Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
File: 1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft (raw, json)
Hash identifier: fBxCr5NvQt62swAAAPoIQrTLJ+p8qZsW3aGAscig+0Q=
Subject key identifier: CE:F4:85:B2:DF:D6:96:E7:97:71:CC:E6:CE:82:2E:17:A0:F5:20:6F
Authority key identifier: FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
Certificate issuer: /CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Certificate serial: 01A0BD9E37EC856535F108D8826B9D1E62DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
Manifest number: 22
Signing time: Sun 20 Sep 2026 07:00:57 +0000
Manifest this update: Sun 20 Sep 2026 07:00:57 +0000
Manifest next update: Mon 21 Sep 2026 07:00:57 +0000
Files and hashes: 1: 1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl (hash: PG8OarqpGb2oFWaXC+KW88FXQEFxBm139DOZGUw5Nc0=)
2: LfFY-y2jvNU8kYFjD0nlFPXKBiA.roa (hash: pJEejMELgRZzTR5qG+pm3zJ5qBtdFIGoJaTA8yWCAB0=)
3: _xRdrXLgg9HzjLBx638_kVTC498.asa (hash: kUHA8HVU45dfjDjf28Y902sYCrYVEPwQe+17B3n7R6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:37:ec:85:65:35:f1:08:d8:82:6b:9d:1e:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Validity
Not Before: Sep 20 07:00:57 2026 GMT
Not After : Sep 21 07:00:57 2026 GMT
Subject: CN=cef485b2dfd696e79771cce6ce822e17a0f5206f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:b6:3e:88:72:17:d2:63:0b:1f:f7:6b:0c:
31:b4:15:fc:a1:e4:c9:44:3f:59:e6:8d:84:ef:bb:
81:c0:93:8c:87:b2:e5:57:6e:3f:26:d5:c9:09:e2:
65:fd:9c:17:fd:b4:c4:57:24:fc:10:4a:95:84:76:
b2:96:35:69:44:0a:55:1d:a4:fb:02:6f:0b:3a:d6:
1e:00:48:ae:cf:64:c4:c7:7f:ed:ef:1a:5a:6e:8c:
35:db:49:5f:09:b3:c8:3a:e1:b3:ae:e0:70:f3:d8:
28:3d:2f:55:0c:9a:26:0b:d7:8f:a0:7f:44:12:47:
6b:a9:d2:70:76:ed:55:ff:f4:38:d5:1d:f8:3e:15:
31:74:a1:d4:cf:f2:36:a9:28:4e:c5:45:07:fd:63:
35:96:ee:64:8a:44:c6:24:11:c6:f4:6d:1a:24:c7:
ec:fc:5b:33:16:24:43:f2:ca:3d:a2:58:47:1c:b4:
f8:ac:be:b3:11:0d:ad:a3:b2:5f:81:fe:ba:cb:26:
22:a4:a3:f9:38:b8:dc:c0:3a:51:89:f0:58:d9:58:
01:30:61:c9:2c:aa:ca:c4:c9:d7:dd:85:61:02:9b:
61:1d:f2:9d:a2:9a:9f:1d:74:46:06:be:97:4d:de:
ad:e7:15:bc:8f:21:7c:80:41:79:53:3b:69:4a:f1:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:85:B2:DF:D6:96:E7:97:71:CC:E6:CE:82:2E:17:A0:F5:20:6F
X509v3 Authority Key Identifier:
keyid:FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:51:48:9a:84:9d:b7:df:bd:c5:05:f1:b6:73:3b:dc:96:a7:
dc:09:0e:dc:b1:76:b0:77:23:f5:37:b5:bd:13:dc:d7:34:ce:
15:21:43:2b:37:dd:da:e6:98:c6:ec:5f:61:eb:f6:a1:fe:38:
e6:c8:3c:bc:93:39:05:1c:33:9a:fc:03:54:5f:6e:e1:d1:38:
09:34:4b:82:82:1e:80:9d:f4:2b:43:95:f5:d2:48:97:76:be:
a6:86:ab:2b:18:ca:6f:63:05:ed:ee:2d:2f:ef:f0:8f:02:0b:
cc:b2:b1:3b:63:d6:e7:09:75:8d:52:63:97:64:bf:44:ff:8a:
ba:4e:a4:99:5b:fa:0a:47:57:18:ab:9f:b6:67:d0:7d:1b:5a:
18:5c:95:39:f3:e1:85:6b:a3:e4:c3:31:6f:49:1c:23:d7:40:
d0:6f:35:47:6c:ff:12:8a:45:be:ec:59:0b:86:ec:f2:d9:2b:
5a:14:b6:00:c4:7a:83:ad:15:3c:89:0d:53:16:b8:4b:ac:c9:
b1:7e:9f:5a:55:c9:d8:96:23:99:62:1a:58:ad:5c:5c:6c:85:
35:5f:d6:bb:07:10:13:76:10:a7:be:5c:cc:2b:75:d6:e7:2d:
06:d2:66:93:62:b2:2f:6e:eb:3e:20:f1:60:9c:58:65:66:b5:
c9:da:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:56 2026 by rpki-client