Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: xs62uVb8MBv6QRA6nMRTX0ruspsbqxb3uJsZrkcMsbk=
Subject key identifier: 96:9B:15:87:38:9F:FA:C7:53:8C:4A:78:71:C8:EA:F9:91:D7:F8:8D
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 01A0D9BA7BE40DD07F192D0EE5C0DF1394BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 18:01:12 +0000
Manifest this update: Fri 25 Sep 2026 18:01:12 +0000
Manifest next update: Sat 26 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: PcWdk13CVk0AOa+jdlC5whzbCQ/DrRHIPPhRiq5vri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:7b:e4:0d:d0:7f:19:2d:0e:e5:c0:df:13:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Sep 25 18:01:12 2026 GMT
Not After : Sep 26 18:01:12 2026 GMT
Subject: CN=969b1587389ffac7538c4a7871c8eaf991d7f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:89:ee:dc:5e:5d:a4:90:02:bb:ac:5a:6b:
a3:3a:2b:24:13:f9:9c:6d:ce:40:5b:8d:c9:fb:fd:
94:06:4e:de:d9:00:83:b9:cb:01:a4:5a:e5:f2:04:
d5:fb:23:9a:2f:86:81:ad:59:b0:9e:b6:3c:34:33:
29:63:c1:09:a1:17:6a:f6:4d:5e:19:e0:46:5b:7b:
50:ca:40:97:25:52:59:ce:c2:90:83:a1:65:2d:db:
3d:09:b4:bf:d3:41:1b:9b:97:3d:9b:f5:24:6b:de:
06:76:20:48:5a:12:1d:af:5b:7c:c1:0d:20:db:20:
25:13:2b:d4:8a:f6:c9:ba:c8:1d:c4:61:4f:7d:1e:
37:d1:53:a8:75:5a:04:20:84:16:c9:0b:0b:a8:2d:
39:6c:0c:d3:c5:d6:2f:8a:ab:fd:6c:46:62:a6:0a:
42:fd:2a:b8:72:18:68:dd:9b:5e:41:21:96:69:8a:
49:15:c1:2a:74:6a:a1:f8:54:77:83:d8:e1:52:2f:
d4:53:5e:ba:ac:fb:a1:35:9b:72:1a:b0:96:af:c0:
35:8b:ee:3d:f9:90:d2:2f:e7:25:ad:89:05:95:58:
a1:1d:2f:83:b6:38:9b:d4:70:65:fa:30:e7:50:4d:
d2:f8:4b:3f:69:c2:53:38:4e:6d:19:e2:5b:79:a6:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:15:87:38:9F:FA:C7:53:8C:4A:78:71:C8:EA:F9:91:D7:F8:8D
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:34:1b:9e:9d:f4:d9:a6:a6:a1:77:6e:8f:7a:73:a2:4d:
9d:10:87:c9:f0:8f:22:ce:fc:55:ed:ee:0a:d4:e0:5f:28:f2:
03:8d:90:ec:3d:f8:85:a2:b6:4d:e0:d6:9d:7d:08:77:3e:90:
c4:54:2e:c1:56:5b:88:d0:1a:2c:b9:d7:83:ba:63:2c:2e:8e:
0a:d5:68:aa:b6:71:7c:ae:4c:7a:8b:cb:f6:1e:a0:6b:95:66:
49:55:ec:b7:23:c0:79:25:01:32:a3:b8:4e:db:11:39:5e:f7:
37:60:ed:d3:5d:15:2b:b3:73:cb:fc:88:5d:03:48:29:31:bd:
e0:22:ad:ad:c9:22:32:8f:0c:79:1f:65:ec:77:75:e6:86:57:
1c:73:d1:51:1b:cc:26:75:0d:36:cc:28:e9:86:e6:72:44:0a:
49:09:5e:48:8f:33:87:45:40:bd:e0:b1:dd:2b:cd:8c:2b:c0:
cf:fe:a8:d4:46:cd:2a:5a:e5:9f:d9:36:46:1b:5b:0c:3a:ea:
9f:26:a6:4b:6d:e9:ee:4d:e8:b7:30:9a:b9:15:98:b3:b4:2d:
ca:34:f2:8e:ac:9c:69:9d:90:32:31:de:cf:47:cf:8b:da:d5:
db:f9:12:d9:a4:33:fc:50:33:59:5c:91:90:f4:30:fb:77:45:
f2:49:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:29:07 2026 by rpki-client