Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
File: 1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft (raw, json)
Hash identifier: mqubV2gPsaqPYISyU6Yk/U4YtMqBwTCUVOp5uSA+I9c=
Subject key identifier: 82:23:0F:2F:6D:8D:3B:FD:D4:C1:F6:B0:85:9E:68:EE:0B:65:C8:9C
Authority key identifier: FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
Certificate issuer: /CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Certificate serial: 019F8F7F6DC52058A70C52411EDDE84740F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:00 +0000
Manifest this update: Thu 23 Jul 2026 15:02:00 +0000
Manifest next update: Fri 24 Jul 2026 15:02:00 +0000
Files and hashes: 1: 1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl (hash: P/sqoPX8RfI1n2Ubawg4s9qcHSTHEcntTK3s1Rnzwdw=)
2: I1oytQ2dC0mrTslmK3apIAP5fOQ.roa (hash: WdWnYz2nz10WKmvWBQa7iutQJAl62MS58LqLaXRVCgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:6d:c5:20:58:a7:0c:52:41:1e:dd:e8:47:40:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Validity
Not Before: Jul 23 15:02:00 2026 GMT
Not After : Jul 24 15:02:00 2026 GMT
Subject: CN=82230f2f6d8d3bfdd4c1f6b0859e68ee0b65c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:89:c7:8c:b5:fc:7f:25:b9:2a:95:ba:cd:
66:bb:a6:28:06:04:11:1c:9f:f5:8e:0b:eb:58:e9:
91:d5:47:14:50:ec:c6:d2:32:9d:f5:d3:54:2d:02:
a9:4b:1a:9b:9e:83:c7:b8:87:dc:27:d7:40:e1:92:
73:a8:e3:2d:b8:24:a2:88:6f:a7:38:f2:ff:44:cf:
58:61:d4:c7:ef:37:33:ec:dd:d8:ef:88:92:f8:b2:
0a:0e:09:a1:44:ba:91:b6:86:0e:67:6e:30:52:5b:
bc:17:d5:a6:45:b3:e0:a0:69:b2:d5:cc:90:9f:f4:
c7:2b:0b:da:16:da:29:72:0f:d6:b6:03:e0:33:9b:
5a:3b:18:36:56:f3:cb:5d:eb:92:99:37:d8:08:f2:
e3:a8:1b:03:69:1d:12:1e:3e:e4:f2:6a:e0:c3:61:
af:f5:e4:11:5c:74:3c:74:5e:55:13:35:8f:93:59:
02:a1:56:de:93:ed:27:cf:a9:7e:68:29:bb:e4:a1:
4c:25:fe:5d:e0:dd:19:82:d6:5b:9f:a2:66:fc:bc:
39:bd:bf:60:fc:96:48:75:af:8a:71:64:7c:f7:93:
f6:13:c7:01:f9:5f:b6:fc:78:06:48:05:f3:62:d0:
8c:82:72:a1:43:6f:c7:31:a9:01:c6:4d:31:82:f5:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:0F:2F:6D:8D:3B:FD:D4:C1:F6:B0:85:9E:68:EE:0B:65:C8:9C
X509v3 Authority Key Identifier:
keyid:FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cb:a9:94:07:71:71:15:cc:66:e3:de:e3:cb:1e:66:26:74:
e8:02:11:eb:54:3e:a0:b7:80:72:92:af:74:36:4f:74:21:3b:
b7:41:42:8d:a9:42:61:74:20:0e:fc:76:51:6a:65:69:71:9f:
b4:70:90:ba:8e:f1:d4:dd:32:9b:39:ef:9a:07:39:bb:1c:f8:
6e:ce:47:62:26:0d:f4:84:1d:93:f8:43:f8:15:5a:66:15:4c:
a4:7b:f1:e0:85:dd:01:aa:fe:52:cf:af:8e:1e:e1:5f:ae:15:
96:f0:9f:2a:a5:e8:2e:c3:9b:f8:ff:34:f0:83:8f:f2:d3:20:
3c:80:c9:b7:1a:a0:30:40:e3:b8:67:56:d0:49:e4:dc:d0:b9:
82:91:10:8e:89:93:02:33:a0:c3:2f:e5:72:e7:40:54:40:80:
36:e7:83:b9:41:4e:3e:75:75:bb:05:44:46:a8:f2:45:2b:a5:
3b:7e:52:a1:9b:23:69:b1:4b:d7:87:df:76:c7:02:94:6d:a4:
4f:ab:c7:5d:53:04:1c:e2:83:82:a0:61:61:00:3e:71:90:a9:
59:9d:f3:75:0b:d3:31:ca:2d:32:4e:2d:96:07:fa:33:0a:e1:
33:ab:d7:7d:90:c8:f0:a8:fa:bb:96:4d:d6:a6:6f:c3:0b:4b:
d2:05:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:11 2026 by rpki-client