Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: Ip1w9lF7o7C2b7Hp/oGZcdim6p9WwzApMZoz/ctZVxw=
Subject key identifier: D1:FC:0F:96:59:4E:4C:76:79:80:55:37:92:62:BA:2F:3B:D8:5D:C3
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 01A0C66AA28FFD1E1D08D96E584BBE0A6E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 158E
Signing time: Tue 22 Sep 2026 00:01:12 +0000
Manifest this update: Tue 22 Sep 2026 00:01:12 +0000
Manifest next update: Wed 23 Sep 2026 00:01:12 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: w+HPrsmQXDhoLWdZAoz31ztC5QBCFMlspEdQWGKK7eo=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:a2:8f:fd:1e:1d:08:d9:6e:58:4b:be:0a:6e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Sep 22 00:01:12 2026 GMT
Not After : Sep 23 00:01:12 2026 GMT
Subject: CN=d1fc0f96594e4c76798055379262ba2f3bd85dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:58:64:3f:9f:4e:39:a8:4a:bf:67:47:b2:
b3:4e:77:f7:b8:13:8d:f9:bf:47:7e:e3:3c:17:14:
7e:34:a5:a6:15:a1:70:b8:19:79:f2:b0:f7:6a:8a:
79:73:bc:70:b5:24:ca:b5:26:2f:4a:2a:05:6d:fc:
50:07:12:99:04:42:34:6b:e8:a6:40:be:4a:a8:69:
6c:c3:e1:39:de:38:08:98:6e:db:36:aa:95:d3:a2:
e7:53:35:2f:2d:6a:82:3e:62:3e:89:dc:a9:cf:d2:
58:30:da:a9:6f:45:4d:76:b8:f5:45:f9:b1:fa:42:
a1:e4:a9:51:c4:74:c7:f8:96:35:15:a7:28:18:e1:
7a:72:e7:66:b9:dd:90:12:bb:89:50:18:0a:b4:6a:
b7:6d:2a:45:18:4c:03:2c:8a:a9:7a:47:e0:4e:9a:
2b:f4:d1:00:00:e3:93:9e:d2:e0:21:f5:97:f6:74:
b4:3b:05:6b:e8:6f:6d:02:fc:df:91:cc:33:23:76:
67:42:a8:33:3e:e6:d4:86:a2:0c:c5:af:9b:f1:91:
97:71:2f:ec:45:f4:15:f2:ca:88:4c:b2:f2:a9:4a:
54:63:43:ca:ea:32:58:bf:56:f8:a7:2f:bf:94:7b:
a2:5c:8e:aa:93:7c:02:7d:90:06:51:79:01:7f:74:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:0F:96:59:4E:4C:76:79:80:55:37:92:62:BA:2F:3B:D8:5D:C3
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:b2:52:97:0d:8a:69:f4:24:ce:50:bf:02:37:15:1b:70:
67:b2:00:47:25:92:79:5e:05:66:6d:38:76:3d:6a:d2:b0:fa:
7e:68:2e:7a:12:88:85:c7:67:b0:9e:df:d0:34:04:08:88:69:
f4:cb:d0:f3:8c:56:e5:b5:4e:79:a7:c7:01:a2:be:59:ed:3e:
c2:5d:59:15:23:07:93:fc:32:eb:36:09:ea:1b:1e:d3:5a:db:
7e:8c:cb:18:e0:f7:3a:ef:68:5c:d6:2c:89:6e:7b:a3:b0:10:
96:f8:e7:92:36:a5:5e:35:b2:6b:77:23:a9:85:69:53:db:f6:
a8:99:7c:a5:31:5b:ec:e4:f0:c3:0a:f4:dd:4e:cd:4f:f3:e0:
b1:ef:c3:34:4f:eb:1e:c6:57:68:5b:96:ea:67:e9:80:eb:8a:
1d:b2:9f:a6:4c:78:9f:b0:44:f9:2f:4a:c7:79:4b:36:74:32:
d7:14:cf:b3:e2:96:66:e2:7d:d4:75:8d:e1:ab:74:41:62:f8:
d7:07:55:63:93:ca:89:02:4c:ca:bb:56:56:e0:50:10:af:f9:
33:d5:4f:93:3c:28:e7:77:25:44:10:03:52:59:93:28:65:68:
64:f3:9d:13:2c:7e:00:51:d0:cd:cb:52:4f:6a:8b:3c:81:64:
64:df:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:28:31 2026 by rpki-client