Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: 83wrMpfU5nMGMaW2boaTowTiIs5wHdvjdQsXUjHvb/g=
Subject key identifier: 93:7C:84:E8:16:0F:DB:41:B4:BA:D7:7F:A9:06:3D:F4:89:6F:25:F3
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 01A0C5577907FC96D57D22101FB5F9C03F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 19:00:39 +0000
Manifest this update: Mon 21 Sep 2026 19:00:39 +0000
Manifest next update: Tue 22 Sep 2026 19:00:39 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: WD/y9sR1k0QEQAjfJ45G0QcRgpiDAyHFhNlrg+c6Ql0=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:79:07:fc:96:d5:7d:22:10:1f:b5:f9:c0:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Sep 21 19:00:39 2026 GMT
Not After : Sep 22 19:00:39 2026 GMT
Subject: CN=937c84e8160fdb41b4bad77fa9063df4896f25f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:b9:db:2d:f3:07:a5:ed:98:11:5f:b0:6c:
6d:b8:6f:95:9f:d5:72:c7:2f:05:c8:d8:2a:46:ba:
56:10:84:4b:bb:57:83:23:b3:b6:4a:e8:f0:75:a5:
6a:67:c4:17:a2:05:b3:0d:1e:bd:17:e5:f3:f7:78:
6c:ea:a6:c6:4e:76:e4:e3:7a:8f:dc:96:a3:42:58:
0e:26:f6:08:a4:58:d4:2a:f3:9c:6e:8e:4f:b2:b6:
85:87:15:19:e5:56:aa:5e:ae:12:d9:56:54:4d:cc:
0b:fe:d5:23:94:9d:d8:94:72:da:08:05:e1:73:d5:
0a:04:c7:56:ae:aa:6d:ae:d7:ff:3e:12:eb:45:4b:
58:b7:d8:05:5d:48:24:ab:15:3f:3b:8b:cc:6d:dc:
bb:5e:44:0e:f0:9f:5d:58:d8:c2:9f:86:df:08:32:
fe:e8:c3:cd:e1:95:66:e1:6f:9a:94:78:b7:65:3d:
3b:29:9a:f2:e8:2d:61:b7:e4:a5:c5:97:4c:ad:81:
e1:e4:12:61:d5:74:5f:70:48:90:f2:18:eb:5c:65:
fb:24:5b:ef:14:6d:b7:e3:26:f2:9f:79:d6:35:64:
1b:7c:a2:b4:74:8a:64:fb:29:5f:49:41:a1:35:c8:
37:0e:a0:39:be:18:56:9d:87:b6:35:18:29:96:72:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7C:84:E8:16:0F:DB:41:B4:BA:D7:7F:A9:06:3D:F4:89:6F:25:F3
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:0c:53:3d:11:fa:5d:a4:ef:b6:62:52:c1:3c:0c:d0:ea:
0b:71:4e:cf:05:6b:c3:a7:2a:da:59:e8:ad:47:f7:57:48:fb:
47:5d:39:a2:56:97:bd:7a:b5:d3:09:d5:24:7e:0f:ef:02:61:
16:fe:fd:25:18:51:4d:a3:d8:20:e3:80:e1:a6:ff:c1:c4:35:
ae:23:f0:02:72:94:08:0b:d6:d8:8d:ea:99:7c:cc:00:ee:4a:
21:2f:64:9e:5f:35:0f:b9:09:f8:31:d8:78:0e:85:e8:37:7b:
0e:5a:45:47:e5:9f:5e:d2:75:1c:96:31:41:b3:c3:89:e9:08:
df:82:82:c6:32:fb:9e:ae:27:a9:0d:13:5b:30:68:c8:3a:ac:
0f:25:e4:bb:5f:18:bf:28:75:e7:11:60:9b:ce:a0:c4:01:1f:
8d:08:96:6b:5b:47:0c:76:d3:8d:83:f1:6b:1f:95:19:ee:fb:
04:97:7a:3a:67:16:58:3b:f4:2e:1f:2f:6b:bf:81:f5:31:c5:
c7:a6:c0:a0:c6:97:30:94:b0:59:ba:2e:95:1e:61:00:f1:d7:
be:9c:41:c6:8b:75:5e:b5:2b:73:d0:81:ff:b4:53:18:d8:df:
ad:b1:24:06:59:bc:31:a8:6c:e3:a8:76:e2:11:6b:21:e3:9f:
b7:6d:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:55 2026 by rpki-client