Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier: Hx7qA65DdJNc+sE7ObmIPefMrvqt+MoMCwL+be5reJw=
Subject key identifier: 17:FD:17:44:B9:D9:78:1A:C8:D9:FF:5B:37:C6:EC:1B:02:BD:C3:E4
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer: /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial: 01A001DC9607474AE61C39FE3BA162359B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number: 0718
Signing time: Fri 14 Aug 2026 20:00:28 +0000
Manifest this update: Fri 14 Aug 2026 20:00:28 +0000
Manifest next update: Sat 15 Aug 2026 20:00:28 +0000
Files and hashes: 1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: R/Mbvmm50cgq1Ha6Dw4YQDE9BjTM0NcQta/SvCsVo6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:96:07:47:4a:e6:1c:39:fe:3b:a1:62:35:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Validity
Not Before: Aug 14 20:00:28 2026 GMT
Not After : Aug 15 20:00:28 2026 GMT
Subject: CN=17fd1744b9d9781ac8d9ff5b37c6ec1b02bdc3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:37:5d:9c:cc:44:53:c4:9a:42:5e:0d:15:
4f:44:12:33:a3:1b:3f:d1:90:19:a3:fa:ca:17:06:
3a:c6:ba:53:56:2e:3c:3d:27:15:ed:b3:39:81:38:
99:0b:d0:9d:45:ec:ec:13:6e:38:51:f2:4a:13:e9:
a1:e5:2e:b8:ae:36:c7:ea:52:f3:4a:f3:ec:50:fa:
64:e1:07:f0:bc:20:49:99:14:28:7d:d0:0a:38:3a:
14:5b:f8:d1:3c:75:64:2c:6c:b6:4b:a0:33:95:a5:
74:11:c3:67:b6:d2:50:11:a8:ea:f2:2c:9b:d7:bc:
e9:ba:a8:a2:9e:27:73:a5:3b:ca:c0:bf:b5:34:bd:
2a:3f:a9:c7:92:84:95:e5:92:48:3a:56:c9:ea:34:
02:8c:43:e5:17:e0:61:9a:de:61:8f:51:75:1d:2a:
23:76:d7:c5:64:05:6f:99:96:e8:ec:03:c6:ad:6a:
df:b4:58:0b:f1:7a:5f:24:83:e1:64:cc:c4:30:1a:
37:26:47:9f:3c:86:95:44:c9:c2:62:ef:a9:60:74:
1f:69:89:73:78:07:7b:4e:d0:15:26:64:cb:4b:ae:
b7:ea:93:8c:be:5c:da:79:e1:7c:c0:f1:76:e7:1c:
bf:c9:dc:b1:8f:86:60:d2:35:56:90:cf:55:03:63:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:17:44:B9:D9:78:1A:C8:D9:FF:5B:37:C6:EC:1B:02:BD:C3:E4
X509v3 Authority Key Identifier:
keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4b:9b:39:ed:48:c8:b0:57:c4:73:fe:7b:3b:14:96:da:18:
ba:18:e8:1e:5e:81:68:34:99:d2:63:8a:ca:5b:f3:b8:c7:71:
fa:49:51:a3:bd:58:bd:65:88:6d:9c:48:40:1d:e5:90:9b:98:
cd:ce:4b:b5:d6:06:4f:25:3e:95:2c:e9:12:d9:73:67:ec:93:
72:ac:ca:3e:a7:ac:1c:5e:92:61:73:e3:4c:4e:3c:72:bb:dc:
69:75:eb:2a:1d:aa:e1:3e:68:c7:f2:fe:94:74:5b:8b:9b:a0:
61:63:3b:29:54:27:81:29:7d:2b:5b:1f:4e:66:74:f7:f7:f9:
fb:ef:ee:a8:54:28:9e:00:42:5b:e7:c1:70:4a:0a:b4:d7:6d:
bb:c6:25:fd:0a:69:7b:8d:2f:0d:f8:b0:4a:5d:cd:a2:73:f3:
f4:97:58:19:45:f4:1b:6e:ed:21:d0:74:38:c1:d9:c1:3e:74:
ad:eb:4a:b1:f3:ad:62:cd:b8:7a:0f:47:db:c5:68:77:5e:3d:
18:60:25:89:e0:14:67:5d:99:09:9d:9f:16:57:03:8c:62:f7:
5a:24:57:a3:de:87:1d:46:39:75:4d:4c:2a:08:aa:a6:5c:c4:
e1:95:b8:1d:b6:5a:f1:9c:a9:05:a1:96:79:3d:c8:9b:f3:e6:
b5:e3:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:04 2026 by rpki-client