Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: 92HsP2TuKC2AgzMgfoqtVcWqnmqTsO2QE+7Dx4/7P3M=
Subject key identifier: F4:5F:35:71:FE:DF:D6:5C:5F:47:5E:11:6B:64:07:7B:3C:AD:00:DF
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019F8455A70B38F861A759EEBABDE768BD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 1366
Signing time: Tue 21 Jul 2026 11:00:33 +0000
Manifest this update: Tue 21 Jul 2026 11:00:33 +0000
Manifest next update: Wed 22 Jul 2026 11:00:33 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: eOMrCvIo4bGlE/ulrdf1AqDDih7M1RH8/KUPQOns6UI=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:a7:0b:38:f8:61:a7:59:ee:ba:bd:e7:68:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jul 21 11:00:33 2026 GMT
Not After : Jul 22 11:00:33 2026 GMT
Subject: CN=f45f3571fedfd65c5f475e116b64077b3cad00df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:58:4c:37:6e:5c:fe:6c:87:82:16:ee:74:
47:4f:21:e5:be:f1:e4:75:f1:15:55:e3:7a:50:9c:
02:73:88:b5:d8:a2:9e:a5:75:1e:45:de:f9:4a:88:
4f:94:e2:b9:9c:37:70:bf:e6:c1:08:8e:43:99:e2:
6b:4c:7e:b5:94:6c:f0:94:a8:0c:5e:40:e1:46:08:
0c:ca:2f:66:2a:4a:dd:14:f2:06:83:90:41:bd:e1:
21:94:04:da:74:0d:ae:25:84:ef:eb:c1:80:64:20:
40:4b:ab:99:3d:37:8a:b0:71:da:0d:17:50:21:cb:
39:ab:95:b4:b5:51:86:d1:6a:9a:03:e2:fd:35:d3:
cd:fe:f9:b6:61:b3:09:bc:08:ea:a9:82:3b:07:e2:
5f:72:5c:91:7e:98:a9:c5:f5:da:2e:52:24:e5:87:
58:55:ed:07:09:d8:28:92:d3:e5:fa:b0:f0:b1:c6:
c4:40:d0:98:c0:8d:e1:33:9d:dd:63:bf:58:e8:72:
09:3c:3f:d7:d3:b8:40:d2:e6:c1:f4:00:f7:94:fb:
91:d2:91:59:79:ee:66:1c:99:34:bf:45:49:30:bb:
db:9c:57:e8:db:e0:fc:7d:f7:51:10:e9:a0:05:f7:
e9:fa:60:b9:3f:6f:5d:a2:0c:3d:e3:3a:00:bf:bc:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:35:71:FE:DF:D6:5C:5F:47:5E:11:6B:64:07:7B:3C:AD:00:DF
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:0c:23:99:b5:d4:ac:38:f8:5c:dc:07:82:f8:40:01:51:
20:93:a6:7e:53:4e:ce:18:ed:64:12:77:23:e6:2b:79:13:fe:
ad:85:97:b7:b5:bd:43:27:68:a4:da:f5:a4:03:97:f5:e1:c8:
b7:60:0e:58:d2:d0:91:7d:83:f6:25:85:89:50:1b:9a:b7:5c:
73:bf:38:ef:1d:79:61:df:15:b3:c8:20:61:14:09:f1:40:04:
2d:58:54:97:5d:56:2d:08:c9:61:58:6d:21:ee:e4:ce:94:73:
b3:8a:67:a2:86:1f:ea:8e:fd:d4:d6:bf:98:65:e7:7b:20:76:
80:13:42:ab:71:a7:1d:64:88:1a:5e:33:fe:82:ce:19:89:8c:
a3:45:79:6c:05:74:62:08:89:2c:8c:e2:33:80:2e:8d:17:a0:
53:61:70:77:6e:89:6f:48:67:66:f0:2b:9f:11:6f:9d:07:38:
3e:1c:2b:4c:1f:42:83:2e:8e:8d:af:18:f3:dc:e2:79:48:3d:
ab:da:dc:f9:9a:f1:d7:11:a5:8d:9c:48:5e:ac:88:40:08:c2:
12:f2:4e:19:57:7f:37:28:73:91:33:1c:2e:58:dc:de:b7:0c:
65:1f:8b:d1:7f:8d:61:3e:ac:1f:41:8c:50:91:17:b1:33:2a:
01:30:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:06:14 2026 by rpki-client