Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: M0wCIPDjunMT5RA+frTMWlP0CInfrwCpDjPYHsbem9M=
Subject key identifier: 79:62:3B:B1:6D:2F:17:44:82:9B:35:99:05:3E:DE:41:70:BF:58:C7
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01A056D5D7C6E56A41257733E04095D41DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 17A5
Signing time: Mon 31 Aug 2026 08:00:49 +0000
Manifest this update: Mon 31 Aug 2026 08:00:49 +0000
Manifest next update: Tue 01 Sep 2026 08:00:49 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: rxbRjeGq/BvL+5oM77W322JisDwEgk6dgICN1uJcmdg=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:d5:d7:c6:e5:6a:41:25:77:33:e0:40:95:d4:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Aug 31 08:00:49 2026 GMT
Not After : Sep 1 08:00:49 2026 GMT
Subject: CN=79623bb16d2f1744829b3599053ede4170bf58c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:e6:3b:97:94:8b:2f:42:0c:f8:da:aa:58:
a2:1a:a3:2b:9a:0d:dc:a9:8f:49:18:56:5c:3f:7c:
49:67:ee:01:f1:e3:3a:66:d6:a8:9b:9a:44:e8:c7:
c6:9e:c4:87:e4:e9:ff:28:8c:b5:92:3e:1b:54:73:
3f:a1:cc:2c:28:8f:09:86:5b:2d:bb:1f:94:a2:4f:
40:3f:b1:db:68:31:80:4d:2b:57:10:29:19:20:62:
42:7e:9e:c0:95:0b:0d:95:69:a3:39:22:fc:29:58:
ca:1a:b0:05:ac:0c:f0:3e:9d:3a:83:04:db:7f:7a:
31:4e:b8:e0:91:1f:e8:62:95:85:7c:e0:54:66:3a:
6a:37:63:11:34:76:8d:16:c0:22:1d:4f:4b:12:c2:
c5:65:da:8e:90:7f:6d:ad:c2:52:0d:a8:02:9b:c3:
12:57:35:73:96:0f:39:28:14:01:67:9b:35:f9:d4:
32:de:a8:f9:14:07:26:35:d5:f6:d9:c4:31:b4:d4:
a2:e1:e2:27:2e:b4:3c:aa:cb:41:d7:23:9d:c6:1f:
e0:58:3a:ba:c8:f5:07:4b:f5:fd:ef:79:57:08:9a:
d6:95:9f:51:81:b9:27:e7:2e:3f:6c:14:9d:7c:94:
61:45:56:c0:04:1a:a9:5f:19:dd:3a:71:11:ce:a3:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:3B:B1:6D:2F:17:44:82:9B:35:99:05:3E:DE:41:70:BF:58:C7
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:92:0f:b7:b8:89:bd:1e:cb:81:45:ca:3f:3e:68:54:d7:f6:
70:30:03:18:97:63:51:43:15:f5:05:8b:9a:58:41:b0:b4:e5:
fb:5f:d9:e5:b6:d5:70:41:32:ff:0b:0f:8c:a1:fe:15:5a:7b:
97:0a:7d:6c:2a:f9:db:39:d0:68:24:70:76:5e:99:3a:44:30:
41:15:23:a3:a4:3c:f5:2b:f6:ec:17:49:5f:5e:2e:5d:27:a4:
f2:49:b2:e4:76:82:a1:e7:02:00:28:45:e3:0d:a9:1d:9d:15:
63:0c:8d:9a:8a:a9:bd:4a:ec:bd:73:68:06:27:3f:6a:7d:ba:
fa:f3:04:af:0b:07:84:15:61:3f:10:b5:fb:70:86:d9:23:a8:
fe:52:8d:67:99:be:e7:21:c6:64:e8:74:24:0a:08:27:4e:1b:
c0:82:17:5e:6f:f7:2f:2f:71:b6:28:83:92:1c:b5:67:92:fa:
9c:93:e0:96:d2:53:e5:3e:d4:33:a2:a2:ee:35:67:81:a9:81:
52:c8:33:57:ce:f1:e8:99:f0:a2:91:32:62:d7:78:94:8d:30:
9a:ca:fe:88:54:0c:5d:a5:d3:9b:a8:8f:e5:88:bb:d7:04:c8:
ce:fb:e6:5a:f0:23:d8:af:80:99:9b:8b:9c:67:e8:39:41:4b:
a0:da:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:39 2026 by rpki-client