Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier: CwJ7bqidqeY8A329F6XoqQYpHAMXnQJbXX4PXDLJwC0=
Subject key identifier: 3D:2F:9F:4D:0A:EA:E0:86:0D:22:62:FF:62:98:49:BC:CB:6D:25:6A
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial: 01A0DC17205A9B92A191A708B8B8743559DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number: 1A00
Signing time: Sat 26 Sep 2026 05:01:38 +0000
Manifest this update: Sat 26 Sep 2026 05:01:38 +0000
Manifest next update: Sun 27 Sep 2026 05:01:38 +0000
Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: 7DM2qsOcUxPa3awQTyXxpfBb+j43tj6VlR6AVgE6O0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:20:5a:9b:92:a1:91:a7:08:b8:b8:74:35:59:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Validity
Not Before: Sep 26 05:01:38 2026 GMT
Not After : Sep 27 05:01:38 2026 GMT
Subject: CN=3d2f9f4d0aeae0860d2262ff629849bccb6d256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:1d:af:43:87:4e:4f:39:4f:01:0a:66:54:
66:4c:93:65:15:8b:e8:59:d0:37:74:e9:89:1b:1a:
ae:25:05:e8:17:70:81:81:1a:54:31:b9:db:a9:82:
43:62:e7:00:3e:1d:ce:04:2e:d7:26:3c:ea:07:ed:
00:54:01:bf:86:06:c2:51:eb:5f:84:34:9b:49:3f:
9c:82:1a:3a:8b:b2:f2:50:cc:5b:1c:cc:ea:7d:84:
00:e8:98:bd:9d:1f:a7:ee:18:b7:da:6f:b8:99:3d:
66:b6:10:74:97:61:22:5c:23:61:11:43:0d:39:19:
2c:f7:2e:9b:63:14:c8:14:f0:10:84:a2:2c:b2:56:
ee:37:db:ab:51:cf:d9:62:a6:46:ef:09:2c:76:63:
db:3a:aa:0e:8d:f7:b0:b2:be:c5:6f:09:1e:b3:0f:
d4:87:d5:cc:35:3f:63:26:f7:78:81:90:84:4c:72:
16:3b:f0:2f:e2:b5:1f:24:94:49:68:0e:4e:a5:98:
32:49:8c:78:fa:9e:7f:1b:f9:4e:a5:6d:ee:58:73:
96:6c:c9:97:71:33:ef:10:ab:fa:5c:40:d4:12:0e:
8f:14:e1:88:c6:34:92:d1:b4:81:63:fe:fc:1d:60:
46:01:db:b5:36:64:ba:f1:02:84:ec:ec:7b:99:47:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:9F:4D:0A:EA:E0:86:0D:22:62:FF:62:98:49:BC:CB:6D:25:6A
X509v3 Authority Key Identifier:
keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:56:0d:0e:12:20:d7:08:b8:9f:36:c0:2c:14:6a:58:45:
81:57:67:18:a3:b2:1a:8e:89:1f:14:2d:32:32:4c:37:f5:7d:
4f:2e:36:97:a4:ef:3d:e9:4b:46:ae:42:18:1a:79:11:74:82:
ec:f6:f1:57:14:ca:8c:41:14:af:ae:3a:48:56:2d:7f:91:70:
ab:be:92:df:4f:0e:f0:c5:8f:53:c4:d4:64:91:42:2a:c3:5d:
58:5d:c3:5c:1c:2f:44:4a:6e:cd:3a:46:91:16:87:50:39:8f:
cc:e1:51:31:93:d6:67:3a:fe:8e:1c:26:d3:ee:00:3d:1a:7e:
f3:d1:85:76:8b:1d:51:df:58:8e:ff:4b:fe:23:b0:9d:24:3f:
b4:71:25:64:b1:a3:67:25:ae:82:34:98:31:01:c5:ad:c3:27:
ae:2e:5b:5b:f8:31:28:f8:0f:7c:1f:75:56:7b:e7:64:ed:96:
a2:19:f4:23:ff:0d:f7:f8:15:e1:5b:67:34:cf:4b:75:52:ac:
2a:d8:ed:bc:21:37:4f:24:bd:ea:7e:5a:2d:59:ce:72:e7:d1:
41:ec:12:5c:4b:57:50:bd:b7:96:c7:35:37:2e:5b:e8:e0:1e:
94:47:a6:ff:48:f3:30:c2:08:3b:c3:25:f8:d7:8a:7b:41:3d:
1d:1d:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:56:52 2026 by rpki-client