Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: Fwz1qTLysUqbXIt4rQhNKCwKUkNLDipGswLBA2uwvQ4=
Subject key identifier: 6A:7A:45:22:79:54:FF:83:01:1F:FF:11:B6:E2:29:C1:34:39:FA:5A
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019F130A2F4B64A9E9087B6F050DA942934E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0966
Signing time: Mon 29 Jun 2026 11:01:02 +0000
Manifest this update: Mon 29 Jun 2026 11:01:02 +0000
Manifest next update: Tue 30 Jun 2026 11:01:02 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: ax0jHu9z0DuEZrz8Mwn90nx4Gfcu9U6c+kFOHkL/tfY=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:2f:4b:64:a9:e9:08:7b:6f:05:0d:a9:42:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Jun 29 11:01:02 2026 GMT
Not After : Jun 30 11:01:02 2026 GMT
Subject: CN=6a7a45227954ff83011fff11b6e229c13439fa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:6c:2a:3d:d3:71:9a:e9:f6:4b:bf:04:60:
c0:3f:a8:2e:16:38:d6:3a:e0:43:a3:d4:10:d2:b5:
e5:6e:00:62:c0:d4:52:72:13:3e:c2:69:b1:d4:96:
d0:06:d2:a9:44:9c:14:f3:f0:b4:09:22:1e:92:f8:
ca:6c:e7:00:5c:68:7b:e3:9d:03:a9:12:2e:0b:03:
60:fd:e4:24:d3:c3:e5:5e:9e:32:00:12:52:cb:76:
7a:c2:ea:ca:52:43:c3:0b:74:4a:23:37:2e:c6:1f:
61:46:86:e6:19:a2:fd:6c:ce:2e:fb:da:4b:e0:d5:
6d:86:ad:0e:9d:ad:37:e6:1b:16:fd:21:bf:5b:00:
e5:de:a2:d1:f9:67:e3:c7:89:da:d8:78:fa:af:66:
28:7a:93:4a:91:64:8d:31:5d:0d:c8:13:33:00:9c:
e2:6e:a0:81:82:91:26:82:a1:6a:82:3a:72:c2:df:
9e:6e:b7:bf:a3:b3:d3:ed:cb:71:34:43:51:cb:db:
9b:f9:45:d3:05:41:61:4f:cb:16:62:7c:94:ad:e9:
04:e7:e6:21:4b:de:88:c1:d9:15:7f:cb:83:de:f2:
c2:cb:61:c7:f1:27:b2:06:04:88:e5:27:2d:4c:47:
ba:8e:7a:df:d3:c3:e9:91:a0:8b:1a:88:46:fc:7e:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:45:22:79:54:FF:83:01:1F:FF:11:B6:E2:29:C1:34:39:FA:5A
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:e8:b9:85:3a:ec:da:10:07:a9:f9:db:41:c1:15:d8:60:
c2:c5:87:ba:c8:df:43:f7:93:dc:bf:2c:2f:ca:ff:65:63:0f:
18:76:20:07:09:49:f2:51:b2:35:5a:46:d7:22:d8:bb:62:74:
8b:33:fd:f1:c0:cb:6e:bf:0b:f6:b3:7c:b5:04:96:5a:6b:33:
20:79:71:eb:51:03:cb:c7:31:72:49:cc:df:2d:7c:e3:66:0b:
d8:2f:5b:d0:ca:cb:31:89:b1:f3:1e:9b:ec:9a:44:ff:a8:84:
41:00:91:39:07:a4:ff:91:9b:55:3e:a6:d0:10:5d:af:0c:b5:
0b:3b:bf:a9:88:54:62:e3:60:41:17:2a:5b:c6:8c:2a:37:10:
9a:f0:da:d1:a3:63:67:62:de:3f:d1:69:d2:a8:aa:0d:2a:1b:
f2:1a:70:e5:99:43:9c:ad:f7:05:6a:57:1c:4d:12:f8:dc:a1:
f3:81:0d:b5:d2:13:f0:60:08:b7:26:61:6b:c2:9f:9f:2f:f9:
b7:39:ab:7b:0a:13:5f:58:f1:29:87:fa:5d:42:e6:cc:09:a8:
12:64:52:63:98:43:17:0f:e6:2a:f5:a7:9c:97:eb:e1:6d:6d:
1a:61:34:18:0c:2e:f4:96:e2:cf:ee:2c:26:f9:4c:2a:c1:a9:
c6:9c:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:33:33 2026 by rpki-client