Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: Zfow8CYK++CcwrzVUGyz/ZYjPg/INMAjziNTwgw2V5w=
Subject key identifier: 2F:DF:14:4F:8E:32:06:AA:D9:DD:B4:34:88:4A:02:36:73:24:C2:8C
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 019F9090E5F4587C8217C6376A7EA22F98C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 17E3
Signing time: Thu 23 Jul 2026 20:00:42 +0000
Manifest this update: Thu 23 Jul 2026 20:00:42 +0000
Manifest next update: Fri 24 Jul 2026 20:00:42 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: gZC+P/PTI3bXuRH265x24ZKcUTc39Ffm+qGY6KQ/sgU=)
2: P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa (hash: ZN6nAyptvvcTJMcBIb6vuyb/okd9tuYrvpfl57aJd5o=)
3: Yzbu2xTuHGDufrR56jzeXJcXst0.roa (hash: 3Pb+th0E+BzWqiRK07ig2mdg2VM/g7nhxEWnM+EOw24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e5:f4:58:7c:82:17:c6:37:6a:7e:a2:2f:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jul 23 20:00:42 2026 GMT
Not After : Jul 24 20:00:42 2026 GMT
Subject: CN=2fdf144f8e3206aad9ddb434884a02367324c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:b5:14:a1:97:2a:cd:a7:e5:5e:0c:35:0d:
01:41:ed:d7:ec:44:73:cc:76:fd:ca:78:40:05:6a:
d7:e3:ff:cf:75:cc:ea:df:fe:47:e6:06:18:4c:6d:
2d:07:ef:84:a4:74:52:fe:a7:ae:d2:b7:9b:8e:3b:
d7:91:f0:c2:31:c8:b4:fa:a6:54:2c:a1:5f:26:02:
d3:81:81:02:e4:e4:ee:2b:cb:90:1e:34:41:f6:fb:
11:23:54:71:59:ef:f8:8e:99:8c:66:b7:70:54:09:
67:85:b8:9e:a2:28:f3:0f:be:fa:f0:c2:07:61:50:
46:74:4c:0c:1f:dd:d4:02:87:13:0b:89:6b:93:50:
bd:85:55:c5:0b:ab:e9:95:44:12:42:e4:9d:47:40:
db:34:62:21:da:f8:3a:f1:43:a1:0e:ee:f7:3c:ad:
a0:63:02:7f:e4:e5:27:9a:5c:31:b3:a4:35:ee:1e:
6e:9e:5e:9e:6b:8d:d1:b8:2e:93:05:83:e1:cd:4e:
75:5c:9d:78:d7:5f:fd:75:b3:a2:9a:78:30:31:4e:
96:6e:16:d5:85:d6:4c:4e:29:c2:87:89:ce:94:86:
f6:97:b1:97:a8:18:94:97:c4:71:23:df:09:81:ab:
86:47:8f:ec:5b:6d:5c:3d:f7:37:7f:8d:c8:03:7f:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:14:4F:8E:32:06:AA:D9:DD:B4:34:88:4A:02:36:73:24:C2:8C
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:c0:e5:ee:66:e0:67:dd:2f:f0:d7:d5:41:a9:a8:a4:06:
3a:90:b2:df:7d:cf:70:4d:e8:06:4b:d8:ae:8a:9a:ee:be:52:
ad:15:9b:96:1e:d5:10:b5:02:ac:0b:b6:ee:9e:32:47:db:c6:
0c:bc:cb:b9:10:9d:9b:e3:87:d0:11:f3:2e:0a:5f:3b:c0:dc:
07:2a:92:4e:94:ed:83:5d:47:d7:34:d9:f5:7a:6d:12:ce:8d:
ea:a0:1d:37:09:b2:e9:62:ed:f5:6c:85:b8:51:8e:77:31:1a:
96:f1:8e:cf:09:ad:a5:19:a2:51:a6:67:05:34:3d:59:58:88:
bd:fd:57:6d:68:b4:c4:84:04:79:95:15:60:98:dd:47:b1:9a:
54:cf:30:fe:83:b3:42:e3:71:f9:9c:4a:80:b4:b0:a9:72:18:
b5:be:0e:4a:35:6a:df:de:f6:0d:eb:f4:ef:57:a9:47:39:e2:
97:1d:61:cf:32:36:5d:c3:6c:2e:8d:e9:99:dd:c2:f4:08:74:
83:c4:df:a2:b2:a1:a6:28:14:59:99:e2:65:31:9b:c3:e4:d7:
3a:0c:c9:d7:ed:9f:81:eb:88:fb:2a:ce:1a:52:d2:12:b7:83:
49:2e:d4:c9:8b:15:6c:be:d1:50:3b:7e:3b:f0:ba:fc:84:3c:
be:8a:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:47 2026 by rpki-client