Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier: 6Ds7Qs0DP7omXyNxchwyJ43LT140uNJrT2kZk68rF9I=
Subject key identifier: 2F:30:FD:C8:9E:86:0B:56:61:AF:AD:48:AF:AA:09:B5:D5:BE:98:5D
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 01A0C8218985A1D125D8EA72F469EB065A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 08:00:36 +0000
Manifest this update: Tue 22 Sep 2026 08:00:36 +0000
Manifest next update: Wed 23 Sep 2026 08:00:36 +0000
Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: d5cOh5H8POFVypeJyYgbGafd9w3+J4EApKkcQjhSn6c=)
2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:89:85:a1:d1:25:d8:ea:72:f4:69:eb:06:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Sep 22 08:00:36 2026 GMT
Not After : Sep 23 08:00:36 2026 GMT
Subject: CN=2f30fdc89e860b5661afad48afaa09b5d5be985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:5b:5b:f1:61:d7:98:27:76:3d:cf:81:12:
dc:c1:59:5f:48:a8:c2:83:e7:ac:1a:8e:35:b9:c6:
c0:e4:02:d5:fa:b3:17:fa:fc:ec:cd:73:34:ae:4b:
d4:7a:43:54:25:10:45:0e:0f:43:93:5c:cb:76:96:
94:ac:c3:54:b7:44:ac:8c:5d:eb:06:1b:1b:a9:a3:
a8:1b:0a:7c:da:52:28:75:f6:51:99:a4:43:6d:77:
e7:d9:61:b3:ba:77:4e:32:5d:8a:fe:59:f1:eb:79:
ba:72:fd:14:5d:5c:a4:cf:d3:93:c4:7d:cf:3a:d6:
32:80:b3:c7:71:fd:15:ad:3f:74:91:30:c3:a1:fd:
54:d5:0e:ba:1d:27:ea:c5:f3:db:63:28:74:39:d7:
a8:12:a4:38:d6:f6:74:1a:04:aa:c7:17:26:e0:05:
93:79:a9:38:04:8d:64:cd:2b:58:ec:34:ba:d3:93:
22:07:36:79:a8:df:e4:dc:64:20:18:4e:5d:d4:5b:
6a:09:ed:02:5f:6b:aa:e5:1e:e6:22:a1:90:88:c0:
d5:89:c2:2a:6b:c6:cd:41:de:9e:38:f2:ab:a6:8a:
7a:02:ca:f5:1a:56:e7:34:e4:30:30:3c:af:35:aa:
68:f4:c8:e7:6d:f9:aa:c7:e0:7b:fe:f4:0f:0c:7f:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:FD:C8:9E:86:0B:56:61:AF:AD:48:AF:AA:09:B5:D5:BE:98:5D
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:49:87:94:aa:fb:48:6f:99:af:25:41:bd:8d:b7:cd:aa:18:
76:16:00:eb:36:74:0d:d2:62:f6:a7:e4:87:bc:99:46:61:20:
d3:f3:d1:7b:6b:53:8a:7f:60:70:c5:f1:0b:dc:35:36:70:5a:
f7:11:07:e2:c8:90:af:62:46:e0:12:b8:fb:27:93:6d:a5:02:
af:30:c9:a2:da:e9:78:6f:b0:3f:e5:83:22:2e:99:fd:bf:47:
9f:c3:be:db:37:4c:dd:63:ec:62:b8:ef:b8:23:f7:e1:2e:91:
8a:56:4a:bd:d6:c7:71:4b:44:65:fb:5e:28:4b:03:d1:3e:9b:
e2:33:60:5e:36:c4:4d:2a:36:f3:2d:16:36:2b:c4:82:ad:b7:
fc:e8:ad:ea:c2:38:00:d9:71:79:6a:85:a3:c2:b9:5e:49:a3:
a9:bc:a7:56:ca:08:5c:f7:80:c4:4b:22:2b:f5:e3:77:4a:37:
08:9e:01:aa:2c:7a:d5:02:ec:5d:e0:36:f4:73:a3:a4:85:0c:
5c:c9:18:f8:43:43:34:f1:e8:44:b6:e0:37:df:d9:a5:c8:2f:
0a:c9:07:3a:31:45:ee:92:c7:ef:f5:69:fc:45:f5:f1:e1:c0:
68:6d:5a:3b:b7:06:86:3d:62:da:f4:42:c8:05:be:a5:a3:79:
28:81:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:31 2026 by rpki-client