Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: N1iZaZ2Qee7R2LHWOoU9vLJwboGyOkfJ0YPIUZoYZPA=
Subject key identifier: EA:1B:B6:F6:A2:86:01:9F:C3:85:9A:4C:92:6F:F2:82:0A:F4:60:0B
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 01A0C331EDD8C125760F707C660EC37B9755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 19FA
Signing time: Mon 21 Sep 2026 09:00:24 +0000
Manifest this update: Mon 21 Sep 2026 09:00:24 +0000
Manifest next update: Tue 22 Sep 2026 09:00:24 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: SePfgifim/AK2ytAXMRy0taZ3SbR5SXw3s1Ez1zI0+Y=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:ed:d8:c1:25:76:0f:70:7c:66:0e:c3:7b:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Sep 21 09:00:24 2026 GMT
Not After : Sep 22 09:00:24 2026 GMT
Subject: CN=ea1bb6f6a286019fc3859a4c926ff2820af4600b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:89:c0:dc:93:08:24:ca:3a:78:2a:81:9c:
f0:a3:82:02:9b:b8:5c:66:d9:81:98:f5:17:d7:4e:
63:b3:ec:4e:bd:fc:f4:12:b4:40:e9:bf:52:e9:02:
d9:74:56:97:d0:36:f8:0e:20:55:58:8f:56:d1:de:
21:62:68:a1:09:37:bf:6f:dc:47:ae:4f:ad:68:9e:
cc:e9:ab:41:e1:8b:2d:9b:7a:92:0a:5f:3c:ae:ee:
70:a5:69:0c:07:8d:23:db:02:29:93:6d:5d:2b:6f:
7b:14:d3:44:16:13:d0:55:f5:56:c0:4e:9e:34:40:
aa:fe:51:f1:af:20:d5:44:8d:98:58:65:1a:b4:2d:
36:a5:d2:12:7d:1e:a0:f2:89:9b:70:1e:1c:c3:cf:
f8:d9:44:de:b3:64:96:ed:8c:f9:71:d2:0d:dd:99:
85:56:65:26:2f:c8:09:93:67:dd:6a:c6:02:9d:f4:
3a:40:4d:f8:6b:8b:22:d6:f1:fe:ed:63:83:f2:a4:
54:9f:db:52:d8:68:ca:6a:ed:c2:88:34:a1:a4:16:
35:94:e0:2d:a2:83:43:e3:e3:10:be:c7:60:4a:83:
76:f6:01:b1:5d:66:78:a5:a1:98:9c:bd:28:ba:b8:
18:43:50:f2:bc:1a:ae:c9:76:4f:0b:43:26:2b:5f:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:B6:F6:A2:86:01:9F:C3:85:9A:4C:92:6F:F2:82:0A:F4:60:0B
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:66:e8:21:be:6a:1d:72:6d:80:f3:b3:bf:58:02:8b:3c:5a:
d3:f6:c3:f7:37:c5:ed:ff:85:38:c5:05:a6:7f:71:31:b5:7f:
e5:2a:c6:62:9f:5c:e6:40:52:cf:8c:76:5d:63:7e:18:40:49:
38:fb:15:87:55:7d:c0:b6:6e:e4:41:3b:38:a4:49:91:d1:ae:
c9:eb:c4:9e:1e:18:fb:31:e8:07:cb:4d:d6:78:23:af:34:b3:
c6:16:a1:88:42:e3:33:63:cf:41:91:37:92:96:6d:81:43:e6:
5a:bd:b3:bf:2c:db:19:a4:65:50:bc:87:b5:0e:d8:6c:6b:c7:
6d:11:d3:c8:1a:bb:79:44:4c:6d:12:32:4a:79:4a:8b:48:5b:
56:bb:2d:c4:af:8c:b3:e4:42:ac:88:5d:6f:57:34:3d:ed:86:
23:3e:7a:a3:59:be:51:71:fe:77:75:0f:fe:db:aa:8d:32:d9:
6b:c9:4b:03:4d:1a:a1:2a:7d:14:a0:65:c4:a0:94:8f:40:52:
96:32:95:b8:8c:ce:87:4d:99:f8:53:16:e2:05:b4:08:76:f8:
0e:ea:5e:a8:e6:48:5a:19:4f:6e:b3:ae:ca:8b:31:f2:91:97:
e3:9e:7b:0d:90:a0:86:b9:50:83:34:4f:7c:81:62:6a:0b:f2:
d9:84:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:00:51 2026 by rpki-client