Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: 7c6IbjeICbd1P4YLkM+fXciW6par+QRtfDbPFMw6Bns=
Subject key identifier: 42:DD:53:21:43:1D:C4:47:04:70:88:91:9D:F5:21:D6:A7:C2:B6:86
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019F8568B1A7A4A8CED265B83C97E41F9F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 1062
Signing time: Tue 21 Jul 2026 16:00:58 +0000
Manifest this update: Tue 21 Jul 2026 16:00:58 +0000
Manifest next update: Wed 22 Jul 2026 16:00:58 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: 3/z+nXVWsDp89faWomTpHm3Qv709RqN8p26c5IwYmg4=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:b1:a7:a4:a8:ce:d2:65:b8:3c:97:e4:1f:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jul 21 16:00:58 2026 GMT
Not After : Jul 22 16:00:58 2026 GMT
Subject: CN=42dd5321431dc447047088919df521d6a7c2b686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:ed:bc:c6:a1:43:0c:a4:cf:9e:a8:5c:cc:
c7:d3:b5:a3:c1:97:ba:13:7c:24:47:31:0b:11:90:
b3:e9:18:c9:80:fe:16:87:e2:04:a6:0f:2d:2c:35:
ec:07:a5:d7:51:7a:51:05:6e:c6:be:b2:d0:6d:b9:
7c:db:af:d8:87:47:7a:50:2b:58:5b:56:ba:e2:6d:
9e:c1:2f:f1:25:65:30:09:b9:40:6b:e7:6b:bc:bc:
87:64:b2:0a:c5:02:30:66:e3:e6:a4:75:61:c8:8e:
28:22:85:40:e7:50:8f:e2:63:c1:f4:e1:c5:8c:3f:
85:52:5d:93:98:49:90:09:c6:49:6c:7e:75:36:88:
3f:50:8e:99:5c:8e:da:ff:d1:28:1f:08:65:e6:7b:
c3:16:5e:15:49:fd:fe:a6:9b:7f:5b:cc:de:d3:4c:
12:9d:64:2c:44:29:d1:b2:51:fb:82:2d:22:f3:6c:
e3:25:3a:01:39:36:b0:d1:e9:82:c2:34:87:d4:bd:
46:c4:00:eb:a3:b1:44:3b:6f:ff:0b:ec:8a:8b:ae:
71:71:04:a1:fa:8c:b3:34:58:89:63:4d:3b:e9:65:
8f:5f:f4:38:d6:10:fa:bc:bc:0d:d6:ba:92:39:77:
f8:be:0f:15:6e:f9:9a:48:d0:2a:fc:be:0f:c1:b4:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:53:21:43:1D:C4:47:04:70:88:91:9D:F5:21:D6:A7:C2:B6:86
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f8:13:cd:06:c7:9b:55:50:ef:18:31:51:76:78:d7:4b:58:
35:64:1c:04:9a:ce:c1:8a:dc:96:10:70:16:e1:ae:8f:f3:b1:
77:43:52:b1:c0:f4:21:55:b6:02:32:87:a2:ed:5a:7b:fe:8c:
f7:6d:ed:72:ba:5b:51:0c:37:6f:f6:b7:3c:34:c6:3c:95:65:
c2:a7:d3:f1:1f:83:37:00:0d:9e:02:73:da:63:46:e7:95:bd:
7e:33:ee:a3:73:c8:6d:6a:62:0f:32:d9:2d:65:11:9e:72:8f:
af:b0:62:61:52:61:72:78:a2:ac:06:02:c4:2c:46:ee:e0:85:
9b:6d:59:19:fc:1f:92:87:31:92:55:fc:ea:b5:6f:cc:3e:44:
d4:e6:3f:43:40:40:f2:46:ee:87:ce:a6:bb:4e:9f:70:7b:f5:
6a:a4:cd:5f:f5:e4:5a:fa:57:eb:b8:76:c8:73:9c:9f:de:4b:
8d:75:40:5e:88:ef:34:3a:25:63:5a:ba:94:78:ed:d9:cb:32:
ab:98:ac:b5:55:63:a7:d6:bf:f5:ee:9f:8c:ac:f1:34:df:75:
9f:07:ce:1b:e9:fe:06:bd:b7:81:f6:1e:e7:db:c6:4e:2e:6c:
d8:64:ca:f3:4f:7d:12:91:b6:b3:82:bc:a9:1b:3f:19:63:db:
b0:35:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:45:21 2026 by rpki-client