Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: eaMZw4qUtHzi/zKcB0LIfLKNoXq9kkbLNITeaRgORXY=
Subject key identifier: FE:90:91:2A:9D:7B:89:FA:3E:BF:30:F7:7C:3E:E5:EB:3E:0E:4D:41
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01A0D803EAC6E0C98E4BA67831050C5CF861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 19EE
Signing time: Fri 25 Sep 2026 10:02:10 +0000
Manifest this update: Fri 25 Sep 2026 10:02:10 +0000
Manifest next update: Sat 26 Sep 2026 10:02:10 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: tgenK3D2rIGk/rNC6m6syMz8NU0P9m2HvgjbqKEuwIA=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:03:ea:c6:e0:c9:8e:4b:a6:78:31:05:0c:5c:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Sep 25 10:02:10 2026 GMT
Not After : Sep 26 10:02:10 2026 GMT
Subject: CN=fe90912a9d7b89fa3ebf30f77c3ee5eb3e0e4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:aa:f0:74:4b:ab:34:7f:dd:93:c3:31:18:
44:9b:98:3f:57:95:75:99:88:d9:d9:24:48:69:84:
5a:89:2f:68:1d:3a:7d:43:ac:9f:91:a7:4e:7e:2b:
25:52:7e:ad:e6:26:cf:c3:cb:4f:d5:e6:e3:5e:4f:
8c:dd:7a:61:41:68:9e:44:20:31:62:35:7b:7d:31:
20:24:7e:43:8d:6e:ec:2d:60:fe:e6:f1:d4:a8:c7:
c2:20:37:16:ff:9c:88:f5:d6:a6:ab:26:42:c2:be:
fc:e2:54:47:2f:cf:00:be:e2:71:35:b5:66:a7:e5:
85:58:fe:02:ee:d1:01:5a:d4:5f:2b:8a:fa:78:81:
e9:eb:7c:b5:2d:e9:b4:d0:08:e3:87:8a:cf:64:47:
8b:3a:8e:5c:28:d8:22:b9:a1:2a:94:1f:70:51:0c:
49:f9:7d:4d:05:9b:4b:0b:7e:90:eb:71:ad:33:f9:
98:c9:d6:ad:09:62:e3:84:6c:7b:db:d0:ff:9c:0e:
47:d9:11:a4:75:7f:bc:02:81:fd:3e:5c:02:b2:04:
a9:87:7a:5b:8a:6b:11:95:f5:b9:85:62:3c:13:b1:
c9:e7:f1:23:67:c1:6b:be:cd:28:ac:87:ac:53:e8:
91:d4:c8:b9:88:77:74:74:88:f8:40:7a:b4:5d:25:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:91:2A:9D:7B:89:FA:3E:BF:30:F7:7C:3E:E5:EB:3E:0E:4D:41
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0b:d2:65:04:e7:47:3b:63:d2:8f:3f:81:aa:b1:44:b0:65:
b2:a7:ef:98:dc:32:a7:ec:0b:21:6c:28:78:af:66:88:a5:d6:
90:9d:e8:09:e3:26:10:93:f6:9c:42:37:4a:3d:df:92:e0:c3:
c0:17:15:56:4d:6e:a7:3a:b2:86:5e:b1:3b:29:81:b4:b1:3a:
12:c0:f6:b8:2e:12:2f:09:8e:d7:d9:22:ad:bf:f4:53:af:e5:
a4:6c:cc:93:0d:b4:d7:f7:6d:27:5f:9b:14:4f:bb:2f:19:86:
ed:18:c6:76:6a:c6:30:6f:5d:f1:fd:43:e3:b7:26:8c:af:06:
fb:77:f0:76:00:de:f9:e7:e7:82:85:06:3c:6b:15:1f:1b:ab:
7f:9f:7f:6a:46:66:71:d0:9e:c8:a8:44:a4:de:ee:4d:e9:81:
56:58:81:a5:c5:c1:f4:ce:0d:d7:d6:56:68:42:d1:b9:4c:c4:
f1:8f:69:88:d4:e9:85:6f:25:d0:9d:ae:c6:af:9a:19:26:26:
39:13:a2:a6:b7:3b:40:e2:f7:5c:19:cd:06:83:c0:97:cb:7b:
0e:43:67:3d:06:21:a3:90:9e:49:2b:cc:13:a6:5e:29:13:29:
02:b7:d3:99:2b:af:7f:d8:80:c8:37:1a:a0:25:71:30:e1:b0:
86:60:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:14:38 2026 by rpki-client