Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: t04uyYB2iGruQfkP38b3OigJVkX2IYra2ih0zm6yjaE=
Subject key identifier: 1F:68:C6:1E:23:46:BD:07:9E:3D:BF:BB:E1:24:D3:78:5E:48:B5:AB
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 01A0C40E30B79C73F6D13CA47B93927AFE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0ACB
Signing time: Mon 21 Sep 2026 13:00:59 +0000
Manifest this update: Mon 21 Sep 2026 13:00:59 +0000
Manifest next update: Tue 22 Sep 2026 13:00:59 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: Z1Gvh/uID8SQFvG1uxGmPFC+z2Ubmjy9AJPp3bZD5rw=)
2: zsQtQXRIMfmAATwnDwSYChB6X74.roa (hash: Usub4GZLrzPgjoxI/zygWmH+Aj3bFEudCK+rN9RJJeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:30:b7:9c:73:f6:d1:3c:a4:7b:93:92:7a:fe:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Sep 21 13:00:59 2026 GMT
Not After : Sep 22 13:00:59 2026 GMT
Subject: CN=1f68c61e2346bd079e3dbfbbe124d3785e48b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:a6:c0:b3:02:46:9d:65:e3:b7:68:7b:28:
08:41:2f:47:5e:87:49:29:56:07:f1:f8:92:6d:37:
48:b0:71:c1:a4:0e:e2:9a:b0:f5:a1:b5:0e:5c:09:
85:9f:bf:0a:c5:82:f5:85:77:b9:43:fa:b1:40:c2:
fe:a2:92:fb:7e:99:16:8c:0e:5b:b1:5c:80:cd:89:
22:6a:d5:84:ea:c5:23:d4:2f:69:6f:a0:16:3e:20:
d6:63:92:ea:db:40:c9:e1:b1:cd:c5:32:6a:44:c3:
de:ae:13:1e:7e:88:04:bb:0a:cf:ac:1c:9d:dc:62:
d1:c0:fe:64:91:00:0c:5a:bc:b9:c7:0c:49:e3:7a:
92:e4:a0:90:54:58:43:66:e1:d5:9d:33:f0:ef:1e:
9d:58:b6:28:41:df:7c:2e:de:15:19:ba:38:a3:df:
b0:bc:a6:72:10:83:f5:8f:c9:88:d1:06:d9:7b:66:
19:02:8e:67:9a:14:a4:5f:70:2d:2f:74:88:07:96:
8b:11:b8:e0:e9:25:e8:20:aa:36:ed:05:e1:c6:02:
f6:b0:6e:96:bd:98:84:73:fb:80:5f:ab:db:cc:86:
9e:36:9d:11:81:58:1f:5c:7c:a4:d4:d9:52:43:b2:
5e:da:10:74:df:7d:27:c5:0a:fc:9e:d6:63:30:c5:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:C6:1E:23:46:BD:07:9E:3D:BF:BB:E1:24:D3:78:5E:48:B5:AB
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8a:f1:e3:84:f9:f9:07:77:e3:d9:78:b6:1f:d9:74:8b:0a:
9f:dc:74:bf:9d:6a:71:5c:ef:79:21:7f:cb:05:cd:56:62:51:
21:ed:2f:8c:08:4b:4a:78:3a:54:c6:5e:42:56:80:f3:2c:34:
0b:f9:b5:0c:eb:8c:ba:f4:d1:3b:c9:ee:8d:61:6d:94:3b:ad:
83:d5:2a:17:27:06:77:b5:14:29:78:25:64:07:b5:b6:98:2b:
0d:ba:4c:2c:f4:57:45:4b:3f:fe:ed:ed:53:e1:1f:c8:12:7d:
ee:59:0b:f2:1f:64:29:f4:be:61:ed:63:da:41:43:6b:a9:8e:
a6:9c:8d:78:94:ee:45:22:aa:94:7e:81:4c:7f:79:bf:08:49:
4f:b4:11:e9:9b:1e:59:58:e3:1d:d6:14:97:b7:57:2b:1b:67:
d0:35:d2:79:d0:43:ce:0d:65:1e:9d:f3:ff:23:90:09:6c:a3:
3b:b9:bb:c8:c8:59:f9:2d:28:06:96:21:9f:2f:3d:65:5f:7b:
9e:53:d4:db:e6:7f:6d:a0:86:d2:7c:2f:6a:33:7d:f8:60:24:
24:90:0d:39:5b:44:4e:b4:8d:59:c9:9c:3b:d4:7f:b2:37:ef:
a9:4d:8f:c8:f9:df:10:52:d7:76:af:6d:8c:79:d4:a9:0d:e1:
29:4e:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:58:12 2026 by rpki-client