Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: owxc7h7cGq6MZgD6Wr6YxQ6c9gCZm2rAhmCSt7ZM2MM=
Subject key identifier: B4:20:1E:2B:FE:99:99:8D:A7:68:5A:BD:6D:C6:A8:78:2B:24:1A:A6
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019F91DA386A41E72B0744969533FB818AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 173F
Signing time: Fri 24 Jul 2026 02:00:25 +0000
Manifest this update: Fri 24 Jul 2026 02:00:25 +0000
Manifest next update: Sat 25 Jul 2026 02:00:25 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 0pQmcfvUdBc19qsL0iunyN6JenjLNX9GWzQUSdbsPZw=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:38:6a:41:e7:2b:07:44:96:95:33:fb:81:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jul 24 02:00:25 2026 GMT
Not After : Jul 25 02:00:25 2026 GMT
Subject: CN=b4201e2bfe99998da7685abd6dc6a8782b241aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:9e:2c:30:25:67:dd:08:e6:81:37:03:37:
fa:72:b1:25:79:60:37:9c:6f:cd:ea:74:3d:7b:55:
00:3b:0e:4d:78:eb:bc:97:3e:ea:a4:f0:de:ba:cf:
cc:e5:f5:b4:16:f1:f5:e6:a0:3f:5d:bd:12:92:05:
e6:9e:87:04:a8:2c:a1:2c:06:22:61:18:c0:18:e8:
1e:35:ac:74:d6:e3:6d:c3:bb:c4:bf:40:e6:7a:be:
1b:09:d4:cb:27:ab:0e:fc:56:1b:40:a1:0c:d1:70:
a2:db:df:50:cf:f7:f5:4d:2a:e4:4b:d6:c7:73:b1:
13:d5:8d:79:49:63:df:3f:9b:26:19:00:0a:84:d6:
df:e1:ac:97:bb:17:2b:f1:e5:22:28:a5:90:c2:e2:
10:da:85:ed:a5:d6:c2:bf:e4:66:36:15:96:5c:1a:
d0:03:3e:72:c1:70:fb:aa:2b:49:0d:b8:d6:d8:d2:
f9:f6:44:34:03:22:c0:e2:14:9a:60:ed:ed:31:40:
18:f0:3d:41:08:81:95:43:47:29:b1:bc:8f:92:3a:
b8:ab:43:59:7b:0e:3a:5b:8e:71:4e:de:0e:59:92:
9a:46:a1:4a:04:8d:d9:de:a4:28:a4:48:ea:48:bf:
b7:1f:19:15:f1:58:0c:71:87:d1:4d:01:2f:b0:e2:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:20:1E:2B:FE:99:99:8D:A7:68:5A:BD:6D:C6:A8:78:2B:24:1A:A6
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:c8:7f:ae:e7:59:39:f4:cb:e8:9d:31:48:33:ed:de:68:
e8:a8:7d:f0:7d:06:fd:70:0d:6c:da:52:31:1f:6f:31:22:4c:
64:bc:d7:c0:3a:5c:15:13:ba:97:86:01:a6:a7:ed:04:c9:4b:
8b:75:78:25:18:95:1b:96:47:22:c6:a2:b4:10:1c:f7:b0:81:
52:d4:1b:f3:1d:58:17:95:af:30:43:c5:aa:64:53:ed:11:4e:
bf:e8:cc:db:6a:f8:08:57:43:21:c7:90:b6:8c:da:6f:02:d2:
af:98:45:69:55:a7:cb:92:82:b7:66:59:d4:67:26:33:56:92:
d5:a8:c2:d5:10:1f:ec:9d:97:c7:3c:7d:40:b2:ff:af:a8:2a:
b0:09:32:7b:7e:e2:9a:2d:c1:da:c2:d8:40:99:cb:b0:67:07:
86:7e:db:64:ab:21:ca:9f:19:df:ae:f3:10:34:4b:13:e2:14:
73:eb:e0:03:93:c2:96:09:ba:a0:2d:b2:f3:51:fc:61:83:99:
3a:0f:4d:e5:2e:85:45:a9:cf:bc:cd:b8:f6:fc:b3:f6:4c:b6:
de:7c:95:8c:ac:18:d2:55:4c:5c:0b:a3:f2:a0:41:b3:24:0c:
db:b4:ae:20:54:16:b7:a2:3a:fa:b5:ce:ec:00:5f:c6:e4:0e:
ce:f7:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:19 2026 by rpki-client