Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: odCHZUpZrlOyHJ9EO0J17Mo2+o17A49XrR7p3SiJquY=
Subject key identifier: 31:23:8E:A3:AF:4F:63:B7:C5:5A:A3:46:0C:66:D3:30:35:93:DA:F6
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019F8F10213B55180CF223FA6C2E16086525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 1137
Signing time: Thu 23 Jul 2026 13:00:26 +0000
Manifest this update: Thu 23 Jul 2026 13:00:26 +0000
Manifest next update: Fri 24 Jul 2026 13:00:26 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: 1DUG0dNmvL7XVneefCxMDxHISHMmiO/QxBHLp8jKoKM=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:21:3b:55:18:0c:f2:23:fa:6c:2e:16:08:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jul 23 13:00:26 2026 GMT
Not After : Jul 24 13:00:26 2026 GMT
Subject: CN=31238ea3af4f63b7c55aa3460c66d3303593daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:32:d8:59:f0:df:88:11:6e:55:b8:36:7f:
34:8e:43:f9:e8:f7:1e:ef:3f:1c:2b:71:33:52:8a:
d5:ae:4d:ef:e2:47:50:46:59:cd:cc:e0:7c:df:82:
f1:3e:8b:da:06:48:86:86:80:61:d9:4d:36:16:8d:
b7:ae:3c:6b:61:b2:ba:3e:7a:92:2e:a3:ef:fb:e5:
05:41:50:32:31:80:25:a0:24:e2:17:1f:db:b8:aa:
1a:5e:30:f7:bc:f5:52:a8:99:03:53:2b:91:09:cb:
05:a2:71:cd:9e:b1:62:d0:27:84:1a:cd:8a:b5:73:
32:64:78:65:6d:a2:f5:2e:85:e0:fd:cb:a5:3e:7d:
68:56:78:87:d7:2a:be:9f:f4:fc:4c:c1:60:6b:69:
01:07:f0:8b:b0:cf:80:27:7c:c7:7a:15:e4:2b:73:
e7:6f:64:0a:66:93:69:80:07:dc:ca:10:68:46:bf:
74:6a:26:3e:15:c0:83:8a:8b:0b:6a:96:b3:b6:4c:
70:b3:51:c8:df:71:f0:bf:07:6d:bf:2c:56:11:7e:
d8:09:27:fd:e5:6b:54:4f:ee:c7:6c:10:2b:32:3e:
a6:1f:18:d8:19:40:32:26:2b:b7:75:0d:93:20:48:
a7:67:f6:b5:d1:5c:96:ac:e9:d8:7c:a8:c8:bb:8a:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:23:8E:A3:AF:4F:63:B7:C5:5A:A3:46:0C:66:D3:30:35:93:DA:F6
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:45:b3:a7:9b:8f:2b:68:27:ba:20:9e:09:f2:57:ef:a3:24:
00:91:93:e7:0a:da:f8:04:a9:05:66:83:3b:73:a8:88:bf:2d:
ad:fe:8e:38:d1:a2:db:84:33:48:d3:35:7c:37:ef:c8:36:b1:
fd:d1:5c:da:da:02:a4:e3:6b:80:65:d7:0e:7b:b9:fd:bf:ef:
f7:9b:a6:98:85:50:8d:b6:92:68:fc:fc:8d:20:d1:e5:00:18:
ce:d3:f4:5d:d1:50:19:9d:ab:6c:de:55:50:8a:85:ed:78:45:
d8:4e:d3:98:a3:30:ea:ac:15:c1:21:7b:e1:8c:26:f1:c9:58:
a5:b4:de:b5:ab:8a:61:c3:13:e6:83:f4:62:af:a1:e6:1e:b4:
42:26:1c:0f:4e:b4:83:97:83:04:5d:96:1e:16:7b:75:c4:91:
2b:43:cc:6a:42:59:e9:36:c2:0f:e8:ab:5d:8a:cc:a4:83:98:
31:eb:0f:ec:39:67:2d:23:b1:61:d1:a6:c4:48:20:b5:67:52:
b4:9a:a4:bd:37:3e:b7:6a:4a:aa:34:c5:f2:9c:32:35:b0:a1:
6f:1c:32:33:80:9c:11:fb:0d:30:da:94:60:99:a0:2f:d2:ba:
37:4c:55:77:39:ed:76:19:c2:d2:e5:18:fe:c3:3d:fd:54:1c:
29:35:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:46 2026 by rpki-client