Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: /RAQvLZkaadavgPDqbJfSDxMtjW3d5VWyxixWTyGFPg=
Subject key identifier: F9:F3:BD:E5:B1:B9:3F:1A:6D:49:FB:BE:35:5C:13:49:75:EE:73:C3
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 019F178C4FC2D1DB72E2568CED0A75B284F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 17F9
Signing time: Tue 30 Jun 2026 08:01:39 +0000
Manifest this update: Tue 30 Jun 2026 08:01:39 +0000
Manifest next update: Wed 01 Jul 2026 08:01:39 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: a2kAb7y3MvJzp/FR0t0ADzVZ+FLMgcOzu1qPDTleL0o=)
2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:4f:c2:d1:db:72:e2:56:8c:ed:0a:75:b2:84:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jun 30 08:01:39 2026 GMT
Not After : Jul 1 08:01:39 2026 GMT
Subject: CN=f9f3bde5b1b93f1a6d49fbbe355c134975ee73c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:5a:92:7c:ed:e0:b9:0a:21:ed:c7:0c:be:
00:20:cf:6f:e7:f5:7d:64:03:04:68:15:40:11:fd:
b7:55:3f:e6:07:1e:07:9f:d6:87:54:23:9e:b4:1e:
ec:c2:25:87:db:97:7f:0f:a3:74:58:10:bf:77:a5:
7e:52:75:65:cc:44:df:f4:6b:75:81:5a:8d:c2:d0:
37:80:01:b0:da:4c:00:bd:11:f1:29:b8:0f:e6:43:
a9:a4:3c:f0:ce:6e:de:64:6e:07:53:08:d2:35:23:
89:d5:8c:53:f7:57:4e:0a:13:63:38:2f:d4:5e:90:
7c:30:f8:38:05:87:40:cb:e8:e4:af:5f:c6:91:74:
41:32:28:93:f2:5e:b5:84:ff:13:d1:df:a4:13:06:
c3:f7:37:e5:81:0e:82:79:dc:96:28:23:da:1d:6b:
49:d0:b6:92:a9:e3:36:9f:b6:90:06:ef:a0:c3:9b:
e1:66:7e:c8:b8:bd:3b:47:3a:65:fe:02:4b:2c:0f:
81:a6:c9:a4:8a:f7:47:da:54:f6:3f:a0:c0:e9:80:
73:dd:c9:ba:86:5d:1e:4b:dd:68:db:5b:88:70:1d:
03:d8:3e:df:c6:b6:01:df:9a:9e:29:34:b1:03:f2:
fb:90:52:69:85:9b:5c:58:16:da:f7:d3:d4:63:2f:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:BD:E5:B1:B9:3F:1A:6D:49:FB:BE:35:5C:13:49:75:EE:73:C3
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b1:0f:f3:d5:c5:b4:e7:90:d8:31:ab:50:bd:7b:a0:59:d0:
f0:3d:12:0d:cc:c1:f5:b6:87:ad:26:4b:50:7f:f1:d9:79:b2:
11:d1:c8:da:c3:01:0c:0b:59:5d:66:37:dd:85:b8:58:60:96:
84:37:39:66:af:11:44:a1:8b:00:38:b9:e7:14:37:23:1a:2c:
e0:80:a8:88:60:1b:b2:47:96:5c:75:2f:24:8f:1f:d1:04:b8:
b9:a8:71:af:29:35:2a:d7:1a:bc:bd:c9:48:0c:d0:69:23:76:
79:08:85:c1:f2:1c:7e:1b:96:5c:d8:c8:4e:1f:29:65:3c:3f:
49:a8:8e:12:77:86:08:45:53:fd:f8:ac:10:a0:4b:12:74:12:
dd:92:a2:fb:d4:e0:dd:59:1e:1d:80:3b:e2:d3:ec:b7:84:ff:
98:bc:19:8e:b1:cd:b3:dc:5b:f9:ad:5f:e4:e7:ff:56:10:5c:
43:80:d4:e0:59:ec:ea:d1:c1:d7:0e:07:83:c6:ad:38:43:95:
81:0f:91:1f:47:9e:a2:50:35:dd:4d:c5:8e:22:bd:04:12:41:
ac:83:56:13:84:31:b3:f9:38:4a:1e:a6:f5:d5:8c:23:fc:71:
a6:85:46:3b:7d:0e:f5:76:98:ee:a8:36:0b:f1:60:c8:dd:96:
a3:10:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:45 2026 by rpki-client