Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier: q6zrQ+DKmbKwECAH284elqUDrHNHJux217XqC4Z5ZsU=
Subject key identifier: AF:77:E6:D9:EA:6D:3A:E9:81:9F:FC:4C:EC:1F:7D:6D:E7:6D:F6:E3
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer: /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial: 019F8F7E40BF809B3D0883AE2EA47222C9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:43 +0000
Manifest this update: Thu 23 Jul 2026 15:00:43 +0000
Manifest next update: Fri 24 Jul 2026 15:00:43 +0000
Files and hashes: 1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: O3TUQYcblls/9PMiherRrLickJ37U7vnFwC/1tTlaJ0=)
2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:40:bf:80:9b:3d:08:83:ae:2e:a4:72:22:c9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Validity
Not Before: Jul 23 15:00:43 2026 GMT
Not After : Jul 24 15:00:43 2026 GMT
Subject: CN=af77e6d9ea6d3ae9819ffc4cec1f7d6de76df6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:3d:40:7c:60:fe:bf:66:76:9c:7a:2f:b2:
c0:14:e6:66:3a:23:3a:d3:03:00:a3:fd:10:bd:34:
a0:9b:52:18:67:0d:78:c1:fb:4c:c0:8a:b3:39:67:
df:73:80:9d:85:64:eb:a9:42:db:15:24:96:38:6d:
b7:7a:65:8d:16:e6:4a:cb:5b:14:6a:d7:ae:ba:ff:
8a:a9:9e:43:7e:9c:13:b5:cf:f4:a9:25:66:67:34:
62:4a:96:a8:4f:59:70:8d:72:30:5a:97:20:b1:0a:
7a:af:39:fa:e2:18:dd:a6:28:aa:72:10:b2:7c:77:
5d:77:f1:42:11:a4:e1:f1:61:92:40:cf:5c:ee:4e:
1c:44:5b:8b:6b:9e:45:26:fe:83:2e:04:fb:ab:2d:
92:49:00:b5:f7:d7:7f:d5:09:3c:d3:a9:09:e7:f4:
7a:3c:68:7e:32:eb:18:93:40:00:26:27:14:0b:16:
2f:66:17:02:f7:b7:ca:a7:fe:9f:2a:85:39:df:cb:
1b:50:60:bc:18:b0:d9:98:b1:6c:05:97:86:a3:38:
3d:25:6e:35:2b:29:65:82:88:9d:86:3e:c1:b5:ec:
f2:70:0a:cb:fd:3f:94:fb:31:9b:67:56:d9:e7:d1:
d0:b5:5b:7a:eb:eb:ab:1a:13:e8:34:de:e7:21:70:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:E6:D9:EA:6D:3A:E9:81:9F:FC:4C:EC:1F:7D:6D:E7:6D:F6:E3
X509v3 Authority Key Identifier:
keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:f9:81:ba:ee:b4:05:7f:73:90:d2:30:50:37:46:d3:b8:
85:62:4e:f7:d6:95:4a:1f:aa:62:a4:8d:91:cf:00:f5:9a:b6:
ac:15:49:94:4f:6c:72:ba:25:7c:b5:81:06:ac:6e:3b:d6:78:
15:16:29:46:c6:b7:68:3f:2f:c6:fa:83:d6:6e:87:a5:d7:69:
69:b7:4b:a6:54:7f:be:a6:52:db:92:36:15:f0:e1:3d:6d:8f:
42:ca:c1:2f:69:02:db:96:75:dd:03:50:ea:8d:2f:60:74:d5:
b2:fb:3d:81:89:50:96:9a:02:8b:6e:ec:32:cb:66:97:3e:65:
ea:0e:57:55:8b:25:a1:82:cf:2d:ee:5a:fd:cd:fa:5d:c2:a0:
d8:f9:f9:89:e7:dd:ab:67:a5:c6:7d:ce:89:a4:66:3e:c1:fd:
26:bd:f1:bd:18:00:b3:0c:2e:24:0e:9c:3b:b0:c2:dd:12:f8:
c5:73:3f:6a:d0:4d:d8:5f:77:7c:e6:b0:fc:ae:5e:25:76:bd:
28:05:b5:e0:6c:4e:54:bf:ef:44:0b:c1:04:c9:4a:c5:2d:c4:
a9:76:dd:9d:c8:25:11:7f:45:e4:47:91:81:34:3d:5e:a7:79:
d1:6b:eb:d6:dd:f0:c2:fb:d1:a5:93:b5:9b:cd:e2:87:85:af:
47:92:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:57:50 2026 by rpki-client