Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: D5/gbtaiEsPa7ZrwjCicfnNnhvQW1iEXp4KS7x1dT6Q=
Subject key identifier: 77:67:21:41:5A:D3:CB:2D:06:FD:10:A6:AC:A0:29:DE:89:1E:5B:E2
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019F314B8EFE5CAD54775A82E0B081E5D60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 170D
Signing time: Sun 05 Jul 2026 08:01:02 +0000
Manifest this update: Sun 05 Jul 2026 08:01:02 +0000
Manifest next update: Mon 06 Jul 2026 08:01:02 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: jnOl47KtPNm1xS4tLYOqXPASXgFvjU6XPdIjy1+b1sk=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:4b:8e:fe:5c:ad:54:77:5a:82:e0:b0:81:e5:d6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jul 5 08:01:02 2026 GMT
Not After : Jul 6 08:01:02 2026 GMT
Subject: CN=776721415ad3cb2d06fd10a6aca029de891e5be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:ef:f7:fd:de:fa:ff:f2:83:e7:2f:0f:59:
12:f9:98:e8:07:f6:82:e0:9d:d1:a0:ad:81:88:bd:
6b:be:79:53:05:aa:d0:55:6e:04:d2:f3:5e:a1:c7:
25:d1:f2:92:e0:1b:38:70:2b:00:51:45:4c:7e:63:
22:c6:15:8f:2a:01:05:8e:89:92:1a:1f:5d:0b:3d:
72:7b:c4:50:b8:fa:1e:e9:9f:a4:72:6c:d4:e3:23:
a1:2d:7d:11:5b:7c:e1:f6:a8:11:05:56:45:7f:6c:
6c:b3:a2:4f:30:d3:41:7b:ec:eb:fc:b5:8e:16:86:
4d:aa:a2:4c:cb:59:c1:d6:78:31:2b:5c:7d:1b:51:
01:32:a0:e5:12:67:e3:e3:50:3d:55:f9:d7:fe:cd:
f9:a2:eb:e4:5d:6b:34:21:44:b6:b2:c8:3b:49:a2:
d1:75:2c:90:7d:24:47:5b:6a:91:a2:27:75:ab:c5:
a1:2d:fc:c9:b2:fe:e9:77:c4:01:77:0c:dd:a1:86:
3e:9d:11:f8:8b:bb:f0:f5:b1:b2:11:aa:72:28:51:
66:72:66:5d:57:48:d4:a7:65:78:3b:11:94:4f:0a:
4a:9a:24:28:62:6d:58:b9:a3:2e:ae:39:08:bb:51:
c4:e7:e4:d5:8b:2f:8c:d0:ac:13:46:c7:a9:74:04:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:21:41:5A:D3:CB:2D:06:FD:10:A6:AC:A0:29:DE:89:1E:5B:E2
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:f7:ad:5e:37:b8:89:49:d7:78:da:69:bf:a4:52:2f:d3:
b6:53:ec:e7:93:44:17:c9:59:4f:e0:9b:f3:3c:27:8c:f9:33:
3f:23:d7:fb:51:85:6f:10:7e:3e:d3:12:e7:6c:0f:fd:83:50:
82:75:2c:5f:10:28:e9:92:8e:0a:2a:9d:79:87:27:de:a1:39:
78:ab:37:60:60:3c:36:27:1b:bd:fe:a0:3b:d2:0c:ab:3e:a7:
fa:5c:7a:01:74:b5:47:67:2d:a2:1b:23:30:1e:81:f9:a3:13:
f2:72:b4:03:b4:66:e5:07:18:f8:1d:c9:4d:e7:f9:60:b1:25:
bd:2e:39:a8:3d:68:d0:86:f5:3e:a4:a3:38:c4:89:83:47:72:
f0:b7:d9:3d:03:45:7d:eb:39:c7:4c:3d:8a:94:6f:4d:26:9e:
67:73:b6:46:39:ee:88:50:4b:a0:35:84:00:56:eb:e9:80:3b:
1b:26:ff:fe:cd:0e:ff:9d:d8:ca:41:b8:d5:7a:99:bc:36:e3:
2b:35:f5:c3:b3:a1:9f:73:9d:bf:94:77:2e:33:7f:4d:ca:42:
11:d2:05:37:46:bd:9b:ab:3c:96:fd:b6:82:79:ae:fe:b9:e1:
da:4a:ca:a5:17:30:7e:9a:d6:1c:af:26:71:20:7d:e1:aa:14:
14:f9:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:35:49 2026 by rpki-client