Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: liic++/fki6i8vFXUSmMZqbjZHbmwp9NdtaUS8ctZNU=
Subject key identifier: 30:77:D5:C5:BE:58:04:4C:07:63:CD:36:4E:5C:82:13:51:58:64:79
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 01A00101379690C8852F8F727F8C30895F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 1135
Signing time: Fri 14 Aug 2026 16:00:52 +0000
Manifest this update: Fri 14 Aug 2026 16:00:52 +0000
Manifest next update: Sat 15 Aug 2026 16:00:52 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: r2pGTf4TG3c8K6Cw7tua7gc71qyA2mHgbzovBeG7Bfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:37:96:90:c8:85:2f:8f:72:7f:8c:30:89:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Aug 14 16:00:52 2026 GMT
Not After : Aug 15 16:00:52 2026 GMT
Subject: CN=3077d5c5be58044c0763cd364e5c821351586479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:42:38:1a:0d:63:79:a5:38:7f:3c:03:25:
1a:4b:67:13:b7:4b:c0:92:45:a1:68:91:f3:78:a7:
ee:c1:de:f9:11:bc:02:d4:af:80:cc:0a:15:0e:b4:
c1:74:be:58:65:9d:7c:cf:f6:c6:ba:cc:ec:ff:d4:
2a:49:f6:e5:6d:b1:2b:62:fc:02:19:2f:57:d2:bf:
6c:4f:2d:0d:e4:15:07:67:f1:b8:80:56:40:37:40:
99:b5:b3:c7:60:3c:84:ed:03:60:a0:1e:b8:37:cf:
70:d1:15:53:53:c7:20:dd:ea:be:a1:80:e8:b5:ac:
0f:25:7d:84:45:a7:4b:a2:f7:08:d4:39:fa:2e:df:
27:aa:96:ff:01:12:64:a2:dc:07:c1:b2:49:d8:c6:
9f:06:f7:1c:b7:22:e5:94:93:93:55:fb:b4:0a:da:
e4:6c:0c:55:83:fa:ad:bb:45:cc:a6:63:fc:fa:68:
4b:29:bd:71:f1:24:3c:d2:cc:60:4c:42:78:8b:3a:
97:1b:f7:3a:dd:91:c5:e7:3d:18:3d:51:be:5f:d1:
e0:b3:53:16:e1:67:f8:00:a2:b0:2b:7c:dc:b4:c2:
f3:60:43:b6:e3:1a:71:09:a5:83:e5:98:11:a9:fe:
7d:ca:c9:be:53:80:b4:5c:8f:0a:c3:68:5d:54:44:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:D5:C5:BE:58:04:4C:07:63:CD:36:4E:5C:82:13:51:58:64:79
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:73:b9:58:68:b5:79:33:be:0a:e9:63:08:bc:bc:ae:de:3c:
e5:03:46:09:05:9e:64:76:80:35:19:af:e0:d6:e2:e5:3e:f7:
4d:a3:fb:21:5e:18:68:dc:17:3d:95:93:00:ba:bc:c0:66:65:
60:85:e0:a8:40:0c:91:f8:8b:40:49:99:bc:d7:66:f4:8a:15:
7f:4b:9f:de:2b:53:72:4a:d5:43:d3:c1:61:4d:5a:44:3b:c1:
3f:fa:9a:9c:10:88:13:b6:46:5d:b0:14:8c:c6:14:67:3d:c3:
78:08:7f:59:95:fa:6a:69:62:f8:1e:b9:43:b1:44:0a:af:91:
4e:53:bc:9c:65:35:e5:8a:38:03:e5:e2:52:59:d9:07:75:71:
4c:6d:21:1b:45:93:da:b4:56:22:ab:4d:8d:ba:cb:3f:ab:dc:
fa:6c:28:66:a5:c4:3d:d5:41:af:87:bf:a5:44:79:68:34:f2:
98:71:9d:00:5f:5c:6a:43:ae:2b:59:a6:56:ad:c3:e5:de:00:
c6:8b:4b:0a:e0:ca:d5:30:b0:cc:76:94:70:59:f5:15:b3:7a:
85:18:62:7b:68:a6:69:c0:3f:c3:2f:79:10:fc:cd:50:f7:b2:
5d:38:f5:92:83:87:c0:24:eb:3b:42:61:da:07:72:08:8b:fe:
4c:24:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:28 2026 by rpki-client