
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: 6NPKrVqLNIMGsRC6M8zJhQKTvN+rdMwXQDPMYG2m3g8=
Subject key identifier: FC:81:D4:17:0A:C2:06:FC:AB:94:85:E5:46:7D:C6:9F:FC:7B:16:DF
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01A0009315A1E75C4CA49231D207A0CAACC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 09E1
Signing time: Fri 14 Aug 2026 14:00:34 +0000
Manifest this update: Fri 14 Aug 2026 14:00:34 +0000
Manifest next update: Sat 15 Aug 2026 14:00:34 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: irPSgMCVLtBFhF05pvBVlIT/uJCcXPQJ19gl5nGAM9w=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:15:a1:e7:5c:4c:a4:92:31:d2:07:a0:ca:ac:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Aug 14 14:00:34 2026 GMT
Not After : Aug 15 14:00:34 2026 GMT
Subject: CN=fc81d4170ac206fcab9485e5467dc69ffc7b16df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:7e:dc:9b:49:8b:cf:52:29:63:8a:48:6d:
28:b9:0a:26:59:e1:13:9c:88:14:de:9c:e7:c7:0f:
e3:05:5d:38:c3:1c:67:bf:41:10:50:b7:bc:f6:b0:
95:d3:ef:4b:58:95:cb:bd:33:f9:9e:80:58:98:32:
c5:d6:fb:0c:6a:74:62:e8:f1:0c:ec:fc:38:82:c9:
8c:43:84:a8:c7:1c:36:83:4a:06:3e:55:5a:38:d3:
f1:40:43:79:86:7e:da:60:42:09:df:eb:df:a7:28:
b2:ce:44:d6:66:70:a8:54:38:bc:29:25:09:f2:84:
57:2b:64:ac:72:db:d7:e2:10:05:2e:a0:a7:08:0e:
7d:15:ff:cc:a0:d8:2b:ee:17:e7:37:b7:6a:a4:e2:
9d:0d:dd:04:ee:2c:cc:b5:fe:d4:5c:5c:55:7e:25:
2f:b8:ce:54:e9:c5:c1:b8:8c:89:e2:90:d6:0a:85:
0b:ac:d7:fc:50:33:00:a5:6d:29:fa:3a:be:65:70:
c6:fd:01:48:63:de:30:c8:1d:f5:15:4a:5f:e6:7a:
e3:df:84:fd:77:bc:cf:40:eb:1c:fb:fc:7d:e8:46:
f6:2a:f1:7e:09:5d:06:c1:30:03:f1:42:65:42:df:
e9:7f:11:00:da:05:9d:a8:db:4b:fd:ad:cc:52:e0:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:D4:17:0A:C2:06:FC:AB:94:85:E5:46:7D:C6:9F:FC:7B:16:DF
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:ce:a1:69:44:40:ae:a7:8e:8d:43:36:ff:e6:10:7d:01:
45:18:ac:f0:79:6b:c9:f9:3b:d2:62:4f:e7:34:5f:10:de:99:
11:cb:ff:af:31:54:a2:fd:cb:33:db:eb:9c:13:35:09:91:0b:
b6:ed:5e:e4:e9:73:49:e3:cd:79:3e:6b:25:c6:de:34:41:90:
6d:cf:41:14:08:fe:13:10:db:82:03:61:9d:3b:72:87:9a:4d:
1f:b5:49:b6:33:a8:a1:74:ae:58:c5:5e:e2:0e:35:b4:5d:2a:
26:4d:d4:36:ad:c0:0c:ea:20:e1:ce:da:40:b5:1b:39:0c:35:
af:4e:a5:b5:e5:4e:17:f8:74:b5:c2:90:6f:d0:dd:7f:1a:ee:
53:ba:3f:48:89:dc:28:94:f1:e5:65:ef:ea:ab:41:e2:5d:69:
86:c2:31:da:ad:76:fc:13:c8:d5:ab:28:c2:1c:b8:f3:b2:b4:
83:b4:ba:8b:0a:2f:95:e7:a6:d1:72:f6:84:a0:43:2c:43:93:
38:df:7d:d4:73:64:2e:02:ae:1b:79:49:3e:80:43:b9:78:50:
4d:28:20:bb:b0:11:ce:9e:f0:26:92:27:b5:29:cd:f1:05:38:
e0:b0:28:6f:d3:fa:6e:84:0e:cb:1e:04:fe:dd:5a:6f:7a:45:
5d:57:00:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:14 2026 by rpki-client