Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: okQcQ4QPXZ88Uj0zicMLy/wcfrMXa0PN8OGvwlRRiag=
Subject key identifier: E9:F7:D3:DC:55:7D:C0:04:F7:23:7C:CC:C8:2C:AC:B8:AA:1E:8B:AE
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 019F17C2222722A9ECE4E13BFF00BAAF2B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0A59
Signing time: Tue 30 Jun 2026 09:00:26 +0000
Manifest this update: Tue 30 Jun 2026 09:00:26 +0000
Manifest next update: Wed 01 Jul 2026 09:00:26 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: a1uxLN9/wWChBF3XGazAO0A8tVvZrlh03YznRY7F4ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:22:27:22:a9:ec:e4:e1:3b:ff:00:ba:af:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Jun 30 09:00:26 2026 GMT
Not After : Jul 1 09:00:26 2026 GMT
Subject: CN=e9f7d3dc557dc004f7237cccc82cacb8aa1e8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:e1:34:65:fd:d7:a6:ba:c7:74:14:d4:fd:
04:c8:b8:0c:97:d7:9b:b5:74:4a:08:45:3b:da:9c:
a8:f1:77:85:4e:05:7b:b8:39:39:f3:9d:6d:43:f5:
2f:7d:c5:a4:5d:4e:80:ea:85:c2:4f:aa:17:d8:6a:
2a:f4:54:cc:43:18:4f:78:cc:e4:87:4d:90:d9:00:
b5:45:dd:3f:69:e9:61:8e:e1:33:6d:99:f5:39:97:
e9:91:f8:7c:dc:44:3a:b4:a8:26:29:99:4c:17:b6:
13:41:08:44:09:f1:f8:75:82:fc:82:c2:c3:f8:c9:
07:ce:7a:da:a1:7e:6c:68:a1:66:b2:99:7a:e1:9f:
b2:91:9c:18:ca:5e:af:10:6f:51:b1:70:f0:90:0e:
00:cc:71:8f:46:be:8c:e9:ce:dc:48:f3:3e:fc:9d:
9a:14:fd:4d:0b:06:2b:e6:cc:cb:f2:1f:97:b8:90:
3a:33:47:09:bc:a3:01:4f:fe:d5:ab:a2:81:a7:da:
1f:31:9a:8e:1f:58:96:1f:ae:7e:51:56:85:a1:c6:
c9:f9:07:8e:8f:0e:bf:09:c2:c5:76:bd:c8:33:46:
47:db:49:d9:f9:9e:b7:3e:2a:db:99:c8:f1:e7:4b:
f3:6e:4c:20:00:a1:e0:ea:9e:a7:0d:b6:a2:67:a1:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:D3:DC:55:7D:C0:04:F7:23:7C:CC:C8:2C:AC:B8:AA:1E:8B:AE
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9e:94:f4:a0:5a:7a:d4:3f:74:14:be:2f:9f:51:12:05:7b:
c5:55:e0:70:15:99:d8:b2:e7:cd:bc:84:84:14:f8:f6:25:5f:
6f:f5:6d:db:77:32:e9:51:af:7e:99:9d:b7:2c:51:e8:0f:76:
c9:2a:4f:ba:bd:2c:49:e7:c5:34:ae:25:fe:ac:7b:78:23:99:
b2:96:b3:f2:35:c0:7d:71:53:38:1a:32:9d:5b:a8:e2:61:23:
9e:a4:71:08:c4:07:68:d7:49:ca:84:f7:70:a3:8e:c9:46:8a:
19:97:9f:5f:13:31:60:e2:15:61:9e:82:c9:02:0f:03:4e:f5:
06:5d:bd:a4:e6:f7:37:a3:42:63:18:58:37:29:b3:fc:de:3f:
aa:62:92:0a:1c:f7:e1:12:e4:3a:c4:ef:29:80:f8:35:af:ba:
3d:7e:60:37:6d:80:98:10:0c:0b:8f:5e:f6:6e:d7:b1:16:78:
68:d8:f8:61:82:b0:d3:17:19:bf:f7:05:34:f1:f1:6b:a8:6c:
14:c6:0a:07:32:5e:61:fd:03:0d:98:74:ee:18:b7:b0:f4:ec:
d7:29:9a:72:76:6f:37:86:4a:61:86:6e:6b:82:ec:b0:51:40:
d8:3a:14:ce:00:ad:12:dd:5b:81:1d:d9:4c:82:5f:26:34:55:
0b:ad:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:50 2026 by rpki-client