Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
File: 1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft (raw, json)
Hash identifier: hhK+idObSzutkBjyPj2qFb4Mj6ediCJdxr7ZYoU398c=
Subject key identifier: 9D:2A:01:D9:7B:77:2A:12:87:0B:1F:0B:83:BB:47:AA:94:60:4E:5B
Authority key identifier: F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
Certificate issuer: /CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Certificate serial: 019F8F7EC0274C6874693330AB4AD3F5D157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:16 +0000
Manifest this update: Thu 23 Jul 2026 15:01:16 +0000
Manifest next update: Fri 24 Jul 2026 15:01:16 +0000
Files and hashes: 1: 1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl (hash: f5lGmuEJjDFIzwWF1DwiN+kjWg0fhYiwrE6aUbnfZ+I=)
2: k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa (hash: H47SjZ9BIhJeQGY/J6bkZroBOYzowjDBp3fQiJCG8Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:c0:27:4c:68:74:69:33:30:ab:4a:d3:f5:d1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Validity
Not Before: Jul 23 15:01:16 2026 GMT
Not After : Jul 24 15:01:16 2026 GMT
Subject: CN=9d2a01d97b772a12870b1f0b83bb47aa94604e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:c4:40:73:27:f5:df:19:61:13:5d:cf:99:
05:e7:e8:84:94:93:ad:c3:db:30:be:fb:e9:75:b3:
e1:c4:1b:b7:e6:c8:f4:80:5d:0a:57:c8:94:64:9c:
00:77:14:b6:22:94:22:3a:f5:1f:6e:2c:b8:8b:73:
2f:55:01:09:c7:b1:02:7f:6a:ec:e9:ae:e5:c0:e5:
7a:33:1a:bd:8d:74:52:73:ab:b0:2c:a5:9b:a4:9a:
f4:50:94:45:ee:51:56:49:7f:bc:bc:ec:3b:eb:bc:
97:e8:46:86:5b:da:22:62:bd:f2:ea:60:fa:b4:32:
7f:17:2d:b5:cd:e2:6f:48:b6:4a:b1:65:1c:25:4f:
d0:42:65:ad:7a:7b:79:f2:25:7b:f8:0d:dc:4e:92:
c0:fb:88:07:7b:56:ed:a0:57:5b:f1:82:07:a8:1f:
7b:86:7e:8d:92:c1:57:7b:51:be:21:2e:66:37:cd:
37:f9:1b:33:ea:18:15:29:fb:ae:67:06:2e:70:e5:
99:41:0f:f1:4c:27:9d:0f:2c:34:0b:f9:1f:03:0f:
ee:82:ef:f8:76:08:1c:f6:52:f7:6a:a1:72:3b:e4:
b2:55:8c:3d:d7:05:bf:f9:c2:ac:0c:ae:85:27:0f:
b2:16:9e:b7:52:f5:53:88:65:dd:8f:77:c2:66:ad:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2A:01:D9:7B:77:2A:12:87:0B:1F:0B:83:BB:47:AA:94:60:4E:5B
X509v3 Authority Key Identifier:
keyid:F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9e:cc:cb:45:30:ae:cd:d1:70:bd:ea:1f:cc:53:3d:57:69:
f0:37:fa:42:45:28:53:cb:b8:4d:74:3b:75:d4:bc:1a:c5:c0:
38:ff:d0:97:56:e7:ca:fd:81:cb:b1:82:56:ad:98:5d:82:48:
8b:d5:ee:30:6a:d7:3e:8a:1e:00:6f:18:52:86:e6:c0:9e:6d:
75:d0:ff:ab:96:53:44:98:b1:72:4d:8a:fe:c2:4a:ee:28:1b:
79:79:41:0d:f0:6b:6f:78:15:49:9e:e8:e1:32:1f:74:8b:61:
36:b4:c0:4c:7e:19:81:f6:9b:62:01:9c:44:6b:56:b4:88:d4:
3a:c8:4f:1e:9a:c0:ed:88:3e:b3:b1:b7:2f:36:1b:bb:a7:01:
23:a3:12:f7:ae:26:f7:67:89:e6:6a:cf:dd:e6:ba:4d:95:1b:
9d:54:03:e8:58:4c:e8:d1:78:36:e2:de:1f:a3:d8:be:f2:0f:
37:6e:f6:33:25:a1:c2:aa:3a:8d:b4:71:21:ca:82:99:3d:40:
8d:6a:9b:9d:6b:6d:9c:d0:be:2b:ea:d7:b7:f0:03:30:4d:e5:
d3:dd:e4:c0:95:18:fc:f6:b3:56:a5:89:9d:93:64:79:86:0e:
08:1b:78:9c:32:9c:f4:5c:c3:e0:e5:09:d8:13:16:40:14:29:
38:f6:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:40 2026 by rpki-client