Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: 1ewePYTY70NB/nnA2R53z7mptMVwkbP2kwNGmikUAhw=
Subject key identifier: 94:E1:63:21:1A:C5:F2:17:57:DD:98:E5:BF:EA:B6:D9:B9:72:61:65
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 01A0C7EAB6404D0952E2B7C4B9CDBF5A16FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 119C
Signing time: Tue 22 Sep 2026 07:00:43 +0000
Manifest this update: Tue 22 Sep 2026 07:00:43 +0000
Manifest next update: Wed 23 Sep 2026 07:00:43 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: uzDg5KDl6iUT6swO046d4HhcEBc3QfSUqRMfVJJalic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:b6:40:4d:09:52:e2:b7:c4:b9:cd:bf:5a:16:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Sep 22 07:00:43 2026 GMT
Not After : Sep 23 07:00:43 2026 GMT
Subject: CN=94e163211ac5f21757dd98e5bfeab6d9b9726165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:72:62:c6:da:6c:bf:57:76:58:fe:3d:f3:
a0:f6:7c:f6:33:fe:81:e9:93:13:3f:ea:59:39:14:
d1:d8:ef:4c:f4:53:18:51:e6:e2:7c:63:4f:54:cc:
3d:2c:11:69:7a:49:ce:1c:97:57:d6:06:9b:91:70:
0e:fa:40:29:ab:72:b3:c8:53:ac:fe:0f:3e:49:ce:
3e:c8:81:6c:de:a0:82:08:92:ea:9b:4d:e4:33:2f:
1d:15:67:a7:71:9e:07:9c:85:5d:7a:19:bd:4e:57:
fe:ee:91:7a:82:80:c6:c3:92:00:f2:b1:4a:71:5d:
c3:36:a8:06:01:26:80:59:53:2a:b9:0a:df:67:ef:
21:f1:e3:68:c8:df:f5:88:0b:47:73:6b:1e:97:bb:
66:bc:94:a1:7b:07:91:f9:c6:fc:7d:6f:01:60:95:
61:e6:1d:5b:39:31:95:a3:74:60:0f:53:d1:72:ae:
32:39:09:38:72:e7:22:7e:5a:d8:37:32:1f:04:ee:
7a:ce:71:a4:0d:3f:ce:c1:94:a9:ed:e9:c1:3b:6d:
eb:9b:68:9c:a6:f7:f3:2f:b6:41:4a:af:cb:88:3a:
be:03:f2:24:f9:ce:89:0a:a9:8a:1e:1b:03:cb:e1:
b7:90:5d:26:b7:61:1c:70:89:49:53:68:7b:8b:79:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E1:63:21:1A:C5:F2:17:57:DD:98:E5:BF:EA:B6:D9:B9:72:61:65
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:be:69:14:5b:0c:4f:25:96:ee:c7:5d:db:76:c4:9c:d3:
6c:2d:e8:02:28:b2:65:ec:58:8b:12:d1:33:90:a5:ac:ba:56:
21:1c:2f:92:a3:c2:64:39:a2:b4:a7:51:ab:db:8b:e7:f1:83:
0c:d1:97:a1:e8:dc:44:17:94:8e:e4:9d:b8:45:4d:f2:2a:a2:
f0:7e:26:4e:5c:80:a6:96:75:35:4f:58:78:a7:af:c7:cf:08:
ff:89:6f:89:86:df:1e:de:6b:f9:b3:ec:12:58:a8:77:f7:ce:
0a:b5:8a:88:a9:a4:87:d8:f3:61:68:33:95:c3:f9:a0:64:48:
db:5d:5b:d6:a6:fd:73:e1:9a:e2:3f:3e:74:cb:b9:0b:b9:15:
ab:18:aa:78:da:4b:af:33:4b:ba:58:c3:2d:fc:8f:8a:0d:93:
01:58:49:af:f7:dd:bb:eb:2d:e7:55:7a:74:8d:e6:7a:0a:e9:
58:cf:92:40:ea:bf:a5:cd:a7:38:c8:7e:a6:7a:fd:b5:4c:e6:
93:1f:e6:c8:6b:12:50:52:a3:69:db:c0:04:d3:96:fa:44:ba:
70:6a:9b:28:c6:b5:46:9e:30:f1:8e:6b:e9:19:64:18:c3:67:
eb:c6:0c:0b:3e:d9:f7:af:34:01:fd:8e:64:d1:a7:ec:58:e5:
4e:2b:f7:ff
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDH6rZATQlS4rfEuc2/Whb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWE4M2ZiYjNlMWI5YjYzODMxYTY4MWY2YjcyMmEyNjUw
MTZjOWMwHhcNMjYwOTIyMDcwMDQzWhcNMjYwOTIzMDcwMDQzWjAzMTEwLwYDVQQD
Eyg5NGUxNjMyMTFhYzVmMjE3NTdkZDk4ZTViZmVhYjZkOWI5NzI2MTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzedyYsbabL9Xdlj+PfOg9nz2M/6B
6ZMTP+pZORTR2O9M9FMYUebifGNPVMw9LBFpeknOHJdX1gabkXAO+kApq3KzyFOs
/g8+Sc4+yIFs3qCCCJLqm03kMy8dFWencZ4HnIVdehm9Tlf+7pF6goDGw5IA8rFK
cV3DNqgGASaAWVMquQrfZ+8h8eNoyN/1iAtHc2sel7tmvJSheweR+cb8fW8BYJVh
5h1bOTGVo3RgD1PRcq4yOQk4cuciflrYNzIfBO56znGkDT/OwZSp7enBO23rm2ic
pvfzL7ZBSq/LiDq+A/Ik+c6JCqmKHhsDy+G3kF0mt2EccIlJU2h7i3lDYQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJThYyEaxfIXV92Y5b/qttm5cmFlMB8GA1UdIwQY
MBaAFPoag/uz4bm2ODGmgfa3IqJlAWycMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ocUQtN1BodWJZNE1hYUI5cmNpb21VQmJKdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQzLTQwZDItNGRlYi05NmI0
LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFCOXJjaW9tVUJiSncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlLzU5MmQ0My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3
MzMvMS8xLWhxRC03UGh1Ylk0TWFhQjlyY2lvbVVCYkp3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi++
aRRbDE8llu7HXdt2xJzTbC3oAiiyZexYixLRM5ClrLpWIRwvkqPCZDmitKdRq9uL
5/GDDNGXoejcRBeUjuSduEVN8iqi8H4mTlyAppZ1NU9YeKevx88I/4lviYbfHt5r
+bPsEliod/fOCrWKiKmkh9jzYWgzlcP5oGRI211b1qb9c+Ga4j8+dMu5C7kVqxiq
eNpLrzNLuljDLfyPig2TAVhJr/fdu+st51V6dI3megrpWM+SQOq/pc2nOMh+pnr9
tUzmkx/myGsSUFKjadvABNOW+kS6cGqbKMa1Rp4w8Y5r6RlkGMNn68YMCz7Z9680
Af2OZNGn7FjlTiv3/w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:18:51 2026 by rpki-client