Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: PxS/90lL9UqE0tea5Fto9xrQEul+nuQy2KeIjjzmajQ=
Subject key identifier: 8A:A1:85:07:9C:54:E4:18:22:E4:44:59:D4:D2:60:77:68:3B:B2:57
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 01A1322202BFF06F8BE326F28DA53E7A9E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 1140
Signing time: Mon 12 Oct 2026 22:00:52 +0000
Manifest this update: Mon 12 Oct 2026 22:00:52 +0000
Manifest next update: Tue 13 Oct 2026 22:00:52 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: P2B7Wpc2IKQC8MYac4kcFzU50XQzK1TgntJpZlV0N+o=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:02:bf:f0:6f:8b:e3:26:f2:8d:a5:3e:7a:9e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Oct 12 22:00:52 2026 GMT
Not After : Oct 13 22:00:52 2026 GMT
Subject: CN=8aa185079c54e41822e44459d4d26077683bb257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:b9:54:33:e4:dc:0a:8b:2c:e3:0d:67:a6:
b5:3e:d2:9f:fe:79:9e:a2:67:1e:b7:1e:8d:d9:1c:
ce:89:d7:6c:36:6c:18:f3:bb:de:e8:aa:a2:4c:fc:
0e:3d:aa:29:21:d2:c9:7f:4f:e5:dd:6c:35:9d:5e:
be:95:1f:88:33:1c:de:4f:09:eb:bf:83:b6:87:6a:
51:84:70:56:61:97:d0:1a:83:a1:ea:95:a8:2a:07:
d5:b6:00:7a:97:5e:0f:e1:80:14:6b:63:1d:36:5a:
19:0b:3f:a4:58:c9:05:3f:22:67:fc:15:1c:37:37:
87:74:81:6e:b4:01:92:b9:3b:47:dc:94:36:f3:bf:
0a:42:3e:d7:12:cc:93:71:6b:eb:91:03:9c:ed:46:
e7:86:ac:06:16:7c:9a:a2:ab:b7:5a:12:e5:58:07:
42:b4:a5:5d:f6:31:27:87:47:6a:30:0c:0e:b5:fe:
f2:c7:17:7e:8f:7b:46:88:95:9b:75:04:c3:98:80:
05:9a:97:05:40:90:ed:30:27:3b:a5:a3:6f:de:ac:
d6:c1:b4:88:dc:a8:f7:5e:84:9c:a2:20:cb:a8:cf:
47:23:00:29:a0:c0:e3:e5:96:25:b9:1f:11:bf:76:
86:fd:9a:78:f6:cc:8c:ce:91:53:f0:96:5b:96:16:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A1:85:07:9C:54:E4:18:22:E4:44:59:D4:D2:60:77:68:3B:B2:57
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0a:e7:83:48:9d:b9:4a:85:33:63:6e:c4:7e:67:9f:3f:ae:
b3:d7:76:7e:bc:18:c3:07:6c:6f:4d:74:bc:0e:65:e1:dc:a1:
87:ef:03:04:c9:63:7b:79:d1:2b:ff:39:02:a9:c9:d5:20:5c:
66:e5:de:a2:bd:c8:24:0a:31:a8:81:1b:40:03:e0:66:65:cd:
7c:41:8f:97:c0:bf:e6:32:81:d7:69:ed:8c:05:1f:08:60:be:
1b:11:90:57:5c:50:06:3b:69:06:9f:0a:18:5f:cb:ff:49:5a:
f3:64:c0:b7:38:fc:4e:66:0e:6b:53:5b:ee:8d:ff:d0:e7:ce:
42:02:d9:fe:f8:2f:d8:03:8c:98:fe:b3:ff:45:48:3e:de:3d:
2f:01:fb:e0:5c:a5:1f:d5:f8:34:cc:24:7c:8a:8b:69:e3:98:
6f:cf:bf:63:1e:e4:e1:f5:ec:53:d6:b1:50:e0:fd:30:32:6c:
1e:d3:2c:38:95:55:ff:d9:4e:6e:62:e5:e6:f5:46:d0:6f:b3:
74:62:b2:86:43:b8:bc:44:67:a6:3f:5e:31:89:53:16:5d:4e:
1d:9d:94:45:88:8c:ff:54:58:9f:b1:e9:88:0f:10:c4:a5:46:
d4:ae:4f:4c:83:a5:ce:ed:fc:51:09:91:13:0c:09:a5:14:8f:
44:4b:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:26:41 2026 by rpki-client