Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: ktERGtBMtIOORRD0MAyu0CoVFVaudPmeXDXyTQtPEBw=
Subject key identifier: 4B:B2:85:7E:4D:8F:68:E4:4A:E9:36:6B:98:20:AD:7C:40:D4:20:8E
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019F12D36CA7ACC4C146316689BE5A507D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 10:01:13 +0000
Manifest this update: Mon 29 Jun 2026 10:01:13 +0000
Manifest next update: Tue 30 Jun 2026 10:01:13 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: neb7/IqHHMg0z2oW8jXHXTGuLSm61JCwU4y76rmNM9s=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:6c:a7:ac:c4:c1:46:31:66:89:be:5a:50:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jun 29 10:01:13 2026 GMT
Not After : Jun 30 10:01:13 2026 GMT
Subject: CN=4bb2857e4d8f68e44ae9366b9820ad7c40d4208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:5b:57:8d:19:cb:a5:6c:68:61:36:a7:1b:
b2:fe:c6:a6:c8:75:cc:97:bd:18:f4:71:0a:ac:0f:
8d:81:ad:24:6b:a2:a9:62:49:80:90:d3:5e:87:67:
fb:84:f2:4c:80:69:04:4e:b0:7c:47:c2:f6:fb:aa:
d6:fe:44:d0:2b:ae:35:13:c0:49:9e:40:6b:6d:a8:
ce:f1:aa:cf:c9:81:f4:cf:b5:55:68:52:30:93:8e:
c5:40:02:ea:a3:6b:98:68:ad:d1:00:2f:ab:76:d5:
be:0b:79:25:84:44:55:04:f7:17:f8:86:01:43:bf:
96:1e:1c:6e:c0:cd:f9:39:b9:36:18:7e:81:fa:fe:
45:44:9e:93:78:c0:14:4b:ca:75:04:cd:b8:3e:4f:
87:26:ec:aa:6f:6c:cd:8f:5e:44:67:ac:53:fe:85:
d8:8f:97:d6:1e:fe:53:2f:aa:79:d5:2d:f9:a8:b9:
a2:24:71:f2:bf:3d:0e:d4:ff:75:e3:e4:44:9f:82:
af:d4:9e:b2:59:9f:8a:5f:a2:fe:ae:74:00:bc:91:
8c:21:ce:66:a2:6a:2d:2f:56:34:77:d7:db:d2:5b:
fa:46:c5:e1:48:8f:79:34:ef:df:2b:ff:7f:0f:a3:
3e:8d:a2:47:29:d4:6e:a5:ca:60:0e:c6:f0:ce:91:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:85:7E:4D:8F:68:E4:4A:E9:36:6B:98:20:AD:7C:40:D4:20:8E
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8b:f4:78:d4:41:79:fe:17:37:93:01:9c:2d:8d:69:1d:a6:
10:f0:cc:59:71:36:32:3f:c4:50:dd:be:c6:ae:e3:0e:5a:e7:
61:b7:48:55:31:4b:af:89:c8:a1:5c:31:2d:69:53:cc:b0:dc:
07:c3:db:44:f1:a0:eb:8e:3e:30:42:2d:48:ad:62:3f:eb:42:
9e:53:64:02:87:d6:11:4a:88:3d:02:d4:f6:f8:31:94:cc:d9:
f1:0a:3b:da:44:39:2c:11:4e:f7:54:7b:86:b2:fd:34:fe:eb:
d8:b5:18:84:27:0a:86:0f:3d:a6:89:0d:4f:e0:90:d3:11:62:
01:a3:e4:2c:ba:a9:3b:2f:7b:4a:cc:8d:85:00:52:af:d7:fa:
5f:36:9a:cb:19:a2:5a:12:4d:a3:fb:11:e6:c9:a0:08:33:b3:
2e:e4:10:6e:e1:b5:78:3d:3d:f3:b3:11:de:21:2a:9a:cb:f5:
9d:e9:f6:71:ce:6f:75:ee:b8:79:85:7e:4a:84:8e:25:de:87:
70:5d:7b:f0:0d:4f:4a:96:a9:d3:21:cf:d5:aa:59:2d:8e:52:
f1:c8:6b:cf:f8:48:8b:d3:6f:09:f1:3f:6f:a9:03:b3:e9:31:
21:8a:aa:4e:58:52:fa:c0:67:46:85:09:05:37:8d:18:1c:3a:
e5:f8:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:28 2026 by rpki-client