Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
File: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft (raw, json)
Hash identifier: dZh6q5BFyqtpSEboMd6XyDO8P7HCEjq1kCyHOYp/G20=
Subject key identifier: 94:3E:AA:24:C6:72:A1:2E:DA:8A:3A:58:05:2F:7C:23:68:0A:8D:53
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 019F913624B12A934E4058BE10029F893169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
Manifest number: 0E56
Signing time: Thu 23 Jul 2026 23:01:12 +0000
Manifest this update: Thu 23 Jul 2026 23:01:12 +0000
Manifest next update: Fri 24 Jul 2026 23:01:12 +0000
Files and hashes: 1: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl (hash: PwvUV/FjGY3VAXGoFYWMtHMDKt2i42B4s/zlLuRA4J8=)
2: bocz5SG9Zj4HkXUBKia2cUoBHTI.roa (hash: kxCpDn7CCZ/6SqGTk6+uT7aXJeJIuhuC431y0OFAOkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:24:b1:2a:93:4e:40:58:be:10:02:9f:89:31:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Jul 23 23:01:12 2026 GMT
Not After : Jul 24 23:01:12 2026 GMT
Subject: CN=943eaa24c672a12eda8a3a58052f7c23680a8d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:92:12:ad:a6:62:8d:4d:72:41:23:c8:b5:
4b:d1:c3:c0:6d:64:12:db:3c:43:70:11:c4:34:e7:
c7:f0:86:8a:4c:fd:8a:ad:43:7b:aa:86:28:8b:e5:
a5:4a:e2:a1:e1:6b:cd:76:29:3a:ed:94:7c:51:2d:
66:da:01:32:fc:c4:c4:75:25:42:7e:8c:ba:99:f0:
f2:29:2b:67:dc:49:bf:d6:28:4f:cd:91:53:71:ec:
da:d2:49:7b:30:11:9b:c9:a5:6c:13:2f:f7:a6:ad:
7c:38:33:a7:eb:bc:42:42:90:fd:0a:22:d8:e3:e4:
da:35:6c:19:89:11:30:da:e8:23:1d:b0:f7:ae:d1:
62:a8:b0:f5:54:e2:2f:8d:11:53:03:ec:19:3c:a8:
40:fd:90:14:49:ba:b1:84:2c:98:15:33:15:9d:7b:
92:ef:a2:4d:80:38:49:3b:fa:73:f3:25:0a:ff:9d:
a7:2a:c3:b2:08:c0:4b:12:e4:02:c9:42:f8:9d:1a:
da:8b:e4:89:8c:2f:77:a6:6e:fa:17:da:e4:aa:27:
4f:f2:af:25:45:0a:f2:86:c1:5c:31:69:3e:be:fa:
43:9f:45:a3:86:6f:5c:dd:7f:eb:8d:26:91:64:35:
5f:05:4f:34:37:0a:1e:75:dc:ab:3a:d2:d9:86:eb:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:AA:24:C6:72:A1:2E:DA:8A:3A:58:05:2F:7C:23:68:0A:8D:53
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:2f:87:68:b9:81:3b:ff:d3:55:74:08:fb:c9:e2:6e:ae:
28:2e:14:cb:9d:02:f5:52:12:1c:63:92:0d:9b:68:72:19:30:
32:c5:c6:9b:c7:c7:24:5e:1e:dc:57:d3:4b:73:31:25:22:33:
81:1b:9f:12:b9:42:dd:63:88:f3:ed:23:96:01:ae:34:7c:f4:
6f:6f:24:6e:04:bd:e5:40:13:10:86:8d:ea:47:6b:56:8b:c7:
bc:8e:ba:bc:91:a8:ac:92:96:42:68:81:cf:cb:be:c6:f0:fa:
9b:0a:7d:eb:49:74:f7:eb:f3:4e:9d:8e:cf:6d:81:37:1d:60:
dc:9a:41:31:ff:d6:1c:2b:a4:0e:a4:8c:5b:6b:63:d0:d4:3f:
c4:40:6a:34:75:bf:4d:2b:90:ac:ca:53:ca:2a:c4:ab:30:c2:
cf:04:10:77:5d:71:25:2e:c8:09:2a:08:82:c2:dc:ee:e1:ab:
0a:ae:99:47:f8:b5:9b:7b:8a:27:50:d5:73:19:b6:c7:4d:7b:
35:86:21:4b:e9:4c:20:f5:4d:21:a6:1c:f4:0c:d2:06:55:2f:
7a:6a:e9:b1:8f:33:cb:92:90:1c:be:42:fd:47:15:b1:c7:b4:
4c:31:7a:8b:bc:70:19:3f:d0:5d:00:96:11:d1:b4:e2:64:ef:
63:1e:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:13 2026 by rpki-client