Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: MUtd1NjRHY4Ge1TQYfHHiKt9gtotM10viZzs8cxBTjs=
Subject key identifier: 90:E4:21:A9:FE:6D:2F:19:DC:A0:BB:A2:13:23:C0:3C:B9:C7:66:52
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 01A0C520B6F149C64DD5E91D31AED623CFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 18:00:50 +0000
Manifest this update: Mon 21 Sep 2026 18:00:50 +0000
Manifest next update: Tue 22 Sep 2026 18:00:50 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: vwSjwvqKbER8TtigtETlAOUxmP0HuHPxkcxz55iXGjQ=)
2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:b6:f1:49:c6:4d:d5:e9:1d:31:ae:d6:23:cf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Sep 21 18:00:50 2026 GMT
Not After : Sep 22 18:00:50 2026 GMT
Subject: CN=90e421a9fe6d2f19dca0bba21323c03cb9c76652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:d8:30:c1:d4:04:ca:44:a9:7b:48:a9:21:
69:f5:da:45:e1:d4:ae:cf:ef:ff:b8:72:2d:38:6a:
97:8f:2d:e2:c9:1b:92:11:38:48:8a:a2:33:d9:e2:
60:97:81:41:d0:e6:1c:71:43:c7:be:28:30:59:c9:
3b:d0:6c:8c:37:e4:0e:2d:37:3f:3c:2d:8c:59:50:
bb:5a:11:54:96:ef:b8:77:02:50:79:66:15:64:87:
5a:7c:d5:ba:55:f5:94:7a:6e:05:39:aa:8e:d8:7b:
84:50:3b:e5:0d:12:af:aa:9b:c8:66:b5:08:c3:7e:
d1:33:8a:32:32:ee:21:ec:f4:78:70:46:3e:b7:f0:
7b:eb:e5:b4:a2:0c:99:7e:29:89:ed:48:1e:a3:06:
cf:77:41:8d:49:47:f1:fd:a3:91:1c:37:c9:51:3c:
69:54:0b:26:0d:b6:30:ca:e8:fb:c7:a9:d3:22:fd:
57:ee:0e:28:d6:ed:33:e4:dc:ef:f1:9a:ba:2a:0d:
fb:b0:0d:9d:82:6e:98:4c:a0:63:39:ae:3c:33:26:
af:bd:52:77:43:7b:d1:9f:4f:18:4a:19:33:02:34:
62:25:a2:26:cb:3b:ab:01:63:58:ce:ab:fb:06:9f:
3d:55:c7:cd:a0:6a:41:43:86:33:62:cd:36:91:77:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:21:A9:FE:6D:2F:19:DC:A0:BB:A2:13:23:C0:3C:B9:C7:66:52
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cd:6b:a5:83:6c:9a:95:0d:64:f9:a1:b7:b2:7a:47:60:66:
74:9c:91:cb:02:87:92:23:53:94:3b:d1:b3:88:a5:95:d6:35:
ab:db:b9:c9:45:2f:54:d3:e2:1b:c4:c8:43:d0:73:c8:39:46:
91:77:6f:2a:8c:24:71:eb:bd:65:24:2c:7f:25:d9:df:c6:b1:
61:fd:2b:3f:ea:9f:b8:cf:7d:3b:3a:14:01:bf:01:8a:b4:3f:
80:b3:10:9a:70:dd:f1:af:ac:08:93:c1:5d:97:d3:cd:82:de:
a1:11:71:0a:7f:a6:8f:5b:9e:50:e9:a9:3a:76:82:e5:9b:24:
08:a8:61:32:f1:a8:8e:90:70:48:fc:18:1f:0b:84:99:8e:87:
96:1d:93:c9:de:d8:68:b2:e9:7c:86:80:b0:2f:66:00:7b:ee:
18:1e:08:17:f4:3e:8f:57:9e:36:dc:5c:6f:f7:a5:46:c1:63:
d1:c6:a7:f5:f3:9f:2b:21:85:bd:1d:47:65:cf:8b:b0:29:89:
b9:b7:fc:21:4c:ed:3f:89:e2:83:bd:f3:05:64:c5:b4:66:60:
98:ad:6d:af:e0:68:bf:16:87:6b:70:84:98:e5:f6:1b:39:14:
46:ae:11:65:2b:79:80:b9:83:35:34:ac:78:12:4e:9d:49:d0:
63:c5:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:09:56 2026 by rpki-client