Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: WsJAFTxhutVu0t1RIio+N10Tj2fHqzVUiTor7MKIwKU=
Subject key identifier: A5:3E:56:FA:EF:17:28:78:FC:1D:86:33:77:6A:82:22:47:4E:44:A9
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019F1979F1477C2F7A96772A0EC46867B328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 17:00:49 +0000
Manifest this update: Tue 30 Jun 2026 17:00:49 +0000
Manifest next update: Wed 01 Jul 2026 17:00:49 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: 5C4toDlrLaEuRGHVZnn4DQ0aGVM3NAaRYxHWZDCd0V8=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:79:f1:47:7c:2f:7a:96:77:2a:0e:c4:68:67:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Jun 30 17:00:49 2026 GMT
Not After : Jul 1 17:00:49 2026 GMT
Subject: CN=a53e56faef172878fc1d8633776a8222474e44a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:5f:c6:48:b5:c3:a0:60:49:e1:16:af:50:
96:90:fc:d1:76:a4:86:ee:3d:39:1d:b4:d8:32:a8:
ae:aa:f3:43:2a:27:72:72:fc:6e:be:55:31:ff:aa:
1a:22:e2:64:7d:19:8d:8e:0a:10:44:99:06:9e:23:
f6:c4:c8:8f:65:14:c6:af:26:d8:70:66:41:8d:61:
ee:ec:d6:a2:d5:ef:3b:c8:ee:fe:ff:6f:8e:36:57:
e6:18:d4:04:7c:de:40:f5:ac:69:ee:c9:23:f4:de:
e4:be:a8:dc:19:74:bd:fd:61:67:4b:38:98:ed:cf:
03:76:4b:99:e0:12:0d:4b:a0:fe:ff:80:88:95:56:
5b:c5:65:ea:4c:b1:82:41:ba:b5:52:da:ca:d5:4e:
9e:e3:48:83:91:9f:50:89:83:7c:43:f3:79:45:82:
af:b6:a2:81:e3:25:a3:f2:ae:e1:6e:4e:d0:0f:de:
c2:8a:04:22:1c:b5:fa:60:dd:46:56:92:2d:7e:86:
dc:d8:93:58:0e:d3:36:92:ff:94:d6:a0:b8:b7:5b:
23:c8:ef:d0:3b:9c:f0:88:48:7f:cb:26:ca:9f:a4:
a5:af:19:90:67:2b:c2:03:7a:4c:74:38:50:6d:4a:
a1:24:f4:95:f4:eb:19:f8:35:7e:b7:ef:28:a6:54:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:56:FA:EF:17:28:78:FC:1D:86:33:77:6A:82:22:47:4E:44:A9
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:d2:9d:14:00:5d:53:07:7c:e9:9b:49:21:b3:be:23:6f:
99:74:d7:5f:ba:64:e7:0e:c8:60:4a:34:48:a5:44:23:b1:57:
a1:a7:fa:3f:13:41:1d:8c:27:f4:a6:0b:44:ae:06:2c:42:52:
d3:6c:ad:4d:20:b6:37:57:13:97:01:d8:b3:1a:5d:fc:3b:5a:
6b:82:ef:78:65:ce:9b:2d:2a:86:b3:6c:63:0e:2d:21:a4:cd:
4a:ef:f2:45:15:8a:75:16:de:a3:93:48:89:e0:69:c3:67:c4:
e1:4a:8c:ca:a0:92:ba:e6:78:9e:09:dc:e4:ef:cf:b7:25:c2:
ed:aa:90:47:38:3c:ce:ab:67:38:7e:ef:70:60:f2:26:9e:50:
7d:7e:21:72:67:55:c2:4f:bc:81:9a:14:1f:24:ea:bb:e0:dd:
d9:75:22:ad:53:8e:18:26:6e:18:50:24:ec:d1:b4:35:a9:71:
5b:54:df:c8:e4:7a:ab:65:2d:48:cd:2c:29:01:36:93:e7:20:
4f:51:01:db:3e:23:34:c6:92:73:c6:99:10:81:f8:9f:3f:cf:
65:27:46:c8:bf:b7:ca:d9:31:f7:a9:ac:b0:0e:8c:11:a4:84:
f3:b2:97:f0:39:04:f9:cf:e1:a1:b0:46:f0:04:e5:15:fd:ee:
32:e0:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:43 2026 by rpki-client