Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: NJ6F3j46hwFZIaHOyvMVHvSXUe8RWhD4hgFIMOV5ocs=
Subject key identifier: 8A:66:86:F8:CF:B5:FA:2D:60:11:D4:33:D3:98:FE:4A:CA:69:40:46
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 01A0016F0701AB7C8749C43B2A4A0D3CE1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 18:00:48 +0000
Manifest this update: Fri 14 Aug 2026 18:00:48 +0000
Manifest next update: Sat 15 Aug 2026 18:00:48 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: Ja+Zp0TUOqk3J21f/nwEyrBg7hspxiU2+f3q8E2gIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:07:01:ab:7c:87:49:c4:3b:2a:4a:0d:3c:e1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Aug 14 18:00:48 2026 GMT
Not After : Aug 15 18:00:48 2026 GMT
Subject: CN=8a6686f8cfb5fa2d6011d433d398fe4aca694046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:cf:c1:77:8f:ae:da:db:29:cc:b0:08:e9:
ed:c4:95:85:8d:9d:84:d7:87:46:32:72:b0:73:1d:
bf:d7:fd:88:64:da:83:4b:31:47:5c:99:51:3c:2c:
e5:79:f8:2d:f4:7b:19:44:40:2e:fe:bf:80:89:aa:
36:bd:8c:4e:59:26:29:11:a3:cb:19:c0:b5:3d:7c:
48:af:8e:6e:cd:4f:15:65:d4:0a:f5:0b:a0:6f:85:
67:c1:5f:dc:77:c8:af:7a:55:a3:c8:fb:2f:d6:f8:
7b:48:dd:f8:38:da:ad:b1:ff:89:f0:ae:a2:0a:b8:
fb:3c:fc:a2:03:e8:60:eb:00:a5:80:2d:3e:cc:89:
e2:41:90:57:f9:0d:5a:f6:4e:6c:87:e1:20:c7:17:
99:a4:e7:d5:72:6b:a0:44:e8:6a:62:cd:0e:af:b2:
32:d0:6e:5b:dc:67:4c:33:68:f0:c9:d0:ee:f0:21:
ba:76:ca:7e:5e:02:e6:d8:c0:25:7d:5a:18:31:21:
04:f6:5a:e4:1b:a7:3b:fe:21:bd:89:f9:a9:a8:46:
8f:2d:ac:44:9c:bb:3c:e4:42:3a:90:b0:39:1b:b4:
b0:62:41:0d:a9:e0:4c:3b:8d:60:a8:14:ec:e6:14:
3a:f8:d3:e6:a7:7f:61:65:a4:e8:1a:1f:8c:04:85:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:66:86:F8:CF:B5:FA:2D:60:11:D4:33:D3:98:FE:4A:CA:69:40:46
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7d:d7:0f:7a:5b:5d:bd:dc:16:22:6a:9e:bd:36:44:70:45:
82:b1:de:ed:f7:6f:97:c7:b6:f8:aa:32:65:ac:f7:7e:af:1f:
50:d9:58:d9:f2:fc:3f:13:fc:92:a4:01:eb:10:94:2a:03:96:
9c:6e:8b:3d:9e:e5:4b:03:f8:06:70:9a:6b:8e:2c:1c:7c:09:
fd:86:d3:38:14:02:d1:58:3b:37:ac:b4:9d:77:2e:b8:9a:62:
e2:7d:5b:e5:3c:5f:af:1b:fc:13:80:a2:fe:be:af:d4:bc:2f:
64:c2:a2:49:1e:62:7b:76:c1:96:0e:e0:00:cd:ea:2c:f5:f3:
c8:20:a3:cb:90:61:ce:f6:9a:b1:6e:84:70:e5:5e:d9:27:1e:
54:e7:5d:5c:09:aa:fa:36:f7:07:eb:d2:26:70:11:b1:a8:eb:
4a:15:39:11:bb:37:52:4c:9d:ca:18:b7:60:77:68:1e:9d:ac:
5a:f3:70:e0:d3:5a:1b:d6:15:9b:fb:29:32:42:9a:89:ce:68:
34:e6:9b:59:70:80:64:97:fd:5d:ed:ed:e8:56:4f:08:bb:a9:
7e:b1:a7:3d:ff:2e:f0:6c:ba:61:de:ee:57:f5:0a:bd:a2:e3:
b6:39:dd:1f:c9:85:b4:6a:44:6f:02:a3:4e:57:88:52:0a:bf:
d9:5a:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:49 2026 by rpki-client