Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: MFNoAkmnZwQ+7KK6QraGkC8myGbYPUgcRCwtUtMgE20=
Subject key identifier: BC:A2:2D:17:D0:06:BE:B6:27:B4:54:D2:4A:BA:F9:98:5C:3D:02:B4
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019FA2CDDF1CB0F359A74CA5CA19EAD42BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 19D6
Signing time: Mon 27 Jul 2026 09:00:28 +0000
Manifest this update: Mon 27 Jul 2026 09:00:28 +0000
Manifest next update: Tue 28 Jul 2026 09:00:28 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: FiwEhvQB0uYA5m243GbX+fCdGzwblGiy1IUyaYZ4Do0=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:df:1c:b0:f3:59:a7:4c:a5:ca:19:ea:d4:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jul 27 09:00:28 2026 GMT
Not After : Jul 28 09:00:28 2026 GMT
Subject: CN=bca22d17d006beb627b454d24abaf9985c3d02b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:61:0a:ae:db:0c:10:69:e4:33:a7:ff:39:
cb:ca:a0:6c:a7:79:ea:a0:bc:6f:d3:fc:48:07:99:
74:51:3b:1f:66:4c:a5:b7:1b:52:a2:a2:3f:0a:60:
7b:80:68:66:87:2e:1b:62:83:ad:16:d0:93:b3:71:
9b:7e:54:65:fa:19:8f:2e:5f:9b:79:3e:f7:96:9a:
69:7c:c8:64:5b:18:23:34:53:36:61:28:05:a6:7c:
10:4d:74:b6:4d:75:95:e6:e9:2d:77:6c:5c:87:cc:
f5:5d:85:56:4c:ae:f6:f7:99:18:9a:1a:ee:7b:76:
37:c2:ec:80:c5:de:34:42:fa:e7:35:05:25:4f:ca:
d3:6b:65:e9:77:ec:0e:1e:fe:e1:45:cc:b1:1e:af:
56:28:56:3f:2f:90:db:c4:50:6a:24:e3:9e:b2:18:
bc:33:4b:6c:db:58:1b:b3:6f:1c:02:3c:19:9a:cc:
77:79:14:6a:c4:63:87:ff:42:24:af:56:fd:f9:82:
91:69:91:09:c4:17:c0:3e:41:10:a1:91:19:b9:0a:
c9:87:14:ee:83:10:bb:dd:2b:53:8f:cc:12:9c:7a:
b6:9e:b2:8d:d4:52:e7:22:74:59:a4:8c:59:14:58:
8d:ad:98:37:32:37:56:12:53:72:c7:aa:a3:67:d3:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:2D:17:D0:06:BE:B6:27:B4:54:D2:4A:BA:F9:98:5C:3D:02:B4
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:98:b5:d6:b1:bc:ca:85:dd:77:6f:4a:77:19:f6:89:45:92:
18:29:38:f4:d3:64:70:3c:4c:e8:6d:bd:45:e8:f2:2f:c3:0a:
8d:27:33:44:12:2c:19:83:e8:ee:e5:ca:cc:17:43:bb:10:3b:
bd:c9:03:d9:dd:03:f9:d3:39:8d:69:44:8b:50:27:2d:e8:81:
a6:d8:be:ae:76:3d:9b:e4:c2:73:41:3d:2d:29:86:e6:06:bc:
16:37:ad:cf:73:cf:6b:ce:14:56:7c:85:d3:b1:f5:1e:7c:98:
33:83:d4:6c:03:62:73:7e:06:3c:4d:62:a7:ba:0e:9e:15:75:
25:28:62:d9:0a:18:e9:60:26:60:84:1d:90:93:4d:ff:6b:ba:
67:36:a4:d2:cd:70:36:52:57:6b:3b:39:c6:2a:ab:0e:e0:bf:
14:f2:58:56:64:04:61:69:da:dc:30:ec:8f:48:29:eb:8a:0f:
8e:6b:90:84:b8:73:09:c4:fd:2d:c0:5c:68:4e:e0:1a:79:5e:
63:39:50:5f:80:4c:0b:1f:75:a5:f0:a7:f4:9d:9d:53:6a:43:
d9:17:dd:fb:c4:b3:76:d0:ea:bc:1e:22:11:40:91:70:d9:c9:
25:b0:95:26:12:4c:89:ec:b6:17:7a:39:ec:a6:5f:74:78:1a:
4f:94:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:03 2026 by rpki-client