Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: 5mH0uz4t1qYZD5bsTwnm6uKnDPxYl2z3rOrkY1Fv768=
Subject key identifier: 6A:CA:22:8E:51:3D:35:A0:9C:65:37:F6:2F:16:07:51:3B:78:89:D5
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019FA93DABCA149C3FC9E2277AE79084339C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0ABC
Signing time: Tue 28 Jul 2026 15:00:18 +0000
Manifest this update: Tue 28 Jul 2026 15:00:18 +0000
Manifest next update: Wed 29 Jul 2026 15:00:18 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: LomkcIQtDjeoKLJk3uu5nxmHwm3MDnqNxMrHfYvNgdY=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ab:ca:14:9c:3f:c9:e2:27:7a:e7:90:84:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Jul 28 15:00:18 2026 GMT
Not After : Jul 29 15:00:18 2026 GMT
Subject: CN=6aca228e513d35a09c6537f62f1607513b7889d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:86:b9:f3:80:ea:a6:14:20:3b:f2:f6:36:25:
bc:2c:e1:f5:b1:43:6e:8f:83:75:53:31:a5:1c:d8:
5d:e1:20:92:cc:7c:76:e0:b4:48:1f:ac:ec:5b:2a:
62:d2:c2:9a:ff:35:61:25:e8:b8:f8:c7:2d:7a:8e:
13:bb:1b:24:56:b2:eb:1f:76:92:7b:7a:b0:1d:3e:
37:1b:c2:9c:1b:31:c2:da:2a:27:56:c6:4f:5b:25:
de:b7:5c:4c:06:6a:9d:40:6f:84:5f:45:05:e7:87:
9e:e5:78:8f:4c:af:f1:07:6e:28:dc:90:d3:d0:08:
32:4d:4d:d4:c4:1c:2d:d5:8d:e6:a5:18:94:82:09:
31:bb:6b:38:97:32:0a:06:d7:fd:81:44:39:7d:97:
85:11:9a:d3:33:6d:34:6b:48:79:c0:5d:b4:14:42:
6b:ac:be:94:e2:57:0a:cb:f2:f5:bc:58:89:e8:5c:
d0:c4:9c:6a:db:7e:50:10:85:69:bd:7f:df:e5:96:
e2:fe:c9:8c:6e:b3:55:1a:cd:e7:39:0c:89:f7:91:
a6:98:9c:b9:99:2b:ca:c3:08:08:12:01:c2:55:38:
de:a3:f4:1d:89:7d:3c:78:78:89:31:f4:5f:a1:ee:
b7:b7:f6:38:80:0f:ef:b2:bb:78:a9:40:df:13:90:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CA:22:8E:51:3D:35:A0:9C:65:37:F6:2F:16:07:51:3B:78:89:D5
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:76:9b:7e:99:c4:66:7e:a2:9e:da:f2:88:af:2b:72:55:c4:
ab:dc:22:8b:44:b0:22:df:2c:59:96:81:ea:42:86:77:5e:a2:
2b:d7:17:d1:5d:5d:c4:09:21:6b:41:4c:48:46:c7:4f:93:23:
fd:e0:6e:c8:9d:85:43:64:26:0e:6d:aa:4c:b1:09:4e:d6:c7:
cd:2b:63:88:d4:1d:2b:e1:cf:40:4d:e5:7c:0c:9c:fb:8e:94:
dd:9d:4d:e1:bc:96:e8:8a:c9:e6:19:88:d9:d3:73:a7:45:7e:
9f:22:39:6c:5f:9a:b2:d7:68:65:5a:fa:a3:7d:c7:48:40:5d:
e4:11:91:26:dc:89:70:ea:5e:7f:63:be:5f:e2:fc:0c:86:72:
81:21:e3:06:fc:a1:ae:6d:d0:e2:f1:07:22:64:0a:05:63:fa:
f8:de:b6:c2:05:dd:9d:f5:e5:93:cf:10:3a:c7:c4:c1:03:09:
be:d9:02:a6:3f:b5:8d:35:8d:05:8f:3f:99:85:f9:d6:43:d3:
b1:72:dc:a9:ca:50:4b:ea:db:bc:a7:f1:56:fe:c6:05:8e:c6:
e9:b6:28:3e:26:4c:78:8e:5d:2d:8d:e2:5b:ff:79:ca:79:a8:
fe:f3:7b:f6:a0:d5:6d:9e:9f:92:db:e7:e7:6b:82:49:87:01:
75:18:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:34 2026 by rpki-client