Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: iGh9n8ISkI2Ch2imLGQtrqvuXMMVe2fLVjNdLuV8SsM=
Subject key identifier: 3F:C4:4C:71:6C:60:79:5D:EA:C4:03:E3:67:C1:19:F4:BB:39:BF:B4
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 019F9135CA3DE656AC8B4D5C3443D1A05DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1838
Signing time: Thu 23 Jul 2026 23:00:49 +0000
Manifest this update: Thu 23 Jul 2026 23:00:49 +0000
Manifest next update: Fri 24 Jul 2026 23:00:49 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: p7CrebnmqEEOIbNjNW+vvtdu06DVAa3BvMp+h2VckIs=)
2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:ca:3d:e6:56:ac:8b:4d:5c:34:43:d1:a0:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jul 23 23:00:49 2026 GMT
Not After : Jul 24 23:00:49 2026 GMT
Subject: CN=3fc44c716c60795deac403e367c119f4bb39bfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:b4:17:3b:a1:8b:a7:08:e0:c7:f2:0a:a6:
d9:1c:94:69:cd:2e:21:1b:c8:41:48:81:c0:36:95:
73:de:d0:60:9d:4f:21:51:1f:a1:f8:35:12:69:8e:
39:e1:d5:72:49:46:71:55:4a:4d:f3:e5:04:4d:f0:
db:36:41:76:18:a1:ed:0f:37:fe:a2:81:2a:62:af:
30:da:2f:d3:91:dd:eb:3f:b2:96:62:61:ad:ce:b0:
1b:7f:49:97:de:d3:b2:10:4c:8a:d1:20:87:2f:98:
0c:9e:c0:f0:43:28:cc:8d:fe:56:04:21:0f:86:94:
cc:7a:e3:7f:a1:77:cf:27:97:46:1b:28:b5:26:68:
7b:5b:d7:84:19:a5:a1:ed:37:2c:1f:c3:33:23:20:
7f:eb:ba:70:21:47:b7:34:41:95:1f:52:04:aa:7a:
ce:da:02:79:84:46:a9:a3:a5:9f:31:e8:d9:48:da:
43:bc:05:e4:33:42:ca:65:35:35:6c:dd:54:04:d6:
c4:77:67:79:20:f5:77:b0:d9:87:33:6f:33:32:72:
da:5f:a7:61:ac:a1:70:27:a2:f2:0f:2c:63:9f:d7:
c1:3f:b1:c3:3d:33:17:7a:0a:20:8a:3c:24:13:53:
de:ea:bf:d1:48:b4:28:ad:0c:78:2e:8b:15:9f:54:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:4C:71:6C:60:79:5D:EA:C4:03:E3:67:C1:19:F4:BB:39:BF:B4
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:db:ab:e6:16:8e:14:16:3a:ee:5a:83:cd:61:22:5e:21:f6:
ee:12:02:37:dc:d3:86:b4:40:ce:b0:c9:22:89:50:3e:ad:60:
cf:88:e8:91:ac:01:1d:23:29:65:b8:a1:b9:71:10:99:20:b7:
2f:58:01:85:d7:0e:fb:5a:e6:31:79:ab:e1:dd:a8:33:4d:27:
d1:b3:14:2f:b8:ef:46:42:fa:fc:d9:32:f3:a1:b0:cb:47:ef:
31:c9:19:4c:06:df:c0:4f:f6:47:10:cf:dd:69:4a:93:82:74:
5d:43:5b:85:fe:d3:66:65:a8:67:a0:72:9c:a2:b0:af:45:9e:
c8:02:e1:93:af:ce:39:17:75:2f:ee:fc:20:8a:4d:11:2c:92:
2a:64:ec:79:54:2c:4f:a2:f5:9b:f8:a2:cc:0a:25:5b:47:24:
1b:44:88:a4:f1:23:c7:54:67:2f:85:a3:d2:7d:66:64:ce:d9:
cc:08:c9:3b:7b:d8:47:a1:9e:c1:ee:d7:fb:29:ed:89:30:38:
b0:92:d9:d2:da:29:15:c0:5f:79:c3:e7:d1:5e:61:25:b8:c1:
fb:15:06:95:f1:d6:ee:6d:6c:04:32:41:2f:25:2f:71:d6:59:
ea:d1:e6:4a:e3:56:d1:d5:30:44:14:91:7f:41:74:21:67:9b:
78:aa:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:04 2026 by rpki-client