Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: NPU1cDOMC3sa8hiGvbCxHS6gl+DhdC6GQuWI/v+nfQY=
Subject key identifier: 52:B9:EC:1A:D3:88:D3:BC:8C:24:2D:BF:D7:5C:00:1F:53:D5:8F:06
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019F905A47904212E8E1AD13AACD7AB32C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 05C6
Signing time: Thu 23 Jul 2026 19:01:03 +0000
Manifest this update: Thu 23 Jul 2026 19:01:03 +0000
Manifest next update: Fri 24 Jul 2026 19:01:03 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: 1Kce51PfAgAc4DU6SXAEv7JtjoonF4BAzVwudyUNKXo=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:47:90:42:12:e8:e1:ad:13:aa:cd:7a:b3:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Jul 23 19:01:03 2026 GMT
Not After : Jul 24 19:01:03 2026 GMT
Subject: CN=52b9ec1ad388d3bc8c242dbfd75c001f53d58f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:8b:fb:7c:01:46:21:ad:7f:5c:db:a7:ee:
79:05:88:ff:dd:d2:08:88:0a:b9:73:0a:11:aa:94:
f7:d6:af:2a:68:e2:65:d3:60:58:bd:d8:cb:aa:a1:
8a:78:17:db:fa:e3:fb:c7:74:01:82:f9:df:53:56:
4b:aa:3d:e4:bc:00:0a:16:9a:e6:89:51:70:27:cc:
86:70:2c:b9:73:1c:41:8f:63:bf:f5:57:6c:32:12:
a8:8a:b5:39:aa:75:b8:f0:b6:a0:81:9d:a4:1c:3c:
fc:fa:4a:f7:36:24:08:12:75:2e:71:2f:fd:de:3f:
1f:e1:32:e8:d6:28:06:78:3e:e5:de:46:32:85:d0:
7a:9c:46:00:68:f1:d4:53:79:b6:7d:c1:d9:4d:0c:
ae:3e:1b:55:af:5d:8b:8f:f1:0a:bf:e7:08:21:2e:
20:ee:0e:65:65:1e:be:67:2d:9f:b4:f6:ae:bf:e9:
10:ec:53:fc:67:2a:45:1d:cf:50:06:e6:33:58:66:
7d:7e:3c:20:8e:b4:72:02:28:f9:6a:b1:df:0d:fd:
e1:a1:6b:57:27:6d:64:ba:0d:56:ea:38:6b:9c:d0:
c4:3f:8b:f4:d7:40:6e:fa:5d:e9:75:10:ed:bb:a6:
a4:27:80:09:c3:70:fc:cd:56:72:4a:27:bd:43:85:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:EC:1A:D3:88:D3:BC:8C:24:2D:BF:D7:5C:00:1F:53:D5:8F:06
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:48:53:08:8f:c7:9b:a1:93:66:e3:c8:8d:f8:3b:26:82:
f1:6b:78:5b:8b:5f:84:a8:3a:7b:c8:d9:36:1f:19:1c:44:c5:
58:a8:9f:6e:bf:08:e6:7f:52:cf:6c:ec:e3:cd:24:e4:72:fc:
f0:11:73:0d:b7:bc:d6:c0:fe:0c:94:53:93:92:24:9c:38:9f:
ab:99:6f:1f:12:93:ce:c5:03:df:b5:22:19:2b:da:ce:be:b1:
64:20:36:fa:22:f9:f5:ff:2a:67:c5:a2:6e:3f:bc:ac:b6:a6:
84:f3:7c:f6:50:c8:00:a2:18:df:35:f8:fb:ee:f2:64:10:87:
8c:95:4e:6a:63:32:8d:bd:94:0e:dc:12:a8:44:1a:6d:33:2a:
61:13:0f:35:3a:fa:45:42:10:36:a3:5d:8e:f3:ac:54:bd:3d:
54:65:4e:4a:da:0c:5a:6b:ac:28:72:1d:05:f8:51:56:2c:cf:
bb:f3:c4:f9:0a:ea:29:fd:32:89:a2:c4:d0:95:74:03:cf:74:
86:04:ff:33:35:ba:55:2e:06:7b:1b:00:10:d7:62:54:5f:0d:
f0:1d:2e:83:a2:66:27:d2:28:11:3e:b9:f8:07:03:c4:b8:3c:
e2:2e:49:83:49:3b:4c:0f:a9:b3:4d:a8:23:26:27:fd:92:d6:
c1:e6:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:18 2026 by rpki-client