Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: QvMVzZITY91LhDFA3Hfz0lro0locr8TaGE8rajwDWZE=
Subject key identifier: C2:10:CE:52:81:EB:C9:35:CE:23:9A:A6:01:16:07:C9:DC:FD:D2:2E
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 019F18D69B7EE842BA893E5E498C4B91F389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 14:02:25 +0000
Manifest this update: Tue 30 Jun 2026 14:02:25 +0000
Manifest next update: Wed 01 Jul 2026 14:02:25 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: 9W/y01CpQFEdSIVrMpTNiVd8XUOB2ndzHz0wqAiP5n4=)
2: 4uZV0ecDQCsLSsVXEupDSaa2T3I.roa (hash: MAPL4inDc1NqzrZUNgjEgak9EE9tXeKLQhKgPP9NyZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:9b:7e:e8:42:ba:89:3e:5e:49:8c:4b:91:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Jun 30 14:02:25 2026 GMT
Not After : Jul 1 14:02:25 2026 GMT
Subject: CN=c210ce5281ebc935ce239aa6011607c9dcfdd22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:73:fd:60:d2:fc:fc:5e:a1:6c:9b:b9:55:
42:d0:76:ad:64:ca:49:2f:7b:e0:d7:20:2d:73:f3:
18:5e:c3:d4:9d:98:f1:17:a9:0b:8b:bc:a1:d7:ef:
ec:da:8e:b2:f0:76:42:40:d0:31:f5:fc:48:03:d9:
3c:46:5f:8d:08:d5:26:86:c1:fe:1f:c7:90:a2:79:
36:f7:b8:d5:77:ee:d6:ef:60:a0:94:9f:35:2b:95:
46:04:d2:8e:dd:ac:57:58:b6:96:57:34:10:61:0c:
38:87:59:38:97:4c:19:df:66:da:78:61:46:4f:63:
d6:73:08:54:34:fb:81:93:71:2a:43:72:7b:13:79:
41:69:5d:4b:fa:1d:83:28:b1:fe:1d:02:bf:2f:cb:
a6:3d:9f:2a:b8:83:de:cd:34:e2:48:b7:db:ad:36:
e3:77:fd:7b:29:04:c4:26:b6:74:e8:91:36:a4:80:
a5:b5:84:e8:4c:df:e5:f1:b4:02:c6:73:e6:5b:ca:
ef:48:7d:d7:5f:06:cf:d9:5b:9b:f8:99:61:e7:c2:
37:b5:5b:77:4c:ca:e9:77:7d:50:3a:81:ed:71:a2:
da:d8:25:ef:85:48:fa:dd:d6:f6:60:91:ba:e9:3e:
dd:69:c3:61:3b:34:ed:ed:5f:7d:72:e3:f1:14:0f:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:10:CE:52:81:EB:C9:35:CE:23:9A:A6:01:16:07:C9:DC:FD:D2:2E
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:88:de:49:ff:6c:80:fa:e5:28:19:46:bb:4b:0e:ea:0d:a0:
16:17:34:dd:65:25:8b:bc:63:d1:67:8a:31:a6:ea:90:52:93:
d8:fc:fb:4c:d9:22:21:2b:54:f7:a3:d9:cb:fd:3a:75:f3:3c:
58:5c:fe:23:ed:5e:8e:e7:79:7a:4e:29:53:ea:62:d6:cd:a6:
ae:9b:dc:5f:27:25:c8:5e:01:46:54:9f:1a:a6:8c:af:25:b2:
b7:03:89:40:1b:95:37:3a:3c:00:91:03:a5:9c:eb:51:ab:0d:
5f:b9:d0:19:6d:cb:45:1a:24:98:84:cf:55:dd:de:c1:15:50:
c9:e8:46:f7:c5:e5:ca:11:25:14:ce:b9:ac:21:2e:27:98:ca:
02:15:f7:d8:01:a3:19:61:ca:b4:94:e4:e8:a9:62:c1:08:3f:
4e:a9:36:e6:b5:89:f6:7a:d5:6d:be:42:0e:9e:da:2c:3f:37:
f9:ab:55:c0:df:7a:12:08:f4:3d:3c:31:f4:13:c7:2b:0b:b9:
21:ef:6d:0f:12:bc:0d:0a:43:3e:d1:f2:f5:33:b7:77:e7:5b:
a8:ec:f6:6b:d6:e3:d0:15:c8:76:3d:61:26:39:d3:68:4a:53:
5d:3f:cf:1a:38:59:04:d5:ee:99:09:40:d0:aa:5c:c1:74:67:
cc:65:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:20 2026 by rpki-client