Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier: CusytOrTtAbW0Qa8etw0X/PFkJFWmKVdwu3DQKB5/LQ=
Subject key identifier: B6:FF:20:0D:DC:11:1F:89:02:2F:22:54:A0:6B:B9:2F:52:58:27:24
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer: /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial: 019F85D6C8B1D3493BAC540425A7D27FB033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:13 +0000
Manifest this update: Tue 21 Jul 2026 18:01:13 +0000
Manifest next update: Wed 22 Jul 2026 18:01:13 +0000
Files and hashes: 1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: IKb+pRdwxHJS6b/lb1VoNU6zyKfyPhUOJdbAXf144bA=)
2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:c8:b1:d3:49:3b:ac:54:04:25:a7:d2:7f:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Validity
Not Before: Jul 21 18:01:13 2026 GMT
Not After : Jul 22 18:01:13 2026 GMT
Subject: CN=b6ff200ddc111f89022f2254a06bb92f52582724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:9b:38:2f:e0:fc:ed:b9:a2:13:55:2e:4c:
2b:00:23:c5:5e:7e:e6:d8:ba:2e:d9:7e:11:f9:88:
cc:44:46:e0:89:53:06:65:f6:74:ea:23:c1:4c:1d:
eb:8d:41:cb:ed:02:4a:4a:2d:b8:0d:9c:24:8d:8d:
7b:cb:ec:1d:70:03:92:03:76:47:c5:12:3f:e3:cb:
c8:8d:61:42:45:dd:2f:0c:7c:3e:8b:59:b3:5a:4a:
b7:6c:c8:74:10:c6:de:e1:22:4d:fa:5a:87:23:0b:
41:ba:fc:1b:c6:6d:42:19:1d:e3:6d:c4:f6:a3:32:
b6:1d:37:61:99:3a:44:64:ce:f2:0a:6a:a9:13:43:
b2:db:ba:3c:19:2e:b2:c8:20:1a:15:63:bd:93:1f:
36:0c:d6:b6:96:e0:b2:97:d7:9f:14:c2:9c:a4:dc:
30:bf:44:a4:de:18:0e:97:64:7c:ff:39:ba:2c:24:
87:83:06:93:90:71:33:c6:50:94:dd:c7:f2:74:23:
7b:57:27:7f:ac:e1:44:f0:1c:60:ab:f7:99:ce:8a:
23:5e:fe:a2:93:9e:ec:02:3b:a3:ed:a0:a0:99:26:
f6:2b:fd:06:e2:80:9e:56:73:16:c5:11:8c:10:df:
d7:44:56:5e:05:68:c3:41:3e:a0:44:f4:98:ff:b0:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:20:0D:DC:11:1F:89:02:2F:22:54:A0:6B:B9:2F:52:58:27:24
X509v3 Authority Key Identifier:
keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e1:ac:94:90:34:cf:25:df:08:a6:2d:f6:c0:06:60:07:63:
ad:35:05:ca:b4:19:ea:d6:dd:67:08:79:6f:71:31:37:5c:59:
c3:db:7b:d8:80:e8:6e:28:4b:34:3a:43:26:68:67:58:1d:79:
84:cd:2b:89:e4:b4:ba:7f:75:f1:6a:1f:7f:db:f9:8f:f2:d8:
4d:b1:ee:38:7b:eb:83:49:be:17:fa:d0:0a:53:0a:0c:ee:53:
05:10:df:b8:8f:9c:45:81:21:05:3c:6c:3a:c7:cd:16:60:e9:
07:c8:93:fa:4f:04:f0:d3:e9:5a:b7:93:e4:15:a0:44:67:17:
8f:2e:3e:25:84:1a:6f:8d:66:01:26:2a:cf:f0:08:00:f7:b1:
cc:a9:ea:78:19:3d:10:e5:59:7e:5b:a5:a3:cc:b2:b9:28:b1:
81:40:1d:cc:49:fd:79:ce:a7:4d:90:49:29:c0:e7:14:92:6f:
02:43:5d:12:62:e5:1a:cf:85:ea:ce:2d:23:db:ef:1d:30:2f:
f5:8c:cf:99:15:89:07:c7:2c:c1:74:5f:bf:2c:36:9f:64:5a:
7e:83:3e:24:1a:68:66:f4:0a:05:1b:1c:73:39:da:82:0d:1c:
6f:80:f8:82:20:6c:a2:0b:0a:8a:04:64:33:f1:bb:84:2f:55:
40:f6:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:33 2026 by rpki-client