Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: 7hQAUBgSO7nzgszkHELCxEl2pj+a3fBn1eCet4IX55k=
Subject key identifier: 82:A0:6C:4F:A1:B8:2E:27:52:87:B5:5E:0C:7A:3E:4C:C2:59:34:52
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 01A12CC520B71587A0F615345764AA4A621A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 08E4
Signing time: Sun 11 Oct 2026 21:01:18 +0000
Manifest this update: Sun 11 Oct 2026 21:01:18 +0000
Manifest next update: Mon 12 Oct 2026 21:01:18 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: QzDpuVS/AbCM9JyTsgNziAD0P6WzBBwckZRsWqJWy24=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:20:b7:15:87:a0:f6:15:34:57:64:aa:4a:62:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Oct 11 21:01:18 2026 GMT
Not After : Oct 12 21:01:18 2026 GMT
Subject: CN=82a06c4fa1b82e275287b55e0c7a3e4cc2593452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:36:d7:59:13:1d:13:57:05:b3:f2:8d:fa:
10:15:92:bd:62:bb:fe:32:32:99:2d:33:8b:d3:fd:
3e:a9:38:a8:ec:06:d1:34:cf:9a:16:20:e7:c5:24:
b3:2b:64:50:91:b1:27:10:cd:fd:86:ce:9a:0b:90:
28:0b:fd:95:b0:3d:6e:51:2b:0b:2e:08:c0:e8:79:
0d:52:ec:82:ad:48:ce:b5:83:e8:25:18:51:93:a4:
76:40:dc:01:dc:dd:bc:82:8a:7d:26:87:f4:f7:5a:
bf:a8:9f:a2:89:20:26:3e:07:37:1c:7f:b7:5c:8e:
63:38:ac:29:1a:c9:46:89:6a:bf:3c:c4:66:a8:10:
ae:38:93:d5:c9:97:23:b2:3f:33:92:7d:1b:dd:62:
ae:4e:43:73:e2:1f:9a:56:01:22:31:c5:4f:7f:26:
9d:48:5e:71:f2:8b:19:62:4c:15:1c:bd:c2:62:51:
c7:53:45:8f:73:0a:73:2e:86:f4:1e:b1:6a:32:6a:
c5:9b:e4:99:8c:e5:a3:8a:2a:d2:42:dd:70:e0:88:
4a:6d:2b:05:ec:ca:c1:13:08:63:d8:39:34:ad:7f:
4d:85:fb:97:5e:c8:9b:d2:f9:2a:68:7f:39:3f:95:
08:cb:d2:54:b1:3f:f1:00:4a:01:dc:da:5d:1b:26:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A0:6C:4F:A1:B8:2E:27:52:87:B5:5E:0C:7A:3E:4C:C2:59:34:52
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:65:f8:95:46:92:22:e4:20:9c:43:d0:80:f7:98:4f:f2:
ca:85:8f:ad:5e:16:5f:5c:cb:a2:31:ca:06:71:77:e8:db:f7:
bc:7f:1d:25:c0:5a:8b:ec:5f:6d:f7:24:be:55:94:df:70:c5:
e9:a0:5c:5e:df:fd:5c:b4:40:d6:68:ca:f8:f1:74:b1:cb:e8:
d8:22:35:6a:ff:62:50:f6:57:68:4f:8e:4d:81:2e:cc:9f:bf:
88:46:3a:a0:39:f3:28:b2:31:d7:32:62:57:4e:10:9f:a6:bc:
f0:9a:6e:0a:47:30:f8:a3:0a:49:fc:79:e5:51:90:a5:9c:4d:
a9:4a:f2:87:da:f9:ee:8c:fd:1e:7c:33:5f:7f:77:77:7e:9b:
ea:51:60:e4:9b:ab:d9:bd:c8:16:d6:16:c0:65:58:c2:d7:fa:
7d:56:23:bb:e5:c0:af:34:d0:42:f8:38:2a:df:59:89:d4:ca:
e5:9e:b4:5c:27:4b:e2:99:f6:99:5d:7b:75:e8:fb:a9:ef:a4:
fe:5a:ba:4a:fd:ff:b7:d5:da:27:1f:e9:72:ac:9d:8a:2e:38:
7c:2e:b6:87:0d:b9:38:f9:66:21:cf:da:2c:29:66:32:9f:c8:
14:b2:fc:8d:dd:ac:5c:ac:31:7c:30:47:f1:27:42:5b:bc:fb:
46:21:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:13:46 2026 by rpki-client