
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: hdEXiQokoYeWMwb8AyM63WjqZPD00NrESP+n34+1mh8=
Subject key identifier: D3:0D:B1:0B:A1:FB:1F:CB:47:E4:D3:30:76:FE:AB:57:AF:9B:B1:AB
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 019F905A62E314742F994925D30E6ABF0636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 128C
Signing time: Thu 23 Jul 2026 19:01:10 +0000
Manifest this update: Thu 23 Jul 2026 19:01:10 +0000
Manifest next update: Fri 24 Jul 2026 19:01:10 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: Myl8ApMEFUZFzaDYk4NW8OwE3fpFdKIgylM1jg3d9sQ=)
2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:62:e3:14:74:2f:99:49:25:d3:0e:6a:bf:06:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Jul 23 19:01:10 2026 GMT
Not After : Jul 24 19:01:10 2026 GMT
Subject: CN=d30db10ba1fb1fcb47e4d33076feab57af9bb1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:80:b2:bc:bb:74:d5:76:a7:6c:ec:dc:e8:
16:0e:dc:20:3a:84:65:e4:af:27:db:ea:bc:64:08:
02:0a:90:b5:22:25:1a:f5:4c:85:27:97:a5:0c:71:
f3:d3:02:c4:aa:b8:dd:b8:2a:75:3d:a2:f8:a0:8f:
88:24:04:27:a6:27:f2:ea:dd:30:3f:b9:a8:19:aa:
38:05:64:c7:ff:6a:6e:2a:d6:b8:76:73:4a:f9:f1:
34:b1:03:87:1b:5e:19:55:92:57:80:68:09:0e:11:
c0:23:3c:8d:7a:76:2e:92:7d:da:ff:ce:39:1d:66:
92:af:ba:98:5a:dd:00:a8:48:a2:b7:fe:f3:72:2f:
8f:fb:a4:e3:77:ec:54:92:df:9b:43:df:9c:f6:58:
fa:11:75:4d:ab:ff:04:5f:54:97:14:ac:c5:0a:8b:
18:23:aa:d1:f5:0e:00:11:26:9f:7f:95:38:bc:19:
b4:be:a5:7e:56:b8:ec:27:08:c5:98:8d:e3:1c:61:
75:18:26:77:48:9c:ee:ff:ed:aa:71:80:08:c5:c8:
5f:b5:e4:ad:ca:4e:06:c1:f9:be:18:cb:13:6b:ac:
dd:3a:3b:f6:ab:6a:3f:a8:cc:77:71:07:47:ad:86:
1e:6b:6e:78:9c:cb:1b:3f:8d:49:2b:3d:c0:ed:84:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:B1:0B:A1:FB:1F:CB:47:E4:D3:30:76:FE:AB:57:AF:9B:B1:AB
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:ef:d2:17:07:20:32:59:ae:3f:a1:b1:64:8a:e2:0c:b9:
11:56:a8:4c:61:3b:4c:35:93:55:94:23:15:64:b6:b9:f2:2c:
e1:14:8d:c1:49:d5:93:64:2b:bb:c3:eb:a4:db:fb:a1:5d:08:
aa:1d:45:b5:cf:81:d6:72:13:a7:10:e0:9d:1a:91:d4:5d:84:
62:e2:dc:31:e3:e9:3a:7f:fa:21:95:dc:4e:d0:a6:e5:cc:2f:
72:69:6a:20:be:02:46:ac:e6:ba:f7:ba:a3:9f:55:ae:71:26:
3b:26:08:3d:6b:a3:7e:85:82:62:a7:a5:e9:29:ed:cb:74:6c:
a2:e4:c0:0a:20:c4:7c:06:fb:a4:3c:87:85:6a:a0:fa:1b:ba:
b7:ba:4a:3c:1d:9b:a4:50:85:1c:f3:ed:cc:89:85:be:1a:6a:
62:09:6a:5f:29:c6:d1:4e:56:86:63:c1:0d:a7:7c:24:36:fe:
4f:14:6e:8e:4a:bd:82:2b:41:eb:8c:1b:d6:12:3e:1f:49:37:
46:4a:65:73:35:bd:10:0b:87:6e:d9:e9:33:80:19:c7:32:c5:
72:d2:12:b0:d6:5c:60:4b:c6:66:c4:53:82:81:bc:cd:0f:4c:
d2:46:6d:5a:d5:53:a2:c5:29:a7:5f:5b:4d:65:9f:b2:aa:73:
69:87:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:02 2026 by rpki-client