Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: jHaUlDmDhcz+jeeyzxxG69l4ku9VilkwDhazd3nh6+c=
Subject key identifier: 25:25:7D:F3:43:5B:E1:86:C6:18:3A:69:DC:06:93:4C:7A:F7:88:E3
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019EB92243BDD58FB5578F932F4A8494E38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 195D
Signing time: Fri 12 Jun 2026 00:01:30 +0000
Manifest this update: Fri 12 Jun 2026 00:01:30 +0000
Manifest next update: Sat 13 Jun 2026 00:01:30 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: xoOKc2wWhA4SucIRbQqXgtM2cPyDeRT+qzjuyUEjjnM=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:43:bd:d5:8f:b5:57:8f:93:2f:4a:84:94:e3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jun 12 00:01:30 2026 GMT
Not After : Jun 13 00:01:30 2026 GMT
Subject: CN=25257df3435be186c6183a69dc06934c7af788e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:4b:fd:0b:0f:71:77:fc:5c:13:73:c5:fe:
5a:51:f8:6a:f9:a7:d0:a1:2c:10:43:bc:17:02:8c:
2b:06:00:66:d7:25:41:9a:4d:c1:0a:3a:c2:6b:6f:
aa:2f:b2:b2:21:73:90:39:87:23:db:7c:e5:67:ee:
07:80:76:e7:3b:ea:22:cf:c5:ea:e8:c5:c9:e4:df:
82:fb:7d:da:da:14:f2:75:5a:97:44:5b:38:20:68:
f9:5f:0e:90:17:5a:e1:d2:1f:2e:8e:59:ea:42:5d:
88:ce:07:15:6f:11:73:87:d7:ab:31:0f:0d:01:4a:
96:05:30:32:54:54:5b:92:ad:e6:93:1d:73:38:06:
e7:26:4f:87:47:93:d2:06:76:28:84:c5:b0:68:bf:
1a:90:44:eb:ec:bb:f8:e4:cb:f4:d6:95:0b:6b:d2:
1e:c4:a2:96:2a:75:a5:a1:90:2a:b4:24:8d:56:4e:
61:64:82:bd:c3:e9:f3:9b:05:4a:cf:44:af:80:4c:
0e:0a:af:3d:b4:2b:13:7a:19:03:16:ed:c5:9b:1c:
31:63:01:fb:27:ff:95:2e:a1:f5:b5:0b:51:82:54:
5e:bc:79:8e:f0:95:f7:12:ea:a7:3e:1d:d4:7b:3f:
06:73:0d:8f:7a:80:86:9e:3a:11:5d:b8:41:65:0c:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:7D:F3:43:5B:E1:86:C6:18:3A:69:DC:06:93:4C:7A:F7:88:E3
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:25:c6:3a:18:db:58:ea:7b:ee:35:08:b3:1c:42:f8:56:cb:
48:a7:34:17:33:3b:e4:8b:7c:0a:56:68:97:76:8b:fd:3d:23:
12:3c:2e:64:b3:4b:f8:a0:63:5a:c3:f0:a6:e1:e3:c8:3f:93:
44:18:c3:1e:21:7e:0f:f1:81:ca:25:ed:8a:cc:41:e7:d4:3f:
0d:f7:e6:6f:f5:55:b1:bb:c8:c2:b2:84:ea:01:5e:36:e3:30:
f5:e0:41:97:4a:3b:9a:05:64:c4:be:9e:ce:b9:05:ef:20:ec:
18:e8:f9:93:e0:ac:47:d0:b5:4f:d5:b4:17:6c:a1:e7:7e:50:
41:f0:04:ee:73:5a:33:fa:b0:b2:ad:e0:ce:0b:d8:e5:d9:62:
1f:63:6b:8f:5f:fb:ea:83:c7:71:00:ca:67:a3:1e:1e:1d:4e:
c9:97:42:5c:a6:80:9f:51:33:40:36:f3:88:1d:d4:fa:45:c8:
ac:f8:06:49:82:0f:6f:36:d5:9f:28:52:84:06:0c:41:58:13:
2e:c6:ce:a7:ee:6b:00:8a:a4:eb:27:13:4d:19:8e:44:cb:80:
ed:eb:cb:5e:03:c2:88:be:05:fc:37:d9:c5:76:47:fb:88:6d:
46:49:35:20:e1:58:4f:44:60:8d:ae:44:28:da:63:89:c7:13:
db:c4:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:58 2026 by rpki-client