Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: vv0gUuoQHQEmj9ZWSNuJ+j0raFetNjY5b8B/NWW7I1Y=
Subject key identifier: FD:22:A4:AB:44:2F:0A:96:6B:1B:FA:A8:DD:1D:D6:A1:50:A1:25:C0
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 01A0C7EB2D2E850D86A0E8981F0882B1D98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0FAF
Signing time: Tue 22 Sep 2026 07:01:13 +0000
Manifest this update: Tue 22 Sep 2026 07:01:13 +0000
Manifest next update: Wed 23 Sep 2026 07:01:13 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: 6wrvTXMaNB7tAwkjO2MOxmZK25+peEQAdQURSZACPRc=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:2d:2e:85:0d:86:a0:e8:98:1f:08:82:b1:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Sep 22 07:01:13 2026 GMT
Not After : Sep 23 07:01:13 2026 GMT
Subject: CN=fd22a4ab442f0a966b1bfaa8dd1dd6a150a125c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:ac:95:05:3a:01:33:66:8a:88:f6:fa:83:
27:76:bd:14:a4:86:f0:3c:3c:bf:ce:1a:bc:0b:e1:
19:99:69:31:cd:b5:7a:41:ca:89:b2:de:63:0b:a9:
c4:95:3a:7f:34:6a:3e:1e:47:73:5c:ec:68:38:02:
a4:c6:01:da:2a:08:cd:1a:86:0b:6b:d6:c0:85:d5:
93:1e:af:66:d0:9e:85:e2:a0:39:a4:53:61:ee:bf:
5e:d3:49:3b:11:7c:7b:68:5f:45:22:90:d2:b4:bb:
9c:09:f4:e1:b9:19:7e:2b:b2:9d:34:77:46:4c:86:
ca:f9:20:14:bc:04:b0:83:55:47:33:72:cc:26:0e:
59:28:16:8c:9f:9f:77:1d:b5:e0:8a:43:04:ed:53:
0d:e6:72:7b:7a:5e:14:41:7e:02:6e:0d:22:b2:96:
83:58:48:41:fc:58:2e:10:f3:98:5d:5d:fd:88:b6:
17:b0:92:61:ef:d5:b0:7b:35:c0:64:e3:97:b1:e6:
ba:ad:b0:34:7b:df:9e:94:da:93:3d:c5:c2:7a:07:
9e:84:2a:8c:51:4f:f5:6a:27:9b:40:e8:c4:ae:0c:
41:72:2e:f2:26:9b:e0:71:0e:6d:8b:02:c8:6d:09:
8b:04:24:53:c8:cd:7e:89:f5:e0:8e:a9:40:ea:8c:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:22:A4:AB:44:2F:0A:96:6B:1B:FA:A8:DD:1D:D6:A1:50:A1:25:C0
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:72:a4:27:26:78:d7:8e:f6:3f:0b:95:15:24:95:ef:d1:bc:
4e:79:97:5b:c2:58:e4:44:06:ba:98:2e:0b:b8:aa:a5:de:bc:
f6:67:cb:aa:8e:7c:6b:ad:de:57:3b:4a:10:3d:fc:f0:4b:3f:
b0:fb:4c:f2:fd:1e:fc:06:96:a4:0b:b4:bc:31:2e:de:7c:6a:
b3:0e:aa:4d:14:56:f9:63:6d:04:7a:de:1a:23:12:90:3d:d3:
04:8a:23:9d:3a:7f:ec:86:a3:fb:a3:e6:1b:f3:c4:fc:4b:12:
e2:93:ec:2d:6b:b7:f5:04:89:fa:01:97:11:72:f6:2a:0c:c1:
d2:f0:5c:00:a8:97:4b:0b:aa:4f:10:fd:d6:dd:3c:c5:c5:19:
01:8c:94:3e:36:41:3e:7e:91:7f:52:a3:ec:b6:98:4a:ff:78:
3b:bf:da:39:a1:c7:80:6a:4e:7b:eb:e6:6a:80:70:d8:d9:55:
6b:bf:c2:e7:76:a9:1a:16:71:aa:07:97:98:b0:45:7e:65:c6:
af:3e:15:c4:16:cf:4f:09:72:09:4e:42:38:87:fd:07:4e:3d:
26:d6:6f:45:54:de:f4:fa:f4:f4:3f:ed:87:e9:a6:b8:c2:22:
50:09:4c:85:41:ee:c0:37:44:06:da:76:40:21:c6:6d:3f:e5:
73:f6:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:29 2026 by rpki-client