Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: ZD8RgeG6QQhEfJGy715cFOIxFDH8T42RyiAIc12VzlE=
Subject key identifier: 8C:7F:8E:1C:FE:61:3D:49:4A:81:64:9A:71:45:2B:26:FB:01:9D:DA
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01A0DD97090D7ADE9323660E8D536C3F12AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 1AB1
Signing time: Sat 26 Sep 2026 12:00:57 +0000
Manifest this update: Sat 26 Sep 2026 12:00:57 +0000
Manifest next update: Sun 27 Sep 2026 12:00:57 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: y5ZHuT97W4Y0icDIucc4isWc94UMFzuR4P5ZRe5IrXU=)
2: 78k7N29pgqqBt_7SArx8W7gvbtY.roa (hash: HchXuuENBfMJOEemaKoErz+AVozHGh2qeMU61xXBJBo=)
3: 9DQTs2wKqScndspLuFL690S9C10.roa (hash: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=)
4: GWkOHprhLWqYD2ENAai8oym_wiw.roa (hash: q6SxSFGIr7ds33eqf3dA8T2KPOqg2V71TFN13mPhfMA=)
5: Z8U18VjP2jheYsmpFvIL4ZhX5ag.roa (hash: EIS4Fsu5aDAQ/C0gb0S3uY6FJjVXAoKB3sfNrEgpbFo=)
6: nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa (hash: KrRY9bn7xQ6+HYYd/c9njJzJQr8DpPXzGZe5ZanhC8s=)
7: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (hash: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:09:0d:7a:de:93:23:66:0e:8d:53:6c:3f:12:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 26 12:00:57 2026 GMT
Not After : Sep 27 12:00:57 2026 GMT
Subject: CN=8c7f8e1cfe613d494a81649a71452b26fb019dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:07:48:41:22:8f:d3:8b:cd:c2:20:9b:d6:
f1:72:bd:1d:bb:d6:ea:f9:ca:92:0f:9e:b4:8a:4c:
66:75:ef:78:55:ae:a1:e3:f9:b2:e4:e3:80:46:77:
57:9c:b1:59:36:a9:56:6a:5c:c9:e6:4e:00:8b:03:
af:c1:43:bc:1f:0f:9c:8c:0a:eb:6b:92:1a:92:91:
7f:b9:95:0f:1b:4c:b5:03:e7:48:b4:36:a6:59:ea:
fe:2e:66:20:ca:5b:9a:57:ac:c9:ae:2a:be:5c:ff:
ae:09:5b:49:12:24:52:33:0b:98:33:35:c3:47:8f:
dc:5c:4c:6c:b8:fa:39:30:06:35:22:31:6d:8d:8f:
57:0f:fe:27:9e:d1:25:e4:ea:56:ec:70:e1:53:12:
13:f6:49:19:5a:15:b1:a7:b8:91:27:8f:ae:f4:9c:
b7:fd:a1:f3:b1:d6:64:f3:0a:b4:fe:92:79:ff:04:
6f:18:b0:72:af:b6:e1:b8:36:12:7d:3d:14:8b:6d:
63:22:75:2d:e2:b9:f7:64:91:d1:3c:e7:84:37:10:
97:26:3b:7c:bc:fa:b9:a9:9a:6b:ef:da:25:e8:6c:
12:76:44:98:a9:c0:6f:96:3a:42:df:24:56:70:62:
d7:0e:f7:1a:c3:d8:14:4f:0a:2c:fc:9e:f9:df:be:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:8E:1C:FE:61:3D:49:4A:81:64:9A:71:45:2B:26:FB:01:9D:DA
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:7b:5e:9b:4b:24:4a:6b:ae:57:e6:ee:0c:05:bb:4e:06:
28:63:6d:f0:25:25:f3:c6:eb:86:9f:06:74:ff:bc:0b:94:c6:
78:68:eb:2c:cf:c7:ae:18:f9:e0:2c:04:80:a8:3c:7e:18:f8:
0c:26:e1:4b:d7:43:91:e3:64:21:09:2a:80:cd:bb:a9:3a:b3:
a5:21:2f:de:2f:c3:08:14:38:c9:69:df:49:de:b1:72:90:c0:
df:82:cd:95:a7:1d:8b:70:c1:6c:4b:39:88:65:1a:de:ae:0b:
0b:35:16:96:4a:66:43:0d:46:40:3e:87:47:65:7f:74:2d:4c:
49:98:2a:69:c5:ae:d8:d0:9b:98:82:0e:8f:4a:b1:b2:49:27:
aa:69:01:91:9b:b5:c0:90:f4:6d:8c:da:84:03:91:75:e5:c2:
5a:05:5b:50:6d:ac:e5:4f:88:25:64:3d:fb:ca:84:24:e9:f2:
72:5c:1f:84:54:9a:56:84:15:2a:70:c1:8c:93:84:6c:d5:23:
03:43:17:07:8a:34:2e:92:e0:67:2e:28:f6:25:b6:33:a3:9f:
cf:aa:f6:6b:c6:7f:ac:51:56:8d:01:c5:38:e8:d9:51:69:3d:
fa:b1:82:02:ac:01:b8:93:f7:af:69:04:6a:ee:79:46:fc:de:
3e:59:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:39:13 2026 by rpki-client