Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: 32CQscNHtWgnN1ifQjCNx8j54qbPgFPjINSf082e2g0=
Subject key identifier: CF:16:8E:1F:60:16:56:EF:5C:FD:8B:14:07:98:45:2C:14:93:2E:4E
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019F1943EDFAAA3764142611BD1FB2C37E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 10BD
Signing time: Tue 30 Jun 2026 16:01:49 +0000
Manifest this update: Tue 30 Jun 2026 16:01:49 +0000
Manifest next update: Wed 01 Jul 2026 16:01:49 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: j3/Go6wDgK09HejqV4ItcZI02NqwvuRTo1bbPRwf4Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:ed:fa:aa:37:64:14:26:11:bd:1f:b2:c3:7e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Jun 30 16:01:49 2026 GMT
Not After : Jul 1 16:01:49 2026 GMT
Subject: CN=cf168e1f601656ef5cfd8b140798452c14932e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:a9:df:4b:7c:a1:71:42:d6:a8:a7:78:6a:
14:b9:e3:6c:c9:b2:8f:57:10:72:90:6d:ff:69:7d:
d1:9b:ba:04:ff:ba:f3:21:02:fa:6d:69:4f:87:6f:
f9:8d:ac:f7:2e:c6:7d:42:c0:86:4d:68:d5:ef:4a:
c7:da:38:70:b1:89:5e:0c:50:ac:c6:44:2b:89:a8:
d2:73:c9:a2:e9:fc:66:0d:33:aa:db:03:ef:81:7b:
a9:4d:80:31:56:c4:3e:1a:b8:d2:66:d4:b8:07:fb:
e4:51:33:61:10:d9:27:7e:38:32:1f:52:e6:da:b1:
10:31:c6:5a:7d:e6:3c:cd:7e:12:ce:e1:33:96:4c:
8a:67:c2:44:c1:f9:4b:8b:2a:cd:d7:31:56:05:19:
03:3c:f9:ff:9a:15:ac:79:d4:7e:8b:6f:f6:9b:ee:
0f:36:a2:20:5f:9c:75:f9:3b:79:02:36:99:42:0f:
ad:d2:03:0a:b4:4b:da:06:de:22:ad:9c:a8:04:73:
ed:d2:4c:10:9a:9b:46:42:33:5e:71:1f:4f:7f:fe:
54:a0:f5:00:12:4d:f9:3a:1f:0b:3b:2d:e6:dc:58:
ac:a1:f4:c7:2a:66:4d:b6:6f:e7:af:77:17:54:39:
b4:ea:cf:9d:55:73:dd:32:7b:d3:6a:e5:17:1f:41:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:8E:1F:60:16:56:EF:5C:FD:8B:14:07:98:45:2C:14:93:2E:4E
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:90:3d:89:4e:09:35:c1:d1:2a:90:49:66:62:31:94:46:91:
a6:e6:d5:88:e6:ca:ba:11:23:63:93:94:26:3e:fc:7e:36:89:
c2:2e:ff:62:f3:5e:59:54:46:15:97:ea:6c:19:5f:d1:dc:5d:
5b:58:4b:c7:30:49:87:58:77:fb:23:70:c6:c2:21:95:2e:5e:
74:16:5e:8e:77:50:c0:c4:a7:40:16:68:de:18:0d:0a:05:08:
73:57:89:fd:b2:0f:28:12:80:a5:7a:49:a5:fb:08:1d:d3:f7:
d7:71:1a:fd:29:84:e8:14:07:24:dd:4b:ea:67:54:e4:c6:e8:
7d:50:cd:38:9d:2f:d7:a2:91:96:85:33:72:67:8e:e3:97:06:
29:aa:08:3e:48:d0:b0:55:55:d5:c8:11:ec:1a:01:e9:62:a6:
bf:63:fc:36:45:ad:bc:22:5d:68:89:ec:93:df:f8:80:ab:2a:
d5:35:8d:e8:0a:04:9c:f3:16:1e:1f:ac:40:c5:53:59:ea:fa:
b7:15:48:1b:61:0f:8d:cc:b9:d0:d6:dc:94:03:7c:ac:f1:01:
56:6e:46:82:e1:ef:66:cb:6b:9b:7c:b5:b9:d2:ba:8f:7c:8c:
4a:eb:bc:18:76:3d:08:54:a4:a1:21:35:4b:39:e3:7e:0a:3c:
7c:e7:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:18 2026 by rpki-client