Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: iPWN1NkgnXqACH9FJou5/s9s0U/DmJWgJIWvjXwinvw=
Subject key identifier: 13:0A:B8:97:D5:1B:A4:7A:3A:A3:4C:A1:14:75:6F:2B:88:9B:90:2E
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019F87578956E67B370377A4DC1C87173055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 1063
Signing time: Wed 22 Jul 2026 01:01:28 +0000
Manifest this update: Wed 22 Jul 2026 01:01:28 +0000
Manifest next update: Thu 23 Jul 2026 01:01:28 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: XE07T+wPaSx7dp75l+8c0/21YJrzB0RBf9qYIijI62w=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:57:89:56:e6:7b:37:03:77:a4:dc:1c:87:17:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jul 22 01:01:28 2026 GMT
Not After : Jul 23 01:01:28 2026 GMT
Subject: CN=130ab897d51ba47a3aa34ca114756f2b889b902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:0c:47:f0:b9:62:46:e9:ae:6f:31:d4:4e:
8c:47:bd:27:65:d8:51:40:75:80:bd:42:72:26:89:
c6:ed:83:86:17:2d:1c:ed:8c:ac:07:f2:f2:bf:ce:
0d:61:8d:2f:2e:9d:36:55:d0:53:2f:6f:90:85:40:
6a:da:2a:0a:ba:02:86:f6:b3:d8:d4:2a:d5:c1:4b:
ca:89:cb:14:ab:e8:cd:88:58:d5:99:a0:84:1e:51:
9a:75:08:69:06:5f:b1:b5:0f:48:06:22:6d:86:de:
98:d2:33:10:5c:6d:32:28:1a:5e:7a:70:89:c2:44:
6f:41:f8:da:9a:36:ba:37:5a:e5:16:77:94:8d:82:
44:b7:34:86:7d:35:f6:2b:35:f2:e4:cd:47:59:f3:
de:77:90:f1:db:c5:eb:36:e0:52:83:a8:c5:dc:06:
46:d0:c0:26:09:6d:c1:44:3c:0f:6f:14:f4:2b:d9:
04:88:3f:08:72:aa:3c:5a:2c:f8:f3:d2:50:4e:cb:
bc:6a:a3:3d:d3:9a:a1:46:a0:65:f1:f1:4d:4b:b2:
3d:63:21:c8:9a:10:11:6a:ad:46:22:ec:87:21:1f:
46:11:00:c8:5e:75:5e:b1:13:42:89:c5:00:f4:27:
7a:d9:f3:09:32:d0:85:ef:c4:a2:c6:42:7e:75:26:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:B8:97:D5:1B:A4:7A:3A:A3:4C:A1:14:75:6F:2B:88:9B:90:2E
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4a:c4:f4:a1:ab:d0:1e:64:93:c5:79:a3:02:8a:90:a3:90:
21:76:f5:59:a7:71:0f:3f:21:96:b2:46:e8:b8:6c:cf:e0:0d:
12:51:2b:23:24:97:6a:c6:24:be:bb:fa:cf:b1:68:17:55:f5:
01:e2:c1:ae:2c:ee:9f:68:cc:20:cd:98:bc:5c:c9:99:d4:17:
67:9f:2b:aa:98:29:65:c3:2f:dc:ca:0d:62:68:af:76:58:ee:
61:a4:cd:9c:0b:38:83:71:a9:34:8a:5a:98:ea:c9:f1:f9:86:
e2:49:0d:1a:b4:94:f8:75:57:59:2f:1a:79:41:f1:04:6c:81:
b6:87:40:77:62:27:50:bc:50:b6:a0:91:bf:9e:be:aa:e4:90:
fa:33:41:1c:17:e7:d1:02:c8:32:cd:78:67:c4:64:b4:80:ce:
e6:af:96:60:31:46:64:87:c7:fd:26:d0:c3:b8:ce:3b:50:81:
7d:84:3b:f5:b6:a1:f9:46:6b:09:de:01:22:42:74:0f:e0:37:
9d:89:ca:a8:2c:d7:5c:a5:16:de:9b:14:9e:99:b6:c6:a1:32:
17:f3:23:14:46:fc:75:61:b2:f9:34:fe:e1:a2:c8:33:34:71:
51:19:69:93:3e:35:a0:4d:86:60:f0:d1:14:2d:c9:a3:04:34:
90:d8:dd:30
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+HV4lW5ns3A3ek3ByHFzBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjYwNzIyMDEwMTI4WhcNMjYwNzIzMDEwMTI4WjAzMTEwLwYDVQQD
EygxMzBhYjg5N2Q1MWJhNDdhM2FhMzRjYTExNDc1NmYyYjg4OWI5MDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFoMR/C5Ykbprm8x1E6MR70nZdhR
QHWAvUJyJonG7YOGFy0c7YysB/Lyv84NYY0vLp02VdBTL2+QhUBq2ioKugKG9rPY
1CrVwUvKicsUq+jNiFjVmaCEHlGadQhpBl+xtQ9IBiJtht6Y0jMQXG0yKBpeenCJ
wkRvQfjamja6N1rlFneUjYJEtzSGfTX2KzXy5M1HWfPed5Dx28XrNuBSg6jF3AZG
0MAmCW3BRDwPbxT0K9kEiD8Icqo8Wiz489JQTsu8aqM905qhRqBl8fFNS7I9YyHI
mhARaq1GIuyHIR9GEQDIXnVesRNCicUA9Cd62fMJMtCF78SixkJ+dSasdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBMKuJfVG6R6OqNMoRR1byuIm5AuMB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkrE
9KGr0B5kk8V5owKKkKOQIXb1WadxDz8hlrJG6Lhsz+ANElErIySXasYkvrv6z7Fo
F1X1AeLBrizun2jMIM2YvFzJmdQXZ58rqpgpZcMv3MoNYmivdljuYaTNnAs4g3Gp
NIpamOrJ8fmG4kkNGrSU+HVXWS8aeUHxBGyBtodAd2InULxQtqCRv56+quSQ+jNB
HBfn0QLIMs14Z8RktIDO5q+WYDFGZIfH/SbQw7jOO1CBfYQ79bah+UZrCd4BIkJ0
D+A3nYnKqCzXXKUW3psUnpm2xqEyF/MjFEb8dWGy+TT+4aLIMzRxURlpkz41oE2G
YPDRFC3JowQ0kNjdMA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:35 2026 by rpki-client