Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: 0YrezTtjRjb48NQ07tARz3L0tmRsCEG15NNs9khKUNU=
Subject key identifier: 6D:72:73:34:16:75:C3:C1:24:4F:6B:20:CD:22:66:A4:45:B7:7B:BC
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 019FA2CF2A85E82C5C0C33D4A24BCDC0D61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:53 +0000
Manifest this update: Mon 27 Jul 2026 09:01:53 +0000
Manifest next update: Tue 28 Jul 2026 09:01:53 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: /iQ4jXJwTUvjkBEIu9+suzkHoXU4DTqIym1BkN/Wq8I=)
2: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (hash: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=)
3: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (hash: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:2a:85:e8:2c:5c:0c:33:d4:a2:4b:cd:c0:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Jul 27 09:01:53 2026 GMT
Not After : Jul 28 09:01:53 2026 GMT
Subject: CN=6d7273341675c3c1244f6b20cd2266a445b77bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:ca:48:32:0d:a7:9c:72:65:09:97:51:d3:
ec:57:a1:49:df:fa:09:2b:9a:58:95:68:50:ec:d6:
b8:17:92:55:ff:54:91:85:d7:6e:e3:e0:a7:11:42:
c4:2e:4b:ec:37:5e:0e:6f:74:c5:14:a6:7a:ea:eb:
6a:72:1b:3b:99:3b:76:c1:6b:e6:2f:15:c0:03:4f:
da:6b:52:cf:ac:2d:5a:c0:71:a1:e9:87:61:2b:6b:
aa:d8:96:43:c8:dc:98:18:00:ef:fa:d9:1a:cd:ac:
e1:d3:2e:c7:5e:af:a1:3f:62:ac:05:25:af:22:d9:
78:23:1b:4b:0f:1c:e5:f0:0a:a5:0e:ca:14:86:95:
51:71:df:93:7e:ed:57:bc:b2:69:e6:af:ae:f3:08:
c4:d0:17:a8:36:e4:9c:58:38:6f:b0:52:e5:d2:5b:
76:a1:6d:7a:02:c7:da:54:e5:4c:cf:da:0e:db:7f:
12:0a:df:c5:5a:20:80:6d:e8:fb:9c:b8:01:e6:0d:
18:85:74:2e:43:5b:21:fe:96:dc:bb:c4:67:60:bd:
94:f9:85:2b:8d:31:0d:00:79:8a:ed:3d:a5:59:c8:
a5:39:88:d1:33:f2:8c:56:ad:fc:1a:23:eb:d0:6a:
b4:6b:51:69:0d:1b:86:4f:6c:71:d0:2a:07:f3:6c:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:73:34:16:75:C3:C1:24:4F:6B:20:CD:22:66:A4:45:B7:7B:BC
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c7:65:6b:d3:9c:2d:bd:bb:39:2b:4e:92:dc:21:83:7a:38:
8b:0a:bd:13:7c:17:d5:af:69:66:8f:d3:3e:a9:e8:66:37:04:
37:e0:8d:07:28:45:ef:b8:97:be:d7:c1:bd:0d:5f:d2:30:e3:
03:d9:4d:44:00:b3:76:fd:85:4f:81:a0:e5:ec:c5:13:53:d1:
b4:59:41:7a:66:09:37:ac:d2:e8:2c:80:2e:68:8c:7c:a6:45:
d2:8e:a8:98:7e:d9:a5:a6:15:1d:0f:50:de:08:ac:91:07:49:
6a:d3:8a:19:7d:f2:c0:ce:6f:1f:16:36:86:48:cd:e0:43:7d:
44:43:96:f2:9d:83:2a:c7:f1:87:17:2a:9c:82:e8:a5:04:e1:
ca:50:58:8a:39:ad:f7:1a:5b:13:62:e5:3f:58:5e:24:e8:13:
bf:20:5c:85:b1:35:62:6c:1b:0b:c3:de:3c:cb:7b:d6:ff:22:
66:87:4c:fa:a2:48:56:91:59:b2:47:c4:d4:66:e3:5f:e1:1f:
64:6d:f5:52:14:81:54:2c:33:a6:13:2f:1a:5d:cc:36:74:5e:
c1:f4:1b:6f:6f:a4:e9:e4:89:e0:01:11:00:bf:b7:d7:c7:7f:
6e:6e:ea:1f:fc:f6:dd:a5:38:ac:02:c0:10:ef:ca:67:14:d0:
40:b9:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:21:05 2026 by rpki-client