57:
2c:ac:6a:af:16:60:1a:8d:d1:3c:19:c0:6f:f8:d0:
e9:54:47:b9:41:83:b1:27:47:fe:69:2f:06:6a:3e:
41:de:7d:a2:6e:7c:24:80:50:6d:92:15:ec:81:d7:
04:1e:32:f6:c1:27:a0:85:b0:df:43:62:3e:ae:78:
dd:fe:fb:7b:cf:61:f0:a9:2c:2b:94:a2:29:c0:71:
00:a4:02:f3:09:77:75:f4:ba:a7:13:6f:c3:e2:99:
4e:97:a9:68:4b:6d:e8:e4:35:a6:b8:17:07:7b:d9:
e8:45:b4:04:40:b4:04:2d:36:25:11:57:f7:70:8f:
d7:d7:06:06:cb:8f:33:46:98:13:e8:23:62:2c:ab:
29:94:b7:6b:bc:30:ce:a5:e8:57:85:99:2e:88:e1:
da:0a:5f:9d:64:a8:54:35:0f:77:e2:6a:aa:88:ba:
a5:f5:8e:8e:eb:dd:14:1a:c6:21:95:f8:57:71:ae:
fb:a2:01:94:82:3c:39:55:f8:64:92:2c:c7:8c:4f:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8C:08:FD:D1:77:9B:40:08:63:D6:95:CB:F3:48:67:8E:89:51:3E
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c6:8f:64:92:09:20:60:82:b1:4d:88:1d:6e:8a:ba:97:c3:
d8:85:39:a0:0a:c0:62:3c:b5:38:71:84:a4:27:1a:0b:ab:51:
5f:14:54:ce:18:09:81:a2:54:44:9c:72:d4:37:97:45:4e:e6:
fa:4c:ea:ef:e3:95:3f:5a:24:04:88:45:f3:93:4e:d0:b3:c1:
db:6f:f8:65:21:f5:b2:54:35:d6:c7:1c:58:55:ee:aa:d0:91:
c9:f1:0e:63:df:0a:41:3a:4e:f7:a5:c3:e1:95:98:f3:a2:50:
92:f3:b4:4f:91:9b:cc:71:d1:32:12:7f:f3:c0:0c:d2:b6:27:
56:a8:d2:63:1b:05:44:8f:6b:83:2a:82:7d:b5:27:22:59:2f:
23:cf:31:1a:01:63:1a:18:77:02:45:52:b0:31:6e:f7:32:a1:
e4:6b:c0:33:8e:52:8c:90:d9:6b:32:f2:8d:89:03:ff:ef:e9:
fb:34:af:37:93:9c:b0:92:f3:4a:25:41:1d:42:4e:e7:ea:8f:
29:15:04:2f:d7:4d:d2:20:e3:7f:8c:70:08:58:c7:3f:eb:4d:
b2:47:d0:9f:a1:4f:9f:ea:d8:35:97:a4:23:e5:70:03:7e:d3:
f9:d3:8a:e9:3b:45:15:fe:a3:4b:73:b0:55:eb:d6:11:79:3e:
bb:09:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:06 2026 by rpki-client