Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: Nk5xMbz5VWP1Q68y+EVD8K71o/dZV0SkZUQHFgA40DI=
Subject key identifier: AF:FF:00:B1:43:6B:73:3E:8A:BF:13:70:DC:92:06:67:4E:F5:25:39
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 01A0013853A6D6B3A795CC61A9F5C4FD0891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 17:01:03 +0000
Manifest this update: Fri 14 Aug 2026 17:01:03 +0000
Manifest next update: Sat 15 Aug 2026 17:01:03 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: 9heiZPcFS6r1/vghOsPCRa95SQ8+sBCBRipBT/WmQxU=)
2: a1yKgQiS1kQqWALGhb3azz9xPgM.roa (hash: QrlCwnjrUJMDarRIw4ovkDjdQhcibYW6n6I1xi7Yys8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:53:a6:d6:b3:a7:95:cc:61:a9:f5:c4:fd:08:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Aug 14 17:01:03 2026 GMT
Not After : Aug 15 17:01:03 2026 GMT
Subject: CN=afff00b1436b733e8abf1370dc9206674ef52539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:31:c2:54:77:19:ae:c5:cb:51:bb:19:c2:
0d:45:6e:a3:bf:4f:8b:54:eb:20:4a:7e:e4:e0:9a:
79:9b:b2:c5:21:0c:e7:19:c6:21:e1:4e:35:56:15:
79:64:c7:32:e7:12:7b:bc:fe:74:e2:d2:f2:4e:91:
5a:d5:89:14:b3:a4:7d:94:67:7d:73:15:2e:69:ae:
f4:a6:ed:72:ce:87:0f:66:42:22:40:f7:4a:63:d2:
dd:6d:0b:ad:71:2f:74:e3:49:3e:57:b9:db:6d:33:
d3:ea:af:3f:04:03:f5:84:39:37:02:c1:9e:73:7a:
b2:61:18:c1:14:e8:9f:1e:b2:c3:f0:62:c8:83:2f:
af:fe:4f:1c:79:ef:bd:d7:1f:49:1d:31:58:b8:3a:
3d:34:fe:ae:09:67:28:e1:32:3a:13:bc:d1:8c:b6:
c8:b4:49:dc:46:b3:5b:1b:d4:28:bc:bb:4d:1a:13:
8d:e7:e6:13:c4:de:98:62:ee:3e:66:61:df:50:2e:
f1:f6:40:b9:d5:87:3b:6e:cd:09:49:ad:c1:b4:f1:
54:af:c8:3c:e5:b5:6f:25:89:06:42:e0:c0:7b:29:
a7:98:13:31:fe:90:5c:49:2e:10:bf:0e:17:8c:14:
71:69:6a:8b:77:45:70:20:94:e4:50:2a:15:87:1a:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:00:B1:43:6B:73:3E:8A:BF:13:70:DC:92:06:67:4E:F5:25:39
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:99:8f:07:cc:49:44:ca:5e:b1:33:c9:0f:3d:1b:a6:d2:e9:
b0:79:08:9f:56:05:5f:26:9f:9a:af:84:08:32:46:32:83:6e:
77:b4:5e:36:6d:a2:04:38:d2:90:e5:e8:c4:b3:74:d0:95:b0:
92:e1:7e:1f:8e:24:f2:72:1e:de:a5:23:06:bc:7c:55:30:49:
23:90:2b:66:75:a6:95:13:bf:2c:12:82:4d:bc:76:9e:31:c0:
4f:91:a2:d5:15:72:70:9c:8d:ca:6e:27:72:8b:61:8b:93:44:
56:b6:78:1e:94:2b:5c:e8:88:61:64:b7:c6:b4:34:60:9c:6c:
2a:62:1f:aa:90:73:7a:1c:e7:8c:1f:ca:10:a7:ae:c6:35:e8:
f3:40:53:df:de:09:69:5d:63:52:e9:84:14:c2:b9:36:43:94:
d8:8a:dd:92:3b:75:cd:50:44:6c:8f:79:fe:7d:45:e8:68:1b:
d0:08:a3:d9:24:56:db:46:f4:08:f0:dd:57:97:5f:fd:50:ca:
72:60:dc:df:a1:77:69:18:bd:2d:64:97:e7:0f:ec:8c:78:bf:
60:95:5a:b4:ac:77:15:0b:80:45:c8:88:8b:6c:a5:89:4f:1f:
3f:b2:db:b9:bf:71:c2:4d:f0:38:24:18:39:a9:06:b2:b2:7d:
e8:83:55:d0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABOFOm1rOnlcxhqfXE/QiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk
OGQzMjIwHhcNMjYwODE0MTcwMTAzWhcNMjYwODE1MTcwMTAzWjAzMTEwLwYDVQQD
EyhhZmZmMDBiMTQzNmI3MzNlOGFiZjEzNzBkYzkyMDY2NzRlZjUyNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSQxwlR3Ga7Fy1G7GcINRW6jv0+L
VOsgSn7k4Jp5m7LFIQznGcYh4U41VhV5ZMcy5xJ7vP504tLyTpFa1YkUs6R9lGd9
cxUuaa70pu1yzocPZkIiQPdKY9LdbQutcS9040k+V7nbbTPT6q8/BAP1hDk3AsGe
c3qyYRjBFOifHrLD8GLIgy+v/k8cee+91x9JHTFYuDo9NP6uCWco4TI6E7zRjLbI
tEncRrNbG9QovLtNGhON5+YTxN6YYu4+ZmHfUC7x9kC51Yc7bs0JSa3BtPFUr8g8
5bVvJYkGQuDAeymnmBMx/pBcSS4Qvw4XjBRxaWqLd0VwIJTkUCoVhxoTkwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK//ALFDa3M+ir8TcNySBmdO9SU5MB8GA1UdIwQY
MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk
LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh
MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpmP
B8xJRMpesTPJDz0bptLpsHkIn1YFXyafmq+ECDJGMoNud7ReNm2iBDjSkOXoxLN0
0JWwkuF+H44k8nIe3qUjBrx8VTBJI5ArZnWmlRO/LBKCTbx2njHAT5Gi1RVycJyN
ym4ncothi5NEVrZ4HpQrXOiIYWS3xrQ0YJxsKmIfqpBzehznjB/KEKeuxjXo80BT
394JaV1jUumEFMK5NkOU2Irdkjt1zVBEbI95/n1F6Ggb0Aij2SRW20b0CPDdV5df
/VDKcmDc36F3aRi9LWSX5w/sjHi/YJVatKx3FQuARciIi2yliU8fP7Lbub9xwk3w
OCQYOakGsrJ96INV0A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:02 2026 by rpki-client