Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
File: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft (raw, json)
Hash identifier: FvsYP/jii27pwIaETKnHda6xcCCbLV+0r7Z6HtOAHi8=
Subject key identifier: C8:71:79:45:A5:9A:B9:0B:FE:01:CC:C1:55:D2:AD:AD:9F:00:6D:7F
Authority key identifier: FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
Certificate issuer: /CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Certificate serial: 019F905A049873961E8030050419F0D36DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:00:46 +0000
Manifest this update: Thu 23 Jul 2026 19:00:46 +0000
Manifest next update: Fri 24 Jul 2026 19:00:46 +0000
Files and hashes: 1: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl (hash: b0PMyqA7jMENZ0DArfAgKp0B5RjBxwPQcdX2YYqYZbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:04:98:73:96:1e:80:30:05:04:19:f0:d3:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Validity
Not Before: Jul 23 19:00:46 2026 GMT
Not After : Jul 24 19:00:46 2026 GMT
Subject: CN=c8717945a59ab90bfe01ccc155d2adad9f006d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:88:cb:4b:2c:13:82:71:b8:e7:1e:6b:bb:
d6:ec:3e:d4:8b:b9:de:0e:90:cb:41:1f:03:26:39:
5d:9b:ed:fd:ba:db:89:ab:b1:46:4a:08:e4:6a:ca:
cc:df:ce:39:6c:33:a4:46:af:9c:8f:be:d4:c4:cc:
50:58:b3:9e:50:e2:f2:72:66:03:96:6f:6f:b7:a9:
b6:7c:ce:a9:cf:54:66:ce:8a:1e:6c:6b:73:8a:05:
bd:c3:82:9c:7a:12:f7:9d:69:5d:76:2a:82:02:67:
7a:44:89:30:ca:3a:2b:80:0d:a1:c7:64:26:8b:b5:
91:d8:86:6d:e4:2b:0d:f0:38:ee:bf:1b:2c:b3:f3:
fa:87:5c:1f:61:25:e7:b5:ff:09:85:ca:18:a9:2d:
53:c5:7a:4a:f0:62:bf:3f:90:ab:08:e3:92:4c:99:
78:de:71:f7:2b:15:8a:ad:23:e1:08:e5:88:a0:6e:
36:54:70:64:67:61:b8:a9:40:4f:c5:bf:9e:fd:d8:
7d:30:5f:c0:1c:65:ee:a7:24:03:89:98:1d:de:69:
40:6a:03:11:3f:1b:c3:38:ec:5f:c4:f7:77:77:0a:
22:10:04:fe:b8:23:95:15:73:95:79:50:85:b9:6d:
8e:af:9f:d3:9c:50:2c:42:a6:a3:ac:59:1d:c9:d4:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:79:45:A5:9A:B9:0B:FE:01:CC:C1:55:D2:AD:AD:9F:00:6D:7F
X509v3 Authority Key Identifier:
keyid:FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9e:18:cb:b1:93:bd:e5:f7:70:13:06:f5:1f:9f:06:1c:bd:
a3:34:5c:ab:e0:0b:62:84:62:62:ea:9e:89:e8:44:fc:e4:d1:
aa:c0:bb:58:30:80:b1:8f:22:10:fe:97:fc:ed:2e:5d:a5:5d:
ef:71:6a:69:7c:2a:36:b5:d2:fc:6f:1d:be:3a:12:08:82:30:
ec:a9:d0:89:1a:74:b8:48:71:fc:cc:c0:8c:26:9a:b9:87:ba:
d7:a5:17:07:c6:7a:7f:2c:8d:47:cb:67:3b:66:7c:a1:8e:90:
91:0f:0d:d1:8f:0f:df:ad:22:38:a0:76:e7:3c:e9:ec:d0:38:
d3:86:f6:60:93:ae:ae:12:ae:f8:58:74:a6:1f:3b:a8:b4:bd:
78:a3:88:f6:80:c3:a0:87:b0:c1:0b:12:96:bf:36:d8:53:60:
90:1a:e5:a5:25:2b:c5:16:5c:75:0d:b2:a5:4a:e3:55:be:75:
29:60:18:01:9d:ff:b9:aa:19:9c:f3:3a:6a:7d:d3:1c:9c:c3:
e8:9e:c7:ef:ee:72:b8:17:d2:8c:ec:5b:e0:ec:37:b2:13:42:
4d:92:50:58:2d:94:74:4d:d8:23:69:63:fc:4c:91:80:7c:0f:
f5:a2:01:e6:76:1a:ef:af:63:7e:d2:4c:02:51:b7:60:b2:00:
5a:1c:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:40:53 2026 by rpki-client