Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: jK2vLL+yF4pYEUtx3QB2q+o8d6AbbJ7+7jqlmUi6tyc=
Subject key identifier: 61:3D:CD:85:22:2B:5E:3B:04:94:25:40:9E:27:4D:C1:B3:E8:36:05
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019F8F7E16C341D70D81C08FAD62479B9D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 14ED
Signing time: Thu 23 Jul 2026 15:00:32 +0000
Manifest this update: Thu 23 Jul 2026 15:00:32 +0000
Manifest next update: Fri 24 Jul 2026 15:00:32 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: KZ8un8zl61I3NEfWdUhIbgOBmK8/Yhka7F5I2xuB5UI=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:16:c3:41:d7:0d:81:c0:8f:ad:62:47:9b:9d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Jul 23 15:00:32 2026 GMT
Not After : Jul 24 15:00:32 2026 GMT
Subject: CN=613dcd85222b5e3b049425409e274dc1b3e83605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:15:9d:3a:d3:b3:d6:6b:2e:99:27:db:d0:
7e:61:8c:67:51:cf:56:c4:03:36:ed:8e:84:45:43:
be:6a:7c:ea:03:81:42:85:9b:08:a3:0f:b2:9e:97:
67:d3:2c:64:6b:65:6b:a1:86:53:8d:16:b1:ad:44:
0b:72:6f:d3:ce:85:be:6c:5f:25:86:bc:b9:b2:6f:
c3:3a:c0:fd:55:3b:94:f2:6d:77:bb:0d:3b:2f:4a:
2b:99:97:a2:64:49:ae:16:75:5d:be:ba:e7:43:9f:
56:ad:a6:34:76:b6:33:fc:9f:77:4d:3c:5a:04:63:
d6:59:fc:6e:01:97:a8:06:89:e6:0a:73:aa:6e:c4:
31:29:f0:c2:44:61:d5:19:07:e1:3d:47:65:cc:34:
23:5b:ef:14:c4:f0:a6:15:8b:39:a4:84:43:be:50:
76:1f:73:5e:60:04:83:c4:b1:52:63:fa:9f:a9:9c:
98:6a:5c:e4:a6:e2:1c:29:09:d6:7a:c3:c5:d1:28:
67:01:0c:0a:3e:70:7b:46:22:fb:74:90:e6:28:1a:
75:8e:09:9b:e9:b4:6c:91:6f:67:06:01:dd:61:90:
bb:e3:3a:27:6c:8d:db:a1:e0:d8:41:7c:3b:38:9c:
0b:54:67:82:67:26:8a:38:22:93:57:a4:6a:c2:db:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:CD:85:22:2B:5E:3B:04:94:25:40:9E:27:4D:C1:B3:E8:36:05
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0f:7b:76:7a:f4:4c:71:9c:c9:e9:61:41:0a:91:c1:59:13:
86:e8:80:e8:69:85:f3:89:3d:13:bd:65:98:61:56:52:14:70:
50:57:fd:7f:06:46:4c:86:f5:c5:3b:22:d0:b8:5f:ce:57:7c:
e1:19:c4:22:9b:57:81:ee:7b:52:5b:0e:19:a5:45:cc:cd:4d:
a4:59:d2:7e:b2:3f:da:0c:ba:f6:60:13:be:12:45:0e:49:06:
82:e4:4d:6a:7c:7d:9b:46:f0:80:12:aa:9e:c2:1b:66:54:20:
b9:cb:9a:b7:ac:97:71:35:cc:48:09:a2:ba:f0:2d:39:0c:7a:
b7:f6:e7:d9:38:85:b1:4d:11:d1:e3:2d:69:ab:f6:e9:53:ec:
07:71:77:19:89:87:22:16:2a:de:b4:da:45:7b:32:8d:12:d4:
d6:45:39:62:cb:e3:c1:9d:5f:fa:b8:62:86:27:00:54:7e:04:
91:ba:6a:26:30:ea:c9:4a:7b:54:33:35:e0:a9:02:51:a5:51:
d0:9d:8c:38:54:db:9c:b7:22:98:a6:a3:ec:b1:47:f0:31:e9:
27:b9:f9:8a:44:1b:2a:04:9f:ea:d5:d7:53:26:22:ad:95:37:
4e:d4:93:79:7f:e1:c7:3a:cc:e5:a0:94:0b:82:20:93:20:be:
36:10:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:32 2026 by rpki-client