Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: /wDzbGZSk7K9srVElPtIhRxbYHa8Nxttr79P7cO2CBg=
Subject key identifier: D0:E1:85:8C:03:83:91:B5:4C:F5:29:D5:7F:EC:67:4F:CB:73:54:9E
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019F91A440266524A6FB7E258C3E4C6DCCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 0332
Signing time: Fri 24 Jul 2026 01:01:28 +0000
Manifest this update: Fri 24 Jul 2026 01:01:28 +0000
Manifest next update: Sat 25 Jul 2026 01:01:28 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: X2BKDXwpzZ0qXGhO80hXSvGfk8oWpzDT+CFyfQA7KyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:40:26:65:24:a6:fb:7e:25:8c:3e:4c:6d:cc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Jul 24 01:01:28 2026 GMT
Not After : Jul 25 01:01:28 2026 GMT
Subject: CN=d0e1858c038391b54cf529d57fec674fcb73549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:5c:0b:a2:0f:f2:9c:25:67:a5:f9:ef:8e:
db:a5:5f:21:cc:2d:09:32:32:06:f1:02:33:cc:13:
2e:b2:89:ad:b3:d4:85:ae:54:3b:60:9f:d5:0e:31:
6d:f0:3f:97:6e:7e:4a:42:66:d4:4e:39:1c:95:f6:
7d:2a:65:2e:09:f3:61:1b:7d:1b:bd:64:5c:e3:0e:
4b:3b:12:77:20:3d:81:4e:f0:25:c3:00:c3:04:af:
0c:9f:a9:d1:39:2a:25:2a:7a:c6:14:65:21:b3:0c:
a9:76:e0:49:32:d4:b6:09:8b:47:a4:cd:eb:c7:e7:
d2:24:88:cf:2a:7a:ca:41:ca:cf:73:5b:c7:bd:b9:
5f:0c:06:cc:92:ce:d6:e0:fc:2b:e4:69:6d:ff:c4:
aa:f8:61:bc:c4:91:b6:a8:c4:3e:cb:52:85:f9:1e:
39:cc:8b:61:30:4b:46:a0:f9:97:0f:89:08:07:cf:
12:b6:7e:05:dd:eb:57:d0:7b:e4:c3:bf:79:24:fb:
7e:b3:d5:f5:c6:a1:d8:f9:f9:d0:25:bb:93:8f:02:
d0:58:63:d3:9d:27:77:1c:b4:92:38:f8:39:09:77:
4d:75:c1:e0:74:b6:64:c9:e7:3d:47:d5:b9:b5:cd:
a7:7e:8b:2d:88:d6:ae:1a:99:99:a6:ca:50:b8:98:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:85:8C:03:83:91:B5:4C:F5:29:D5:7F:EC:67:4F:CB:73:54:9E
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:18:4f:e7:fe:2e:c3:98:b5:d3:9a:74:23:41:98:cf:b8:f3:
5e:47:f8:b2:15:da:8c:58:75:5f:1e:b4:79:17:0f:e4:5c:d8:
bd:6e:39:de:3f:4f:31:ab:dc:70:b3:94:02:95:a2:06:ce:35:
71:4d:37:18:8c:9e:bc:b8:61:e8:b0:c1:3b:3e:a1:97:48:ae:
54:45:36:60:28:0f:78:38:46:35:be:a8:81:7f:de:33:cc:68:
13:9e:9a:9d:a7:91:7b:93:bb:cb:03:4f:26:c2:2b:91:d9:c1:
a5:89:4e:7f:02:22:15:3b:46:d9:3f:98:16:48:0f:ba:44:c3:
9c:8d:ee:df:3d:6f:d3:db:64:fc:31:f5:2f:3b:2c:09:5c:f7:
14:72:ec:bb:c2:41:73:71:a6:18:ed:93:0c:c6:f6:71:e5:37:
ad:50:e9:14:c6:9f:f6:fc:3f:04:76:d9:11:f2:64:7f:b6:98:
d5:55:b7:5d:a5:c5:80:1e:3c:98:cf:3e:c8:cf:d0:e2:2f:12:
5e:83:f6:74:1f:8e:fa:e6:4a:26:1a:3d:54:05:46:e5:7b:65:
f8:45:bc:e6:41:40:01:43:d9:28:0c:e1:89:47:21:d7:e0:1b:
53:72:02:a0:19:75:64:29:18:5e:95:fb:7e:6f:57:57:11:dc:
19:09:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:31 2026 by rpki-client