Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
File: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft (raw, json)
Hash identifier: p6K6ePE7CQ1/odMz3QF7B12Q238h3jyE4hKYfGfqzLk=
Subject key identifier: DA:8B:33:38:EE:5A:45:33:AE:26:8D:06:12:BE:34:32:B3:9C:49:A9
Authority key identifier: FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
Certificate issuer: /CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Certificate serial: 019F916D1FEC7821CCC9F3789587E036E1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:15 +0000
Manifest this update: Fri 24 Jul 2026 00:01:15 +0000
Manifest next update: Sat 25 Jul 2026 00:01:15 +0000
Files and hashes: 1: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl (hash: goOUx8JBThQKWj5/aDWFmG2sY1UUzcOek8G14/5l9OQ=)
2: e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa (hash: BA/0hbuhvoStHQX1fKvbqzVATh/m+qBTaz7v7V7bT6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:1f:ec:78:21:cc:c9:f3:78:95:87:e0:36:e1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Validity
Not Before: Jul 24 00:01:15 2026 GMT
Not After : Jul 25 00:01:15 2026 GMT
Subject: CN=da8b3338ee5a4533ae268d0612be3432b39c49a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:ed:ae:29:7e:aa:43:5f:53:65:42:d5:63:
1f:41:4c:b7:3e:63:ea:60:6d:42:b4:e7:03:fa:06:
17:2c:78:bb:20:11:63:d2:e4:22:c2:ee:fd:89:9f:
63:52:a2:f4:bf:94:6e:ed:68:e4:58:c3:28:f1:61:
7e:b7:0f:da:73:c9:a7:f3:b7:cf:d7:b4:58:7a:ec:
2b:72:03:06:97:11:29:08:42:2f:21:98:ca:3d:04:
6d:9a:e6:e8:f5:2e:70:aa:e2:f2:80:56:32:57:ad:
fb:72:d5:ac:a8:d2:d6:d4:fc:26:02:ff:31:65:b4:
be:ec:6f:ec:d8:3d:22:1e:e0:dc:2e:2b:d4:0d:c8:
dc:ec:a8:40:9d:5f:47:6a:ad:09:43:7d:a9:b5:a1:
e4:12:8b:f2:41:e2:41:55:9f:ae:f9:2b:9e:f7:1b:
5d:8f:bd:7c:2a:ab:e1:bb:09:f2:d8:08:e4:ba:9c:
67:e1:f2:07:ca:d5:e8:e8:6e:0e:c5:56:40:0b:f7:
7b:2e:7c:89:2a:36:0f:1e:30:9f:c4:23:f2:8d:12:
5a:5a:af:fd:e8:20:81:97:6f:1d:e0:be:f6:ab:fc:
ea:5d:a6:01:a0:86:02:6a:38:41:72:aa:c6:77:fc:
6f:3a:b2:29:5d:d2:00:b2:74:a7:cd:c9:3d:60:e2:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:33:38:EE:5A:45:33:AE:26:8D:06:12:BE:34:32:B3:9C:49:A9
X509v3 Authority Key Identifier:
keyid:FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:d1:0a:c9:52:aa:75:0d:8d:c7:9c:d7:12:56:b0:92:21:
d0:b1:be:18:cc:1b:ea:cd:aa:d2:81:29:7f:7f:76:ea:8d:06:
16:91:a0:53:cb:92:7c:50:38:76:b7:77:f7:b2:61:7b:18:de:
b4:0c:85:90:21:4e:8d:9a:25:2f:21:eb:10:af:06:62:cb:7a:
41:1c:ed:28:cd:b9:aa:3d:e6:da:76:02:a3:a5:de:08:ed:ab:
02:4d:3e:6e:61:84:96:3d:cc:a7:3b:a4:ab:6d:c5:56:d9:db:
d1:72:b6:94:85:2e:63:3a:62:2c:07:e6:e5:80:89:47:29:69:
02:aa:ab:fd:72:4e:f3:b5:1e:e9:2c:08:87:f8:bf:7f:37:33:
aa:ce:cd:0e:7b:44:28:c8:dc:2a:d3:73:a8:0a:7c:57:66:ec:
b0:a6:38:d2:a4:6c:40:b1:0f:aa:06:33:a6:12:27:29:9b:f8:
d8:a2:dc:80:0e:dd:46:72:34:6b:bb:7e:8e:89:fc:b5:78:0e:
52:97:8e:9c:6c:d0:5d:a9:ca:6b:95:8c:48:97:d2:d6:fd:8b:
ef:05:48:d1:49:3e:ad:27:51:ca:c7:76:4b:d6:15:7a:3c:a4:
c3:03:ca:5e:1c:1f:e3:e3:c0:35:9e:44:ec:10:d3:19:c3:78:
c6:16:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:36 2026 by rpki-client