Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
File: 1-6gqBkCYqYv21WRysmP2x0K38KQ.mft (raw, json)
Hash identifier: QUj74gvgbYYaiQ/E/lhT2X5Te1r4NocYFrH2wLK02QI=
Subject key identifier: 8A:E4:B1:0A:95:5A:32:E5:B0:27:F8:1E:88:4B:A5:0D:9F:19:2D:16
Authority key identifier: FB:A8:2A:06:40:98:A9:8B:F6:D5:64:72:B2:63:F6:C7:42:B7:F0:A4
Certificate issuer: /CN=fba82a064098a98bf6d56472b263f6c742b7f0a4
Certificate serial: 01A0C17AD18E741D87F1E22180CFD9AA201C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
Manifest number: E1
Signing time: Mon 21 Sep 2026 01:00:46 +0000
Manifest this update: Mon 21 Sep 2026 01:00:46 +0000
Manifest next update: Tue 22 Sep 2026 01:00:46 +0000
Files and hashes: 1: 1-6gqBkCYqYv21WRysmP2x0K38KQ.crl (hash: stvBc8Gh/lLCY1x20bWq0W4ouRKkuSt0NI/OwXW6wEQ=)
2: uSpaJx3mQEm7YLgyYTvApp4WAcI.asa (hash: lCm4Q1t5teRBodEmSd+10FSmdUdaOKZp/0sA+Ba9+F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:d1:8e:74:1d:87:f1:e2:21:80:cf:d9:aa:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba82a064098a98bf6d56472b263f6c742b7f0a4
Validity
Not Before: Sep 21 01:00:46 2026 GMT
Not After : Sep 22 01:00:46 2026 GMT
Subject: CN=8ae4b10a955a32e5b027f81e884ba50d9f192d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:11:26:5a:97:e2:a7:91:16:42:86:3c:35:
04:05:99:eb:23:98:89:b4:4a:dd:5f:ae:4c:66:55:
0f:57:21:c6:34:a7:6d:d7:31:87:07:e3:1c:9d:1f:
33:1c:c8:5b:ae:b3:8a:f9:ce:e4:38:0d:d1:0f:c7:
7e:97:af:2f:a4:f0:e6:68:8c:06:73:69:d3:28:bc:
35:76:ea:ec:d8:70:e8:13:93:2f:49:30:18:b2:6a:
33:fb:44:93:99:ab:74:b2:d0:cf:14:73:ee:5d:a2:
87:5a:01:0d:75:2a:7f:12:6a:8d:5d:42:c4:62:37:
32:17:34:83:c9:04:cd:95:2f:21:5a:fc:05:84:6f:
f2:23:de:c8:d8:4f:8a:cf:c3:c4:37:dc:e5:31:61:
30:f8:70:f7:ff:ab:13:c8:ee:42:ea:a5:df:85:a5:
ec:0e:0c:41:10:da:e1:f5:f1:59:6f:19:16:74:80:
ad:5a:44:7f:1a:0a:12:bc:d8:61:e3:33:84:20:da:
e5:1b:57:de:c9:d5:8d:70:b6:4b:58:2d:d4:59:78:
5b:fa:04:4d:ed:0e:ca:1e:61:f8:ad:b1:35:5b:2c:
e1:c7:6d:29:76:69:fa:9b:fd:df:e8:02:2f:af:19:
27:f0:37:59:2a:cc:53:99:2b:c1:b1:b5:b2:d0:dd:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:B1:0A:95:5A:32:E5:B0:27:F8:1E:88:4B:A5:0D:9F:19:2D:16
X509v3 Authority Key Identifier:
keyid:FB:A8:2A:06:40:98:A9:8B:F6:D5:64:72:B2:63:F6:C7:42:B7:F0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:1f:82:17:a7:f0:5e:91:04:e1:fb:a9:9d:d2:9c:a9:66:
0e:c5:86:77:0d:f1:ec:72:8d:3d:d4:77:d9:a1:39:dc:21:00:
8e:f4:fe:a4:ec:01:3d:05:5b:14:12:f3:eb:3c:ed:25:71:53:
a2:5c:45:7f:ca:c1:76:e9:56:ee:95:eb:3e:31:b7:b4:17:a4:
b4:75:4a:ad:af:07:b6:f4:cb:4e:d9:71:9a:b1:6e:91:73:ea:
02:0e:4f:77:56:c8:e3:d5:31:1f:94:b8:a6:3f:ae:0b:32:11:
e4:8c:7e:49:a5:c5:e0:e4:39:81:57:6c:6d:3a:2e:a5:c8:8f:
46:f6:bf:09:f0:14:c2:c6:6c:06:fc:ef:a3:08:8b:48:d2:05:
45:06:65:58:d5:7b:d9:7b:39:be:57:54:0f:1f:1f:50:bf:99:
ea:3e:03:b7:65:4a:f2:52:67:e6:79:9b:1e:c6:f5:80:ac:a6:
5c:82:b8:d6:81:2f:23:e1:71:9d:70:7b:01:a8:9b:96:c3:9e:
3a:98:7c:2b:97:9b:6c:cd:b6:98:06:5a:31:f8:31:98:7d:7a:
c2:1c:3e:fd:78:18:bb:84:32:42:2c:f9:1f:93:d2:34:d2:a3:
7e:a8:8c:66:d3:f4:c4:04:0b:0d:f8:fb:3b:bd:4e:22:ba:11:
a0:b4:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:46 2026 by rpki-client