Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: KGC4UUP3WP5gvPJslyOjCrMtVOt7evzG7MdNvBxzyB4=
Subject key identifier: D8:FA:C9:A8:87:92:F4:FA:7C:37:E8:C4:E6:34:31:DD:54:DD:9C:FA
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 019F8F10B2380AED50789DE90DD6A5266636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 1371
Signing time: Thu 23 Jul 2026 13:01:03 +0000
Manifest this update: Thu 23 Jul 2026 13:01:03 +0000
Manifest next update: Fri 24 Jul 2026 13:01:03 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: mc44edPeInCwcThoLlZYQlrg46DAtBgdBk1nkcOQ8cw=)
2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:b2:38:0a:ed:50:78:9d:e9:0d:d6:a5:26:66:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Jul 23 13:01:03 2026 GMT
Not After : Jul 24 13:01:03 2026 GMT
Subject: CN=d8fac9a88792f4fa7c37e8c4e63431dd54dd9cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:d4:f0:88:03:7a:4b:12:fc:41:d8:52:7d:
49:c7:95:bd:1e:31:a9:36:f7:83:a8:a1:bb:d9:6e:
95:6c:77:01:42:a9:be:74:35:ca:f9:5e:9e:84:5f:
54:4a:07:1c:19:c1:37:81:b4:0f:53:65:38:c5:62:
74:78:f3:71:de:bd:f8:1d:c5:b8:d6:ed:97:d2:66:
25:71:90:5c:1c:17:14:36:13:f8:6f:1c:d7:be:fc:
74:bb:bd:51:86:08:8b:e3:5b:4f:ad:28:96:c3:a3:
de:99:80:52:4a:65:bf:fc:bf:a4:73:3f:7b:4c:75:
26:27:5b:b1:09:82:0c:1e:e1:b1:1c:d1:7a:83:05:
6a:0d:77:33:19:df:44:47:12:73:cd:7b:1d:c7:b0:
50:79:c9:89:5a:af:10:24:e3:6f:77:c6:2f:a5:46:
c7:d6:0d:a6:60:f7:7d:fb:a5:10:f6:7f:ff:08:09:
11:d4:9b:28:bf:69:f6:c6:96:8e:87:b7:80:f3:5a:
4c:b6:09:50:bf:d5:01:74:4a:dc:0b:57:f3:89:1b:
7a:cd:14:1f:f0:19:91:6a:18:69:9f:86:78:9f:a4:
8d:dc:10:55:91:31:f2:4c:03:6a:15:8f:81:1c:5c:
de:94:84:ef:a2:79:70:cd:28:55:39:98:a9:bb:a1:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FA:C9:A8:87:92:F4:FA:7C:37:E8:C4:E6:34:31:DD:54:DD:9C:FA
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ac:23:19:62:a3:0b:6c:36:69:79:bc:91:42:5c:cf:94:f3:
bc:c4:10:26:d2:f2:cc:20:2f:fc:1f:24:44:6a:ff:dd:c2:9f:
1e:bd:60:15:87:60:4d:80:59:25:ed:d1:b9:cb:b8:1e:df:d9:
ae:6b:4b:99:04:7c:51:5c:e6:4e:ed:af:cf:60:a2:df:39:d6:
64:fa:b0:3d:ba:dd:d8:89:20:4d:e4:d1:a1:9b:22:23:06:9e:
72:53:61:ef:d4:04:f4:76:27:d6:72:b4:9d:fd:25:d7:09:6a:
4a:c4:c6:a3:13:dc:fd:4e:9d:45:fc:13:f0:f6:73:14:66:d7:
a2:2c:b0:82:da:cf:75:93:64:cf:62:c5:a3:62:00:45:93:cb:
d1:58:40:1f:46:45:6c:df:03:b2:b4:9e:af:24:b2:df:bb:b0:
15:9a:8f:18:76:39:41:6b:90:ca:0b:21:c1:40:5d:fd:33:cd:
0b:51:03:d5:6d:34:53:1a:fe:f4:85:11:55:1a:30:69:8f:55:
86:c5:01:62:d1:8e:0e:ec:02:10:54:40:50:1d:5e:02:26:69:
ea:7d:c8:54:2b:c9:96:d5:a1:bf:b0:2c:41:d8:0c:1b:4f:0d:
7b:23:f6:57:23:93:ef:f6:6e:f9:18:f9:3b:cb:ed:be:d4:73:
a5:75:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:04 2026 by rpki-client