Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: UpccGbU8UwejbeVddbgyNU4RlJ1VciMk3kyGU+YlK4Y=
Subject key identifier: 69:45:0F:CF:3E:C3:EE:F0:92:1A:35:7C:A5:F0:4C:88:49:EF:13:C3
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 01A0E24FE466980DF23C1740F3DC8D103CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 0816
Signing time: Sun 27 Sep 2026 10:01:21 +0000
Manifest this update: Sun 27 Sep 2026 10:01:21 +0000
Manifest next update: Mon 28 Sep 2026 10:01:21 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: hTMLQRTNY0W1wOoXyE50hJSyCTMD2PEHiwyVeeErL/8=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:e4:66:98:0d:f2:3c:17:40:f3:dc:8d:10:3c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Sep 27 10:01:21 2026 GMT
Not After : Sep 28 10:01:21 2026 GMT
Subject: CN=69450fcf3ec3eef0921a357ca5f04c8849ef13c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:de:a5:ef:04:44:82:34:55:3b:c9:86:85:
95:6a:6d:54:2a:e9:c9:8b:24:d0:fb:8a:ee:5c:79:
45:11:6d:45:4a:61:69:92:91:2e:36:43:e8:2c:80:
1e:38:6f:12:ba:11:32:91:aa:cb:c5:77:64:7f:ae:
2d:a2:ac:6c:b8:cf:d3:a6:24:ae:5e:68:11:17:68:
39:7e:ef:94:13:2b:f9:57:7e:05:9f:22:9d:91:58:
ea:af:da:69:a2:82:63:62:0d:8a:b2:a6:72:97:b8:
0e:00:ef:df:fe:bd:f3:ed:d6:98:69:5c:50:b5:54:
97:99:29:90:40:64:1f:76:b1:9c:22:46:7d:b7:47:
73:59:33:1c:54:9c:6c:67:73:db:e3:48:a1:59:db:
52:fc:f4:e5:4a:17:62:ce:50:25:ec:8e:39:52:85:
5f:4a:db:81:63:2c:c3:23:18:93:91:f3:e6:b4:02:
aa:fc:1c:70:c8:56:f6:f9:5b:87:7e:e5:a2:5a:89:
29:e0:0f:e6:43:59:12:5a:95:11:00:12:4d:4f:58:
61:f8:29:15:1d:21:13:0d:1f:45:14:5b:8d:15:1c:
67:f8:32:44:f2:a2:f9:1d:9d:69:c1:33:90:bb:47:
76:55:b9:02:8c:47:e6:3a:fc:b8:ad:2e:a5:a6:2a:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:0F:CF:3E:C3:EE:F0:92:1A:35:7C:A5:F0:4C:88:49:EF:13:C3
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a6:27:db:7e:52:bf:06:a3:22:e8:89:70:3a:da:2f:a4:c3:
d4:68:f4:e0:a5:f2:f1:17:ea:fe:9b:2c:8d:38:1d:99:27:c8:
85:33:bb:44:24:70:7a:2c:40:97:2f:68:f0:e2:57:3b:9c:e4:
13:df:2c:03:d8:2b:49:b3:3a:91:22:91:93:4a:6b:55:96:ed:
b4:cb:8b:96:0d:1e:d0:56:50:5e:17:e6:c1:d9:c8:fd:5b:e4:
1a:f6:d2:d6:74:37:5d:a9:13:3b:48:e1:88:a9:28:41:80:dd:
89:72:09:7c:2e:c3:4e:8d:b2:db:ce:75:9a:c6:90:d8:de:74:
e4:26:82:ee:0d:f9:5c:26:6e:d6:f0:e6:73:1a:41:9c:2b:91:
7d:92:28:03:58:e0:99:ee:83:33:f6:0a:9f:c0:40:13:a6:68:
10:79:5e:9b:14:28:04:45:22:33:b0:73:f5:36:38:86:b2:bf:
06:4d:7c:68:9d:3e:57:65:71:a7:af:4a:40:f1:f1:a2:80:b4:
ca:98:5e:de:59:fc:ef:3b:28:f0:22:7b:05:f3:9a:f3:09:5b:
16:5e:c0:d8:04:10:42:4e:c1:a3:f8:f1:98:bd:d8:c8:ca:a0:
c1:0a:61:e0:31:18:0f:c3:be:80:8b:c3:5a:8c:1c:5b:25:38:
c4:03:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:35:27 2026 by rpki-client