Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: GXFCNBObeBTEifnQh6yHKSw2J8PE5cEjj2tZYBoahQM=
Subject key identifier: FC:F3:4B:2B:4E:7C:05:AB:A4:7C:E3:60:FD:4A:68:16:ED:62:43:81
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019F90FF041642518CFA5E24F095BE4AABFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0A2A
Signing time: Thu 23 Jul 2026 22:00:59 +0000
Manifest this update: Thu 23 Jul 2026 22:00:59 +0000
Manifest next update: Fri 24 Jul 2026 22:00:59 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: Yax543+8rLFX1HooC+jH9qNaWK9aiz+wY7bcW/S7T5I=)
2: peT8CTSpQLfO18yCwu4AtxxOTr0.roa (hash: hsGVA7+uUNNAHVu2HVjxr7Jo3CA7cqA+tbxBjJtodL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:04:16:42:51:8c:fa:5e:24:f0:95:be:4a:ab:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Jul 23 22:00:59 2026 GMT
Not After : Jul 24 22:00:59 2026 GMT
Subject: CN=fcf34b2b4e7c05aba47ce360fd4a6816ed624381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:24:2c:46:e7:9a:16:56:85:78:d0:07:99:
00:a7:b2:92:09:ba:c8:1f:96:9c:d3:f2:6d:9a:e2:
fe:a7:d2:82:f7:3d:6f:c8:fe:3f:a0:17:5f:01:a8:
00:e5:0e:82:cf:55:b4:64:ab:79:ca:1e:5a:32:a7:
24:43:68:75:1e:ac:62:62:4b:08:c7:b3:9f:69:f4:
e8:93:35:90:c6:ce:71:4e:76:28:fd:a9:5e:d8:12:
8c:b0:e6:78:c1:c2:cf:a7:72:50:e1:bb:bf:90:de:
47:66:ac:7b:57:e3:c2:5a:13:23:7d:85:71:31:c0:
97:cb:81:2b:d5:36:cf:2d:e4:32:f5:2d:f9:71:03:
a9:26:19:6e:6c:b6:a9:34:3d:ce:d3:ab:1f:86:28:
07:3e:85:2f:b2:63:17:08:bd:5e:70:d5:bf:84:3e:
5e:1d:98:ec:57:4d:b7:5a:bd:85:23:43:c5:07:ae:
a0:62:fe:52:bc:47:bf:f9:d6:13:b5:e5:03:f9:46:
a1:ba:d7:ba:83:6a:d3:c4:60:55:34:a7:7a:56:63:
a1:58:3c:e0:7d:f7:f4:47:20:c9:10:7f:92:db:f8:
4c:50:f0:d1:ea:ae:16:de:9d:07:73:d8:4f:49:12:
43:fb:2c:08:5e:9f:60:e2:bb:07:5c:53:fb:f0:9f:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:4B:2B:4E:7C:05:AB:A4:7C:E3:60:FD:4A:68:16:ED:62:43:81
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7f:51:40:1f:6f:7d:1c:df:d4:69:2f:35:90:9f:5e:f6:a3:
55:0b:1f:fb:6e:be:47:5e:f4:c7:05:cb:a0:d0:52:47:0d:5e:
83:01:f7:0c:db:52:71:e1:be:b7:42:4c:e3:71:f9:0a:8c:00:
d9:f9:a1:b4:bd:cb:3d:97:a2:76:96:a7:de:ee:1c:db:92:97:
96:92:87:37:e7:9d:28:f9:ff:9a:0c:ee:22:ab:71:d7:24:89:
2f:12:cd:b9:37:0f:83:40:8f:99:d8:23:b1:ff:de:17:ed:0f:
59:4e:22:51:82:37:e5:76:0c:3d:21:f9:07:0f:6e:df:0e:36:
b0:51:8c:4a:42:ca:71:d6:ad:1f:49:18:53:50:90:dd:d3:8b:
ec:91:66:e7:37:82:b4:fd:c2:a6:de:26:0f:19:a7:6e:83:a0:
71:d9:4f:ea:6d:2d:91:7a:cb:64:ef:c7:b6:30:bd:35:f2:50:
79:a2:8e:48:0f:02:10:55:f7:ee:86:b2:a1:29:f9:16:e4:f4:
09:b2:bf:a5:3d:44:17:ef:6b:8f:c9:0d:85:31:e8:66:08:d5:
f2:b3:a6:a7:d0:e1:cd:b5:71:1c:d0:26:2f:81:36:1b:f9:3e:
60:37:e1:9f:3b:cb:26:74:a0:53:af:9c:cf:a1:e0:79:07:0f:
e2:99:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:34 2026 by rpki-client