
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
File: 1JoJgE9Klx2oYCD-wxt3ts54WlA.mft (raw, json)
Hash identifier: pyEmLSOJLH0FVcb1ETc4TV1TmqT2+G0rIF//yET4ibI=
Subject key identifier: 63:F7:22:72:28:72:37:77:4F:91:05:C4:69:90:A7:63:DB:2D:09:FA
Authority key identifier: D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
Certificate issuer: /CN=d49a09804f4a971da86020fec31b77b6ce785a50
Certificate serial: 019F8F7F4043B98EEBE6F255DAB362E3B4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:49 +0000
Manifest this update: Thu 23 Jul 2026 15:01:49 +0000
Manifest next update: Fri 24 Jul 2026 15:01:49 +0000
Files and hashes: 1: 1JoJgE9Klx2oYCD-wxt3ts54WlA.crl (hash: KPljSEJW/F7cQfFBW8g5D30ntqvj82+UiN/xbulX/3Q=)
2: NwwaWXozHy71mbpAU3P6llyB78Q.roa (hash: NiQ4zMwsxxv5Pd5CC5l/iVQxZM/r14qUwT9CwKCLn7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:40:43:b9:8e:eb:e6:f2:55:da:b3:62:e3:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49a09804f4a971da86020fec31b77b6ce785a50
Validity
Not Before: Jul 23 15:01:49 2026 GMT
Not After : Jul 24 15:01:49 2026 GMT
Subject: CN=63f72272287237774f9105c46990a763db2d09fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:29:87:ad:2a:6e:0f:86:4b:df:5f:ae:96:
7e:af:b5:d1:7c:b8:32:27:79:ba:c4:fa:3f:c8:55:
08:af:42:81:97:fa:f8:95:1e:8e:de:8f:be:d7:31:
11:3a:c5:0e:a2:90:fc:7e:fe:56:35:1b:58:b1:87:
7d:1d:ce:f1:ed:a6:67:f0:c4:0c:62:8f:3c:08:57:
00:bc:50:7c:9d:02:de:ee:cb:83:48:9b:f7:61:83:
00:41:4c:f4:ef:5d:43:99:e7:5e:e6:aa:78:c5:52:
3a:6e:72:56:dd:a9:90:33:cb:c0:d7:96:3a:d1:ef:
f1:c7:d6:af:42:7f:a2:95:32:86:16:5c:46:70:26:
43:8b:8d:fa:2e:18:0c:3c:68:8a:37:b6:63:0c:f1:
69:87:85:01:d6:17:34:88:9d:f5:c8:d9:c6:90:1f:
4e:69:2a:c1:9d:f2:90:cf:ee:52:cb:ca:28:fe:4d:
46:6e:09:5d:75:0c:d6:9b:8d:bf:fa:34:f1:fc:ff:
ac:8d:f1:e1:d2:85:ce:4b:c9:fa:b9:db:e9:fa:dc:
d3:2f:b8:df:5c:ee:3e:d4:e3:e0:e0:3f:a1:d9:2c:
47:e5:0e:d2:29:d7:e8:9d:af:4b:60:f7:a7:b7:fa:
8d:b3:f2:4a:a6:47:59:39:13:84:96:de:6f:aa:c7:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:22:72:28:72:37:77:4F:91:05:C4:69:90:A7:63:DB:2D:09:FA
X509v3 Authority Key Identifier:
keyid:D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:27:e6:23:43:67:f2:05:e7:62:e3:ab:76:b7:4b:b0:d7:15:
ff:72:22:0d:7a:0b:41:75:c7:62:09:ba:2c:c3:dc:84:cc:3e:
61:18:2c:1c:52:70:b6:b2:a7:1f:10:7b:59:59:d2:95:82:55:
3f:47:ed:8b:74:26:31:a6:5d:c2:fa:c5:2b:1f:dc:30:24:89:
49:1e:2a:4c:36:3e:7d:26:bb:42:14:56:1c:9b:3b:88:60:76:
00:e9:1a:a7:4e:94:4b:6f:ac:71:b4:3b:eb:ef:85:c7:e5:75:
f8:92:64:78:73:4e:7c:80:a0:64:26:3e:90:93:31:b7:9c:2a:
6b:db:14:0f:f1:84:f7:62:b2:91:6d:2b:4c:40:18:5d:cb:f4:
b6:a1:ac:65:c5:eb:ce:c7:5d:a9:42:43:b9:b4:96:36:a7:d1:
06:d1:eb:e2:d5:82:7f:bf:48:5d:33:f7:76:b9:36:05:5d:ee:
ed:a5:f2:8f:d2:3c:bd:ac:45:7c:c5:d6:a9:69:0c:69:17:16:
4e:80:78:9f:06:dc:44:82:a1:14:10:a7:55:1c:6b:f2:a2:79:
b2:d6:d1:98:b3:00:7d:9b:c3:b8:22:e2:50:d9:b6:2a:7d:fd:
3a:92:79:3e:1c:d2:fa:13:b7:dc:43:fe:b9:fa:02:26:5b:63:
0a:10:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:30 2026 by rpki-client