Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: tx7gDNJeJ/ef5RifSbmE0IgyO1z52ZJevc4cLkrmibY=
Subject key identifier: 4C:0E:97:5B:D3:09:04:D2:D4:4D:FA:74:01:0F:E2:8A:12:E6:C4:A9
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 01A0C40DEEB7628176B146F84245E6098B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 06EB
Signing time: Mon 21 Sep 2026 13:00:42 +0000
Manifest this update: Mon 21 Sep 2026 13:00:42 +0000
Manifest next update: Tue 22 Sep 2026 13:00:42 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: fG2HUeKIZsCdFkAeKWKh0zuocMIj14HAcsbfWeVFR0o=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ee:b7:62:81:76:b1:46:f8:42:45:e6:09:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Sep 21 13:00:42 2026 GMT
Not After : Sep 22 13:00:42 2026 GMT
Subject: CN=4c0e975bd30904d2d44dfa74010fe28a12e6c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:ee:12:00:da:c6:84:9a:17:ff:4c:8d:2d:
27:6b:9f:98:fb:fa:83:e5:e7:7d:a2:78:59:f8:67:
7f:8b:4b:08:37:cf:18:61:0f:68:8c:f9:45:50:0f:
41:1c:2b:65:a5:55:72:a0:17:e6:0d:3e:1d:c8:09:
50:f8:1a:ce:08:eb:e3:81:29:d3:01:b2:99:da:de:
7f:b5:c9:83:82:7d:10:49:9b:2a:12:ae:d7:ea:63:
ae:f6:e1:8b:8c:5c:8a:5e:e0:3f:5b:bb:ce:fd:90:
08:bc:ad:23:78:db:f7:50:7c:5f:3d:17:31:f3:f4:
d0:ff:76:db:d9:38:0b:9e:41:5f:bf:1a:78:82:a6:
b8:99:7e:06:ba:64:16:50:bd:50:f4:3d:65:53:39:
d5:2a:44:f5:eb:6b:71:9f:a7:f3:d1:b7:c6:eb:36:
22:5f:6e:b4:54:7f:2f:1e:af:97:44:be:b7:f3:ba:
bb:28:9a:b0:68:6c:ad:83:88:f9:f5:17:6b:80:71:
e1:59:bd:80:b3:71:9e:8d:9f:c0:ff:45:85:c1:1c:
ca:fc:84:97:5d:a7:f6:85:d5:66:b3:0f:ea:33:22:
1b:45:ad:0f:ac:9c:eb:e4:7c:1c:5a:ba:52:fe:9f:
c6:d4:ab:01:a8:b2:9d:30:00:1a:07:b7:af:32:7c:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:97:5B:D3:09:04:D2:D4:4D:FA:74:01:0F:E2:8A:12:E6:C4:A9
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:38:df:84:4f:f2:37:d4:59:9b:01:2a:fe:ef:4a:24:3a:
06:78:8d:52:6f:da:93:32:49:77:ce:82:89:e5:ff:f0:f7:a4:
06:49:3d:3e:23:9f:c1:65:8f:bd:a9:f5:c8:48:54:fa:19:5e:
14:2a:f1:d7:7a:d8:27:88:91:70:d6:5d:57:e6:9e:c0:2f:04:
20:e7:f4:ea:51:d9:36:ff:60:c5:8c:81:e6:24:08:e5:14:e1:
26:af:3b:e0:63:d7:da:d1:e7:39:7d:93:b8:a8:b4:6d:ea:7c:
88:8b:bc:3f:91:5b:f8:99:44:e1:0d:6a:ab:bf:24:dd:08:7f:
a1:77:4f:a9:6a:1e:65:23:f3:2b:74:e7:0e:a2:d8:e5:13:4d:
79:69:78:bc:b9:e8:46:cd:e4:b4:7f:e2:0d:2f:08:f5:e0:69:
75:96:de:bd:b2:3c:8e:75:6b:ac:4a:2a:7d:3a:09:07:8b:02:
c1:61:0b:92:83:5e:a6:bb:3c:c5:4a:a0:21:ab:54:f1:ef:c2:
7b:74:44:17:e8:25:21:a7:78:c0:4e:44:89:9d:35:ba:59:e2:
fe:58:58:73:be:53:42:89:c0:00:81:e2:a6:20:27:9b:89:f0:
5b:ca:41:25:73:32:ba:b2:8b:75:43:5a:eb:92:db:4f:91:9b:
41:10:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:14 2026 by rpki-client