Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: LB7OoSThIjjhyUt+IoUDyaS4jvhObXAYjPlGu+knL6Q=
Subject key identifier: F4:28:A8:EC:57:27:AD:55:5D:A2:23:19:1D:3D:64:03:C7:87:10:84
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019F17C31B79C13BF4F9EA2096FA9DA6A7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0CB7
Signing time: Tue 30 Jun 2026 09:01:29 +0000
Manifest this update: Tue 30 Jun 2026 09:01:29 +0000
Manifest next update: Wed 01 Jul 2026 09:01:29 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: 8YfZsX16F8+88KuggLFIBXV+rfzrQEe/aJCybJuQLmE=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:1b:79:c1:3b:f4:f9:ea:20:96:fa:9d:a6:a7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Jun 30 09:01:29 2026 GMT
Not After : Jul 1 09:01:29 2026 GMT
Subject: CN=f428a8ec5727ad555da223191d3d6403c7871084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:96:ac:a5:09:49:9b:f0:df:60:8a:0d:0b:
a2:c9:55:d1:c5:11:10:12:6e:2a:a1:30:22:37:41:
b4:5d:79:84:97:bf:57:be:6a:e4:88:2f:95:cd:09:
6e:ad:2b:02:79:59:b3:4a:33:2e:f4:1a:60:7f:d3:
df:fc:b9:b4:54:b6:77:ef:b6:ad:7c:1d:1e:1b:58:
10:bb:5e:eb:20:1c:6e:99:5f:0c:94:83:21:26:e5:
b7:f1:ac:4b:6f:1e:69:5e:67:e2:d3:17:37:ca:a4:
0f:cf:60:3f:f3:84:d8:25:62:ad:59:d0:30:38:30:
22:b8:df:15:8e:84:26:1d:e4:3e:0b:f4:1d:f9:75:
b3:96:ac:11:a5:77:e7:8e:1c:42:56:22:0d:26:4f:
40:34:51:82:21:f3:86:19:b3:88:bd:13:98:f4:a4:
f2:ce:e0:7a:60:9f:0d:c0:a8:94:27:47:2a:e0:35:
fd:9f:97:30:26:5c:c5:9b:d1:34:03:82:3f:38:75:
f7:f6:36:ad:6f:a8:c7:bb:40:86:b0:39:b9:4d:fd:
75:9d:27:a7:14:a3:ad:5c:b3:57:ba:c3:88:56:8c:
92:36:98:91:15:ab:2e:b4:28:72:0f:a0:db:66:d0:
72:7f:31:15:54:e6:20:4c:27:d1:cd:8e:8c:a5:5b:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:A8:EC:57:27:AD:55:5D:A2:23:19:1D:3D:64:03:C7:87:10:84
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fe:93:35:bf:6e:61:31:79:8d:8c:c4:81:e1:40:42:23:23:
f3:cc:77:48:60:37:ab:9c:a6:df:97:bb:6b:0f:19:6d:6b:0f:
bc:0d:3f:d7:49:cb:c8:76:8a:0c:b0:90:22:cd:fa:6b:1f:f1:
38:d5:34:cd:3f:9b:5c:55:aa:e5:ad:34:1a:60:fa:2e:1c:17:
cd:7f:41:69:c4:fa:a4:b7:d5:fe:88:b2:80:1e:57:a0:28:55:
e6:d0:e5:41:e8:b2:3d:40:5d:06:aa:a2:5f:06:10:34:be:4e:
35:5c:0a:3c:4e:72:cb:50:ae:0a:d8:9d:29:52:fb:d6:d8:c9:
ee:fc:ca:0d:2f:da:ca:6b:f9:7c:f5:7f:61:c7:8a:24:04:e0:
fb:84:a0:80:bf:e0:cf:10:5d:b7:95:13:2a:1f:03:1b:28:da:
90:1d:ba:d7:63:56:41:7b:74:0f:52:66:81:15:91:ba:d9:8d:
f6:c1:5f:b5:26:49:70:ae:65:96:68:21:ee:98:93:f5:ae:87:
c5:1c:60:da:c0:12:b8:ab:da:d7:83:76:b3:67:95:23:8c:b4:
ae:95:90:27:af:7a:63:0a:3e:6b:81:5c:be:ba:2f:16:7f:b1:
92:d9:66:5f:ca:72:39:e1:61:a9:40:90:e6:34:b5:40:ca:32:
50:c6:04:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:16 2026 by rpki-client