Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: ctr+CFxKoMofxiZkkj68XfiM3IMgcEF0W/8WZ6qawhg=
Subject key identifier: FA:23:F4:52:1F:C5:8B:B5:A3:83:CE:54:A1:A1:B1:77:FE:2F:D5:3F
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 019F190C817CBCE05E434DFAA0A0C2B726B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:01:17 +0000
Manifest this update: Tue 30 Jun 2026 15:01:17 +0000
Manifest next update: Wed 01 Jul 2026 15:01:17 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: Uup21hoh9XM0KLVCCtTXvsxmmnC3fHldpifG3S71HvE=)
2: UjFwX21JbiqjDw7jVogurOY6vK0.roa (hash: StMP6W4VJaKc6UNnpuMnvzgEyfJwsKnjjavPWXE2/og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:81:7c:bc:e0:5e:43:4d:fa:a0:a0:c2:b7:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Jun 30 15:01:17 2026 GMT
Not After : Jul 1 15:01:17 2026 GMT
Subject: CN=fa23f4521fc58bb5a383ce54a1a1b177fe2fd53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:3e:ea:81:78:93:7a:27:6b:74:8a:1e:af:
27:0f:06:dd:f9:b2:1e:36:40:36:ea:4b:55:34:06:
07:eb:21:cd:c1:2e:54:f1:43:ae:9a:c6:50:f5:d7:
f9:13:78:55:96:30:2b:37:8c:05:e3:ca:40:85:b7:
69:a3:24:93:10:25:be:08:e1:43:9a:80:06:2b:3f:
2e:81:76:37:81:09:14:cb:22:e4:ef:df:15:9f:f8:
d3:d1:eb:c4:13:99:4d:cb:5d:19:a7:e1:c4:72:26:
ad:13:33:54:9e:d0:48:45:f4:49:46:04:5c:2b:8e:
8a:58:28:e5:50:b9:b4:f6:7f:8b:87:7a:55:1a:be:
0c:37:6a:49:9a:88:3d:45:00:a9:56:4e:0b:55:85:
c1:20:4c:2c:62:3e:1b:d3:c2:22:69:20:3c:14:07:
06:e1:11:65:7b:ba:43:62:ae:ac:37:d2:51:a7:f7:
d9:ef:7c:22:7b:a3:3d:17:8a:af:29:f1:62:20:46:
d2:97:78:1b:68:77:ed:6d:76:83:b7:1a:c3:e6:4b:
74:fc:64:96:bc:ab:21:fe:09:f2:9e:ea:84:10:05:
d0:ca:6c:30:3b:ed:56:ad:7b:d6:34:1d:86:43:f9:
9c:34:f3:b7:da:56:6b:57:66:57:aa:df:e4:51:c0:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:F4:52:1F:C5:8B:B5:A3:83:CE:54:A1:A1:B1:77:FE:2F:D5:3F
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cf:30:25:3e:7e:4a:76:9a:c4:54:df:7f:86:9b:62:53:09:
07:12:71:a1:89:de:d9:4f:69:d2:b4:a4:81:3b:28:6f:1b:52:
ca:fe:61:0a:0f:93:9b:76:0b:27:11:8c:4d:2d:22:9c:88:d3:
34:32:db:02:39:9a:89:cd:1c:cc:43:eb:a8:7a:ef:73:92:09:
5a:67:65:2b:d8:43:0e:c6:24:d9:4b:6c:4e:93:cc:de:e6:77:
e1:6b:9d:e8:5d:bf:5c:b9:a3:8d:ca:b3:1c:03:26:30:79:43:
9b:3a:a7:25:99:35:88:a4:64:2b:70:16:06:65:4a:21:2d:fa:
b7:fd:bf:82:db:c6:9a:f4:f2:7e:a1:26:7d:de:8a:e3:1c:69:
a8:66:4c:ad:19:4b:4b:79:2b:7b:69:8d:37:f7:18:27:c9:61:
06:4e:b7:51:86:d1:43:55:b2:5c:c0:0f:62:e6:65:73:d6:97:
b0:97:d6:ec:eb:d9:e9:21:0c:f6:da:1a:5f:01:6c:db:a5:79:
73:e3:d6:e5:35:a3:f8:35:57:a6:55:ce:b5:a0:28:5c:37:7c:
90:7a:ff:20:f6:ba:fc:c8:11:5d:7c:56:75:ae:1a:1d:1d:32:
46:e1:7a:69:6c:89:e4:89:fa:4d:89:b8:26:d1:00:a1:9d:ce:
b9:7c:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:46 2026 by rpki-client