Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: 9ovyePgmA0THCl+Rwlb9AqHFV5buFss9WnS4oezmL4o=
Subject key identifier: 43:09:AB:60:2C:2C:F9:D3:DD:89:20:C3:CF:AE:AA:6D:98:B9:B8:61
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01A0E73FB1A8A44CD77DB857E20F782095A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 09:01:46 +0000
Manifest this update: Mon 28 Sep 2026 09:01:46 +0000
Manifest next update: Tue 29 Sep 2026 09:01:46 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: PGjIRJTcCf/d/L9kGKVQKmTTIawtz8GdroP45wivxz8=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:b1:a8:a4:4c:d7:7d:b8:57:e2:0f:78:20:95:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Sep 28 09:01:46 2026 GMT
Not After : Sep 29 09:01:46 2026 GMT
Subject: CN=4309ab602c2cf9d3dd8920c3cfaeaa6d98b9b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:37:d9:7b:8f:bd:26:4f:02:8c:95:12:ae:
bc:13:dc:a0:41:4a:c4:b1:c2:ce:58:79:e5:32:7f:
32:a7:8d:e6:59:1b:38:8f:cf:17:cd:02:76:a4:75:
a2:bd:5a:54:d3:e2:75:d0:49:bd:96:61:04:79:f3:
4c:f8:cc:be:b6:0e:57:f8:ff:e7:3b:43:fd:ea:29:
d5:6a:36:8a:1c:63:38:19:ad:a5:d3:b9:c5:be:22:
9d:94:ba:c6:31:8f:75:fd:f3:14:d1:b2:8d:d7:59:
13:72:23:55:6b:4c:d4:a4:65:06:b3:6d:83:69:76:
10:5f:0f:8d:aa:7e:16:6e:fb:05:bf:40:65:44:24:
56:d5:03:71:ba:52:77:7b:3d:f3:3f:69:d2:fb:a6:
d6:c2:93:ba:66:ba:7d:22:b4:e6:be:5d:14:e5:97:
03:7f:3d:39:9a:ec:57:32:54:d1:08:21:5c:f5:c9:
58:06:8b:ae:f8:fb:14:6a:51:09:4c:66:2c:c5:06:
40:ce:7c:80:9a:78:4b:e3:3b:ca:66:64:a1:c9:50:
f1:11:51:a4:fc:44:2a:d6:33:75:84:d9:81:da:f6:
4e:bf:39:94:21:eb:90:d3:f9:55:28:7e:68:0c:c5:
59:d0:b7:17:3a:47:03:a3:64:9e:dd:3e:fa:72:ab:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:AB:60:2C:2C:F9:D3:DD:89:20:C3:CF:AE:AA:6D:98:B9:B8:61
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e4:3e:7b:72:e0:3e:e2:68:c8:09:78:fe:91:a7:5f:19:9e:
05:9e:cf:e5:d9:73:4f:fb:15:14:82:31:37:d5:44:93:65:69:
f5:b7:79:f8:5b:20:f2:19:82:cc:ac:a6:bf:45:54:da:d8:62:
d8:99:66:38:18:8d:02:d3:61:dd:f9:8a:8c:84:7a:fc:12:b1:
77:93:4b:6e:ef:9a:39:ad:14:41:48:ea:a6:1f:06:d5:5e:d6:
4d:82:8b:9e:ee:e3:31:c2:fe:eb:67:3f:d9:6d:63:c2:3e:88:
4b:21:86:1a:e6:96:7e:58:f3:43:53:29:be:a7:67:f0:d6:6e:
9a:51:43:6b:9a:69:8d:38:44:00:ac:b0:d2:cf:5b:bb:1c:52:
de:4c:9d:25:47:82:b8:bd:e3:c1:e4:86:15:1a:5c:5c:da:08:
c5:c2:c3:b4:ba:bc:d5:46:c2:42:75:74:23:2e:e2:b6:f4:a2:
9c:e7:22:e4:20:f0:b5:a9:17:7c:f1:14:63:0c:2d:8a:34:04:
96:a1:47:3c:a7:5e:a1:5b:0b:c5:e4:8c:78:22:99:2b:28:62:
2f:1d:a7:b0:7c:42:d4:eb:da:9a:aa:61:ff:b1:b7:40:92:bf:
69:eb:54:5f:8f:f4:ac:9d:c7:e0:71:2f:1e:29:d3:49:38:87:
14:2b:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:14:49 2026 by rpki-client