Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: lI1BOUuEsUrglRyj/UJK5rb81sHLSDJIJnP2JBB51fk=
Subject key identifier: DD:37:52:EE:C4:73:19:56:DF:B8:04:92:CE:56:09:6F:26:0C:C2:DB
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 019F8FECE08432FFA83D66F6FEFE57C12CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 0659
Signing time: Thu 23 Jul 2026 17:01:33 +0000
Manifest this update: Thu 23 Jul 2026 17:01:33 +0000
Manifest next update: Fri 24 Jul 2026 17:01:33 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: OVyk4gZ9WUHG7DO7Yp1bVBoD3RgTtlrXCov9ckbj24o=)
2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:e0:84:32:ff:a8:3d:66:f6:fe:fe:57:c1:2c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Jul 23 17:01:33 2026 GMT
Not After : Jul 24 17:01:33 2026 GMT
Subject: CN=dd3752eec4731956dfb80492ce56096f260cc2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:49:60:0b:7f:ed:6c:84:d6:00:32:b5:8a:
6c:2f:b9:8e:83:72:30:88:a5:43:e1:47:03:66:9b:
69:39:cf:a6:77:7a:10:57:79:29:0b:59:14:85:70:
66:d8:ac:ce:e4:fb:5e:fe:5e:d6:1e:bf:6b:99:4a:
3c:d0:2c:fb:12:ec:22:33:61:2f:47:cc:c3:9b:2c:
3d:78:76:ae:89:46:7a:45:74:53:49:54:1a:d8:eb:
80:f8:1d:4f:79:96:dd:d5:15:a3:70:82:f8:2d:e0:
d2:01:7a:b8:f7:91:92:72:68:1b:4c:3d:58:1a:9e:
71:c7:96:e9:a9:52:ed:ba:de:9a:b7:ac:e8:59:65:
94:a8:2f:70:88:de:59:1e:2a:0b:d6:bb:17:6d:8e:
eb:30:fa:9c:24:10:7d:91:07:93:45:b8:d2:bf:8f:
d5:92:e9:2c:8f:3a:a3:f6:8e:5a:31:d4:c9:2d:43:
38:83:47:1d:11:9e:89:53:3e:8e:d8:22:bc:8f:d0:
2d:35:f5:3a:4b:47:c5:e8:6a:68:d5:8e:04:3f:ac:
a8:0e:15:6a:3c:3b:96:08:64:76:62:14:0f:91:63:
a1:6a:23:e3:56:14:91:a5:7d:4f:7a:35:a4:ae:d9:
cb:e4:5b:a3:0b:07:c5:ce:e4:8c:bb:59:43:f3:ca:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:52:EE:C4:73:19:56:DF:B8:04:92:CE:56:09:6F:26:0C:C2:DB
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:5c:1c:8c:cb:08:6a:6a:d1:13:16:b5:b3:b5:07:f6:ee:
24:37:4e:59:3d:25:05:b5:89:d1:0c:eb:b5:4b:2f:90:ca:01:
e9:ac:36:1c:52:14:75:00:55:a8:b2:75:87:0c:be:51:74:9f:
a4:72:55:4f:b5:80:a1:e3:a8:3e:3b:13:05:1d:b4:e9:af:37:
98:2c:04:57:f6:8d:ba:6e:00:9f:01:02:c7:7e:0b:f3:81:ba:
5f:de:8d:38:b3:14:5f:c6:9e:b0:72:76:74:4f:89:44:6e:82:
09:ca:3c:9b:d8:28:7c:95:45:cc:ce:52:4c:61:e4:da:ad:b8:
c1:f1:c2:88:2c:82:b7:7f:0a:ca:66:3c:20:87:13:2c:f9:15:
a6:57:f8:b5:96:c9:74:73:a3:a7:1a:05:0f:cb:f1:90:9d:d7:
f0:ae:e7:3e:c1:50:72:19:84:e8:ca:8b:3f:f4:03:d5:5a:6e:
c7:93:70:f9:e1:6e:c1:a0:9f:f5:0e:7c:2a:84:09:34:57:77:
86:0f:8c:f6:0c:b2:d9:2c:55:f0:89:f2:16:9e:9b:cf:b0:f4:
fe:0f:dc:aa:2a:41:02:e1:1f:13:5b:5f:03:55:7d:7d:94:a5:
9c:bb:4f:49:56:51:a5:70:85:c4:96:c9:04:3e:3d:74:5e:80:
d0:6f:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:39 2026 by rpki-client