Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: VdxdTOOjhyCLXmj5F8rgy+upH4eLnrAkvlZ7ztG8RAQ=
Subject key identifier: CB:4B:2E:6A:04:B6:4B:2F:46:71:7E:65:AD:DD:AF:19:AA:1C:04:32
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 01A1C09C99A21BD004E1503D296C8CC54340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 1285
Signing time: Mon 09 Nov 2026 14:00:50 +0000
Manifest this update: Mon 09 Nov 2026 14:00:50 +0000
Manifest next update: Tue 10 Nov 2026 14:00:50 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: SR4LLony6GXEk/LxT6+iBpBRCR5ODjQLW5NDrkk6208=)
2: 69F3bfMIelWEttb5tJi_02EPqPM.asa (hash: 8J7HRmXhchbIN/c7Ahb5CS10AmGul2E79TFNJaxglMQ=)
3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:9c:99:a2:1b:d0:04:e1:50:3d:29:6c:8c:c5:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Nov 9 14:00:50 2026 GMT
Not After : Nov 10 14:00:50 2026 GMT
Subject: CN=cb4b2e6a04b64b2f46717e65adddaf19aa1c0432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:d3:e7:3e:49:10:f7:7d:a1:5b:e2:5e:17:
09:d9:02:c8:7d:e4:fd:d0:cf:52:56:a3:db:0a:4b:
02:66:02:0b:e6:2f:6b:bf:8e:4e:c6:6e:d3:23:d2:
91:96:97:61:88:84:da:ae:d7:5c:d9:1f:62:65:2e:
fe:0a:d9:dd:cf:80:95:b3:f6:51:4e:78:66:e8:f3:
f1:66:03:21:75:51:f3:03:e0:36:44:ac:b7:f2:44:
53:5f:31:93:6f:df:e0:50:f7:c6:e9:4f:0a:de:9a:
9e:63:84:7e:1b:34:eb:48:84:f6:7e:e3:11:82:35:
f7:b6:3e:b9:dc:40:4b:ae:7a:f2:f0:39:6f:21:9d:
1a:5c:ba:2a:94:33:3b:38:ba:2a:c6:c1:ff:ea:e0:
6c:67:83:04:28:1f:55:4c:85:06:81:4c:0e:fa:32:
aa:38:7d:20:72:f7:d4:08:14:1b:6c:45:01:65:b6:
fc:dc:b3:8a:0a:3a:99:f7:b0:33:ae:b7:33:2c:97:
06:9c:05:2c:2a:dc:1f:76:36:e8:87:cc:e3:69:44:
e2:7e:19:1b:31:e8:b6:94:9b:05:bd:79:e2:85:9c:
1d:48:06:d2:89:e2:07:74:d1:ff:45:fe:0a:f9:e9:
c0:bc:25:6e:2e:f2:ec:8b:83:92:19:df:c0:54:e0:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4B:2E:6A:04:B6:4B:2F:46:71:7E:65:AD:DD:AF:19:AA:1C:04:32
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a2:64:ce:7c:de:4c:4d:70:d2:aa:6d:1c:be:08:32:7e:90:
69:fe:f0:01:cc:35:66:63:02:d6:e4:91:82:eb:08:20:34:49:
b2:81:ef:72:a5:9a:bd:ac:39:df:a3:d6:d7:dd:3e:d4:3c:db:
3d:4d:63:dc:d2:ee:2c:6b:83:b1:40:c5:2e:d3:51:3a:fb:d4:
5d:6d:6d:a3:e3:d6:e9:17:e6:0c:3e:bc:fc:48:fd:f9:f5:ea:
4b:81:17:ac:06:67:07:f3:db:87:7e:6a:b9:92:61:ec:aa:17:
64:42:21:ec:40:89:b5:9e:5f:df:95:35:9b:b5:5b:36:1e:3d:
81:91:a5:2e:df:b7:ad:11:07:aa:02:ac:b5:e8:c7:81:46:ef:
77:97:47:52:7a:8f:3c:da:5a:f1:0c:24:2f:33:de:20:1b:a6:
21:1d:da:04:86:b2:be:ec:d3:1a:95:53:f5:23:a6:8f:93:3f:
4e:60:27:3c:40:9f:9e:63:4b:c6:8a:32:b9:c0:84:1b:59:aa:
5e:96:18:1c:9b:c6:d0:29:e2:13:c0:9a:d1:2f:24:1b:0d:12:
a5:3f:92:21:5e:9d:e5:f5:17:9a:60:a8:97:f7:bf:be:76:7c:
a0:ef:af:f2:86:84:2f:3d:71:4a:ed:9f:dc:53:39:52:6d:01:
a6:f2:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 19:49:32 2026 by rpki-client