Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
File: a1WP5oiolIXilt8dMYgHe1peVSU.mft (raw, json)
Hash identifier: L7r7faPaUnzSX60DEeuCwbjnKo+lnhkp5dwptte7fPI=
Subject key identifier: FF:FE:9D:FF:88:9B:99:94:E1:CB:81:B1:11:0B:E4:26:49:D6:A1:3B
Authority key identifier: 6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25
Certificate issuer: /CN=6b558fe688a89485e296df1d3188077b5a5e5525
Certificate serial: 01A0BFF9C81821D75C1B4238E5812EFE631E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
Manifest number: 0113
Signing time: Sun 20 Sep 2026 18:00:12 +0000
Manifest this update: Sun 20 Sep 2026 18:00:12 +0000
Manifest next update: Mon 21 Sep 2026 18:00:12 +0000
Files and hashes: 1: DGaX8VzqMOO9YjuJBud1E9JS0yI.asa (hash: 9uriduubYgUt2AMHTcFPln9N/Vkk50cWUi1XIU74peg=)
2: a1WP5oiolIXilt8dMYgHe1peVSU.crl (hash: 7J7B2bBkmbNpljKS4fnfcf9ZvJX0K4msLMdh6Ku4s28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:f9:c8:18:21:d7:5c:1b:42:38:e5:81:2e:fe:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b558fe688a89485e296df1d3188077b5a5e5525
Validity
Not Before: Sep 20 18:00:12 2026 GMT
Not After : Sep 21 18:00:12 2026 GMT
Subject: CN=fffe9dff889b9994e1cb81b1110be42649d6a13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:11:cd:ef:bc:55:9c:99:53:9f:d2:10:9b:
39:58:c2:6b:32:79:89:dd:60:bf:cd:cf:58:ce:3e:
aa:d7:3b:16:a1:9c:b4:25:b3:aa:76:73:e5:83:93:
c6:8f:2d:f9:84:56:19:f5:3d:6d:b0:db:d3:66:e0:
5d:76:3c:75:52:22:e0:1b:80:1b:f2:53:cb:f9:c5:
ff:c5:c7:8a:14:5d:33:7f:0a:af:3e:55:12:49:24:
9c:a6:26:15:d0:47:0e:0b:0b:58:82:c5:0d:6a:22:
df:6f:b5:20:dc:2a:fb:6e:31:71:9c:12:48:84:07:
9c:58:af:62:ef:19:52:b6:8d:34:ee:d9:af:b3:54:
00:26:e1:24:8c:a6:e8:3e:6e:23:f8:30:da:c5:fd:
04:5d:ea:43:d9:72:a2:23:7e:d4:6b:4c:6e:17:ad:
64:0c:87:9a:5d:44:f3:ef:03:c5:5a:d4:df:e0:cc:
e9:3e:62:71:1c:aa:63:af:79:5c:34:dd:29:cc:fc:
53:19:62:c7:bc:a7:a0:18:40:93:e9:d1:37:13:30:
c3:9b:ef:e1:8b:4e:91:e8:e1:b8:ba:8b:b4:81:8b:
18:54:91:95:58:28:5f:48:54:ff:2f:ae:90:13:dc:
0a:50:bc:0f:bf:03:2d:62:50:c2:ea:87:74:25:bb:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:9D:FF:88:9B:99:94:E1:CB:81:B1:11:0B:E4:26:49:D6:A1:3B
X509v3 Authority Key Identifier:
keyid:6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:73:85:cb:65:69:f4:a6:ca:32:a2:96:f4:45:e9:d4:14:9a:
b9:bf:6d:2d:db:44:7e:82:2d:d3:e4:41:bc:29:24:66:34:68:
ec:fc:4e:4f:6f:5e:d8:da:9b:79:12:9a:1d:9a:3c:92:49:84:
21:e1:45:82:26:8d:7e:c9:99:ef:25:77:bb:b0:d6:b8:c9:9e:
f9:fc:fd:81:8e:fd:cb:fa:a1:94:c4:f3:c2:c0:02:76:2e:83:
8b:a8:16:5b:8c:09:a1:a0:7e:7e:80:b7:3a:bb:86:d8:ae:a8:
c9:43:2d:5a:cb:da:a0:6e:c3:06:1f:db:e0:2d:70:d5:88:11:
4c:b0:2c:59:20:c0:88:c4:a5:b4:1b:07:b7:a1:56:cf:37:74:
41:89:f2:3e:69:dd:c9:39:27:01:0b:10:df:6f:f0:78:4a:f2:
63:3a:24:c2:df:71:ae:f3:26:bd:6e:a3:b1:da:80:70:fb:e8:
18:51:0c:53:04:94:b0:9b:8e:01:3a:8d:d5:a8:04:85:82:b4:
d4:6b:13:1f:89:17:e1:a8:68:36:5f:73:91:ce:cf:16:b3:37:
7d:a3:db:21:ad:86:49:b7:c4:85:5a:45:ce:36:86:4c:46:89:
b5:5c:c5:4c:1a:e1:fa:c8:7b:91:c8:25:ec:2c:ef:1d:21:64:
c1:e6:a9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:35:35 2026 by rpki-client