Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: i4B5n9gz6bm4FaZGt38turWmaluSxSiDoIct8V3vU64=
Subject key identifier: 35:24:56:B1:EC:D2:A4:35:8C:70:97:85:0C:A1:4C:E5:B1:60:BE:69
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01A0C6D813408023B2C2C8A4BF5EA4FDD0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0CB5
Signing time: Tue 22 Sep 2026 02:00:44 +0000
Manifest this update: Tue 22 Sep 2026 02:00:44 +0000
Manifest next update: Wed 23 Sep 2026 02:00:44 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: YYL0uPA9rZB4vyM02yP+zsqNfZe4mADytJxYwB4z/RE=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:13:40:80:23:b2:c2:c8:a4:bf:5e:a4:fd:d0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Sep 22 02:00:44 2026 GMT
Not After : Sep 23 02:00:44 2026 GMT
Subject: CN=352456b1ecd2a4358c7097850ca14ce5b160be69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:d3:71:5e:c7:c5:d9:ca:ee:18:d6:30:e6:
d3:73:2f:d2:19:22:94:d0:68:f1:f3:d2:36:f7:0b:
be:81:d3:a3:b0:ac:48:9e:b0:4e:7e:ae:64:25:df:
ad:2f:66:7c:af:50:1c:3c:10:4d:fd:fe:22:46:2b:
4f:65:48:90:c3:0b:5a:52:18:92:8a:33:c1:57:bd:
7b:16:e5:bb:c9:71:ee:ab:58:54:6e:32:57:90:3b:
9c:f2:f5:4d:5e:60:aa:aa:9c:61:a6:91:b6:ae:59:
b4:e0:c2:7e:43:d7:c1:03:dd:f6:70:95:15:32:5c:
c6:85:df:d6:40:13:ef:b1:e7:e3:90:89:ab:a7:32:
a2:1e:99:a4:eb:c3:d3:37:35:6f:8c:d7:e5:77:02:
a5:13:ce:10:e2:49:6d:6a:7e:a9:a8:ff:4c:c2:20:
45:8f:ae:38:dd:f4:1f:fc:a8:40:cd:e9:68:19:c8:
44:7d:05:ff:21:f3:b0:aa:1b:2b:53:5e:ff:08:27:
4b:5e:42:eb:9b:7a:88:a9:ab:74:89:b0:20:ee:98:
b7:9b:ad:b0:12:8a:d3:23:f6:a7:ce:58:9e:11:98:
32:ed:b9:b7:13:56:77:24:67:9c:2b:f6:c8:f2:8d:
b6:c7:8f:4a:46:c9:c4:9b:23:60:f2:7f:37:73:3d:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:56:B1:EC:D2:A4:35:8C:70:97:85:0C:A1:4C:E5:B1:60:BE:69
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:76:68:84:b6:21:3a:c9:75:c2:03:87:f3:f2:97:94:aa:ca:
73:7d:c1:a4:2b:ad:ab:99:75:57:c1:d9:c1:74:16:b7:c4:0b:
28:6e:f6:8f:3a:7c:fa:c0:29:59:82:df:61:ce:98:ea:e6:19:
be:d8:d4:12:ed:e7:11:9c:63:ae:02:7b:ea:70:5c:99:31:60:
c1:e5:2e:9f:d9:56:48:9d:3f:f4:c2:0c:2f:d7:42:91:5c:86:
cf:72:de:19:74:45:ec:cc:98:03:e9:38:ef:09:90:6a:12:4d:
0e:90:60:e2:6c:47:4c:fb:70:9b:06:a7:e8:5c:11:e7:63:de:
d3:40:07:6e:1f:66:49:c5:66:c3:c0:a1:5f:66:88:57:12:60:
ab:ab:0a:b8:6d:9f:97:fc:a6:a3:7d:9a:90:d1:38:16:79:9e:
c8:e4:6d:6a:c2:7b:65:fd:a8:31:a9:b1:6a:5a:d4:96:3b:e3:
e1:75:2a:c5:67:6f:86:30:eb:f1:fb:0a:18:73:78:54:3e:39:
98:07:42:a9:65:c6:a2:b6:bb:7f:4d:11:25:e7:87:e6:49:3d:
86:30:58:15:fb:4f:7a:48:5b:39:47:b6:5a:bc:73:57:dc:19:
77:73:17:5f:94:a5:ee:19:17:75:88:2c:12:7e:90:d3:84:ae:
39:d0:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:47:17 2026 by rpki-client