
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: c2bt64pbHtjbKb01K8SeU0pYHNWW5a62vfEkwnLeCaU=
Subject key identifier: 3B:10:B1:C4:12:40:13:66:9B:7F:D4:D3:BA:E4:A4:C9:32:58:71:D8
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019F17F9C1F1B0416D026D5107E9A3EF5521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1906
Signing time: Tue 30 Jun 2026 10:01:11 +0000
Manifest this update: Tue 30 Jun 2026 10:01:11 +0000
Manifest next update: Wed 01 Jul 2026 10:01:11 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: 0VAWRwpH3cOBhbp0oG/CEFxtgRe7gJmXFn0pKl6e6Qc=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:c1:f1:b0:41:6d:02:6d:51:07:e9:a3:ef:55:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jun 30 10:01:11 2026 GMT
Not After : Jul 1 10:01:11 2026 GMT
Subject: CN=3b10b1c4124013669b7fd4d3bae4a4c9325871d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:71:b6:f8:2e:2d:b4:c2:2b:8a:a0:23:b3:
8b:ac:55:ae:64:4c:00:26:30:a2:2e:21:41:09:8d:
f4:f6:7e:88:47:25:d3:f8:7a:9e:b1:af:cc:e6:0a:
00:f6:b9:90:7f:bc:b8:6f:3e:06:f4:7f:32:59:cb:
cf:ad:3d:b7:f4:2b:d7:be:7c:e0:dc:9b:f7:da:b9:
5f:61:3f:f4:e6:eb:09:52:82:29:af:42:ec:89:c0:
9d:b9:85:0e:bd:06:ee:b9:3f:7a:e5:f2:60:73:a3:
7e:4f:83:b0:55:b4:42:11:0c:17:c3:3a:88:17:08:
e6:60:e4:50:bc:54:48:b5:87:2b:9d:fd:bf:2b:3b:
ee:3b:d2:50:60:1f:f0:93:5d:9e:8f:c3:c2:3d:79:
11:a0:95:16:fe:a8:64:c5:b9:e3:47:3c:4f:e3:65:
07:ff:3a:6f:f8:03:2f:60:3f:8e:20:e5:b3:2e:f9:
7c:21:90:d9:05:0b:ac:e5:70:05:80:45:8a:0a:ac:
23:37:65:e9:da:41:72:46:c0:4b:59:3c:0c:30:99:
13:27:2b:c4:84:9f:19:aa:b2:5a:a8:dd:49:dd:f9:
dd:b8:8a:64:20:ea:e4:cf:77:da:ac:d7:7d:81:91:
43:6c:ef:28:1c:db:8d:89:3d:19:50:44:f3:3a:9c:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:B1:C4:12:40:13:66:9B:7F:D4:D3:BA:E4:A4:C9:32:58:71:D8
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5d:cd:ab:2f:3b:0c:a6:70:52:84:4b:a8:b2:c6:2b:49:5c:
d1:90:4c:6e:91:31:7c:5d:f3:69:25:d0:e3:39:e1:63:85:e4:
f8:4f:1a:2b:f6:69:a7:af:76:a2:53:8d:23:57:6c:23:10:43:
c2:da:62:f5:11:d1:d5:ef:dc:a0:a4:3f:c9:7e:4b:fd:3e:e2:
37:9a:03:25:e0:84:47:73:28:63:cf:b6:1b:15:36:d3:79:bd:
c5:01:c0:49:be:1c:8c:1f:d8:54:fd:57:fc:f0:d3:a9:8c:ee:
04:0b:7a:e0:73:ec:40:19:45:46:56:3c:30:4f:f8:a7:01:5b:
62:ab:ae:22:91:71:c6:d1:9e:cf:24:54:05:cc:73:c2:70:92:
f7:bd:f1:3e:72:fc:f8:53:4d:29:f2:08:37:db:25:6a:87:58:
11:f1:7b:4d:41:b8:4d:91:66:81:0b:ba:f8:a0:b2:f6:db:66:
4c:54:ca:ba:25:9f:c2:55:e5:89:72:d4:be:1d:40:b7:10:a4:
2d:44:3a:5c:c1:28:98:a4:dc:ec:30:5b:e3:63:54:f8:a8:45:
4e:cc:c3:6f:2a:ac:e0:23:72:b9:c2:cf:d8:f3:af:eb:16:df:
8b:2f:7d:ff:1a:0c:8f:d2:42:39:df:4d:3b:c0:f9:51:aa:7c:
94:24:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:50 2026 by rpki-client