Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: VgtFwycCnqNbGqwRUrj/ZoWqzYfVLRlUZCJEAVZoJu8=
Subject key identifier: F9:D6:08:77:96:49:84:C4:F0:89:C2:67:BB:B2:FC:43:4B:0D:44:02
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019F916D877611C2B81CDE25A56C1D93C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 07BC
Signing time: Fri 24 Jul 2026 00:01:42 +0000
Manifest this update: Fri 24 Jul 2026 00:01:42 +0000
Manifest next update: Sat 25 Jul 2026 00:01:42 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: bOl3BVKDhLLNsOUaSHUq5dRKZighe8bLxcbf2bDFRwQ=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:87:76:11:c2:b8:1c:de:25:a5:6c:1d:93:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Jul 24 00:01:42 2026 GMT
Not After : Jul 25 00:01:42 2026 GMT
Subject: CN=f9d60877964984c4f089c267bbb2fc434b0d4402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:cc:8a:94:b9:fe:01:e7:d8:77:b7:1d:94:
42:9c:13:8c:2f:cc:2f:31:56:64:16:45:a3:c0:c6:
4e:f0:bf:28:5a:e3:85:f3:e4:1a:34:8d:aa:ab:45:
7e:07:a6:ce:f3:93:60:e7:31:5b:f6:3f:c4:e3:0b:
2d:e1:48:38:83:ef:97:1f:c7:67:88:26:57:7a:c9:
d4:7b:7c:a9:59:33:12:e3:b0:cd:c8:48:ca:04:d3:
7a:13:93:48:a0:fd:72:af:42:9d:6c:7e:03:51:51:
de:75:94:f9:a1:d2:57:c6:31:b3:20:2e:4b:d1:7c:
d5:ad:82:46:c1:2b:21:bf:58:85:77:24:81:8d:d6:
49:fb:1e:70:cd:84:69:4e:28:64:c5:e3:f8:3b:1c:
f1:40:cd:fe:40:c5:e3:a1:f4:cd:63:c5:51:c1:d8:
40:5f:ed:4c:9c:f4:23:bc:10:67:c5:32:31:2a:26:
59:82:70:e7:00:e9:7b:33:a7:05:59:54:c3:fd:f4:
e9:5d:74:66:2b:50:61:49:45:fc:dc:9a:51:7c:c5:
2a:be:9b:ed:eb:26:8f:91:6a:74:40:67:04:a9:d8:
c9:ea:c7:4c:fd:b3:6d:3f:31:3d:4e:a2:5f:b5:20:
1a:d1:b0:e2:d9:e0:6f:b1:29:13:1b:a1:31:98:8e:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D6:08:77:96:49:84:C4:F0:89:C2:67:BB:B2:FC:43:4B:0D:44:02
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8b:f4:5c:0c:63:4e:c9:8d:57:d6:a9:91:91:e2:d1:76:6d:
3b:3c:c5:71:44:d1:72:14:2f:0c:35:d8:de:3b:d9:27:b9:22:
0c:c8:a1:d8:89:8e:9f:4f:57:99:3f:ed:a7:5f:bc:31:31:63:
9e:eb:ec:1b:32:c6:59:f3:a5:8d:62:95:1c:3f:f8:3d:dc:39:
d6:d0:df:c4:b4:b9:85:04:1a:0d:52:fc:fd:7e:a0:e5:8f:28:
1a:87:c7:2a:07:af:31:f4:9b:20:00:27:a7:b8:96:33:fb:9a:
2f:a4:3d:43:4f:68:83:42:a5:3c:1a:db:b4:fc:d9:bf:7e:3f:
70:93:63:da:25:1c:d6:b5:2e:1a:e1:cb:7a:82:79:49:bd:8f:
95:37:2d:04:82:9a:bd:4b:b5:a3:42:ed:d2:0d:b0:54:9b:b2:
67:a4:3c:27:3f:10:cf:93:8e:76:32:9c:66:2d:7e:f7:bd:8b:
11:f5:10:95:98:37:4b:92:e9:6a:e1:92:09:bc:26:bf:5a:f9:
2d:4f:f8:f6:ce:a1:04:81:18:37:fb:98:e6:c8:1f:33:fe:70:
23:fb:86:0f:58:c8:8f:7a:a5:a3:68:6f:02:4a:9e:38:d4:38:
aa:00:c9:94:2e:bc:2a:66:7b:23:62:b2:94:39:9b:9d:c7:e8:
0a:a7:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:09 2026 by rpki-client