Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: 2bvKj016swLZesvNKid7UeTTrkQtXUALzHiD/gDSVI8=
Subject key identifier: 60:72:54:A5:69:B7:25:DB:B1:91:94:9B:D6:9D:5C:6D:6F:A1:DF:D6
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 01A0C39FE62BC7CA809EA0EFBA09C0C2D0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 11:00:31 +0000
Manifest this update: Mon 21 Sep 2026 11:00:31 +0000
Manifest next update: Tue 22 Sep 2026 11:00:31 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: 0ypwNNqu+Lb0fV3lYWx/ISoGdDikkwugUT2Q5mtCctc=)
2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:e6:2b:c7:ca:80:9e:a0:ef:ba:09:c0:c2:d0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Sep 21 11:00:31 2026 GMT
Not After : Sep 22 11:00:31 2026 GMT
Subject: CN=607254a569b725dbb191949bd69d5c6d6fa1dfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:76:99:aa:98:97:f2:2a:da:0a:a9:4f:8b:
37:60:af:95:c1:b2:9b:11:9c:7a:04:ee:8b:90:9f:
a7:2f:b7:d0:77:0c:da:4f:c3:76:81:a5:ac:3f:33:
bc:52:f9:1a:ff:be:12:03:e7:6d:90:43:13:5e:16:
82:bb:7e:34:6d:0f:87:63:3c:38:40:3d:cb:68:d9:
87:d9:eb:24:8b:0b:c2:ad:a3:c0:ce:fe:33:15:0a:
ce:04:91:0e:d2:96:31:49:d9:8a:d1:7c:33:4f:bb:
59:f5:bd:b4:c0:5b:17:b6:9e:3d:b0:be:21:82:34:
4d:95:36:c2:8b:f7:e3:95:e7:5a:e8:ae:a2:48:30:
c1:fe:28:74:ad:d4:56:58:35:ec:9c:8c:ea:9a:8e:
cb:67:57:04:b2:63:f4:22:c3:ed:bf:fc:98:d3:60:
38:f0:f0:84:ff:43:f2:0b:9d:5c:0f:21:ff:f1:75:
41:68:1b:4f:4d:35:6b:eb:45:f6:a1:72:14:d7:5b:
6a:27:73:d3:2e:ff:6c:b6:8d:30:ea:ca:67:f9:68:
f5:8f:42:ab:13:41:60:71:5e:52:80:8c:9e:bf:86:
19:cf:23:b0:ec:fa:6f:a0:40:5e:ed:9f:f7:97:74:
22:13:b7:1c:15:4f:10:07:2c:54:ed:a1:51:67:c8:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:54:A5:69:B7:25:DB:B1:91:94:9B:D6:9D:5C:6D:6F:A1:DF:D6
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4d:24:33:28:2d:98:a3:6e:2a:0a:c8:a3:a0:5c:9c:00:0a:
53:d4:58:fa:b8:fc:23:3b:8d:2c:17:db:19:0f:f4:62:c4:a3:
79:73:e0:db:d8:a4:68:b3:2c:69:9f:42:6d:7e:cc:cc:e9:a6:
2d:01:7f:d8:d1:d5:63:a4:74:b8:9e:dd:f6:9f:95:87:70:42:
29:a4:c8:c4:5e:81:19:7c:76:fb:8e:b2:ef:e8:e9:09:e7:cd:
04:f2:08:5b:34:25:d7:16:c4:e4:7c:db:9e:3d:a4:e6:72:e7:
1b:08:82:d2:f0:ba:52:e0:69:87:6a:7a:78:30:07:ac:e6:d2:
ea:5d:e9:ea:b7:ee:69:02:1c:be:56:8c:cd:b9:3e:0d:36:d7:
9b:8a:9e:4f:b7:1d:83:ad:f3:13:1b:07:9c:b1:36:f1:05:68:
1c:95:14:43:70:17:de:9b:88:6a:45:c5:33:a4:f1:91:b8:56:
dd:70:a8:72:12:77:8e:63:7d:f4:c5:c6:48:44:e2:e4:fc:79:
b1:93:4a:c6:38:a2:92:97:cc:33:46:d8:ee:29:6a:f2:95:28:
ac:4d:58:ba:b8:c5:93:21:d8:d4:e0:6a:f9:7c:bf:4e:0c:c4:
7d:2c:75:ad:e8:e3:70:1f:ce:b9:1b:2c:70:7f:74:9d:21:e3:
40:ca:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:36:44 2026 by rpki-client