Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: Vjx89eSpcikS5qqtjYb9ohBOPcKuFHFObS2t2MRCUG0=
Subject key identifier: 25:1D:F5:1E:3F:16:8A:91:BD:56:D9:91:19:42:72:B3:E0:3E:67:A2
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01A001DD5E22B6C87599465FFE1CA08C14CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 20:01:19 +0000
Manifest this update: Fri 14 Aug 2026 20:01:19 +0000
Manifest next update: Sat 15 Aug 2026 20:01:19 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: Back0Zv2Myig+j+G6OBJb68s9Ci8JBmNgkQIC3mY6Bw=)
2: jkf9uYsYVRJJo7-7ziQQDEzWpm8.roa (hash: KJPWOCNh5BY9Xr2oC9jvPyLkj0+8kyflAtM1BYsxhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:5e:22:b6:c8:75:99:46:5f:fe:1c:a0:8c:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Aug 14 20:01:19 2026 GMT
Not After : Aug 15 20:01:19 2026 GMT
Subject: CN=251df51e3f168a91bd56d991194272b3e03e67a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:80:45:bf:ca:9c:3e:41:f8:d5:ff:78:7c:
a5:c5:a6:68:98:02:b1:8a:58:c0:9b:12:19:89:e7:
6c:55:03:f9:00:06:c0:1f:3c:34:f0:4e:e7:da:ba:
c4:e8:5b:81:ac:50:ba:f4:f3:af:a6:1f:23:15:cc:
18:b6:b5:c2:62:86:0e:76:03:a8:39:89:cf:3d:64:
c5:6d:25:1b:aa:34:63:e6:90:fc:d1:33:b3:ad:06:
25:95:a4:30:53:1b:ec:f1:6b:60:6d:ba:02:ac:8a:
50:34:23:06:81:6f:b5:f0:27:b0:43:e7:6b:3b:f0:
15:9d:36:c9:3c:1d:c1:7a:6f:1c:b8:ef:6e:46:64:
21:b3:6e:cd:76:da:61:05:4e:42:6d:dc:aa:2e:19:
b1:29:b4:14:91:b3:6f:40:92:e8:94:f0:43:9a:a8:
93:f8:16:82:44:84:7e:a1:5d:a7:99:c7:26:6f:93:
6f:ae:e7:5d:c1:d1:54:d3:59:62:df:a0:b0:e2:30:
31:e5:40:53:c4:7a:eb:bd:ba:8d:a5:ba:77:42:e7:
86:c4:27:a6:c9:b2:f8:c1:70:d2:33:32:98:fd:90:
d0:51:55:29:c1:90:3d:41:a0:f7:78:27:73:4f:27:
c2:49:4c:ba:41:b3:e8:8a:a9:9d:ff:10:e4:53:31:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:F5:1E:3F:16:8A:91:BD:56:D9:91:19:42:72:B3:E0:3E:67:A2
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:fa:9a:39:37:71:e6:06:3d:ee:77:83:dd:e8:6d:35:9d:
af:9f:52:fe:03:22:ea:b9:9b:37:e8:f9:ff:c6:ea:04:50:c1:
fe:d7:c3:2d:34:05:51:3f:27:8a:4d:83:cf:78:88:05:0d:92:
44:75:b3:74:e3:b6:a6:9d:be:2e:db:50:72:69:cd:06:43:cc:
7e:38:23:b0:67:03:57:9f:3e:1b:dc:5b:11:b4:d7:1f:88:79:
4e:bd:4b:70:2f:3e:a0:91:53:97:13:eb:34:8f:2d:55:9c:30:
b2:79:d1:a4:43:86:38:d2:62:e8:a3:89:eb:01:84:ca:c7:42:
59:21:b9:0f:5e:c8:be:37:82:ae:2f:be:5c:54:5f:1a:46:bd:
dc:36:a2:ff:de:78:8a:72:cd:cf:d1:9d:d0:ef:1f:33:89:d8:
dc:a2:bc:8e:bb:e5:39:1d:9c:1e:1c:d7:2f:a2:8d:59:83:94:
93:d3:be:86:d5:3c:6f:5a:f6:a7:ef:cf:4f:70:fa:20:39:93:
3b:82:c9:2c:10:5c:e7:f3:34:b7:06:95:3c:72:0c:6d:85:be:
c5:80:e8:bd:b2:52:b6:dd:91:51:96:dd:72:2f:9c:6e:d5:b0:
c4:ff:a7:47:41:45:e1:f7:9f:30:51:cf:48:b6:c3:87:4f:6d:
16:ba:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:27 2026 by rpki-client