Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: Sc16y+YREo9Iz+JFpj4H4P9AnaSL9rLBu8S0hiQr5zk=
Subject key identifier: D3:17:98:5E:D2:F3:15:73:73:33:22:8A:C6:53:0F:03:31:C7:11:E3
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 01A0D383634DBD1122E40D35E1A3416A6816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 06F3
Signing time: Thu 24 Sep 2026 13:03:18 +0000
Manifest this update: Thu 24 Sep 2026 13:03:18 +0000
Manifest next update: Fri 25 Sep 2026 13:03:18 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: EQzzmI9JBtgQUgOJHacE089D0pNt+zgx4kEqtEUzsTo=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:63:4d:bd:11:22:e4:0d:35:e1:a3:41:6a:68:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Sep 24 13:03:18 2026 GMT
Not After : Sep 25 13:03:18 2026 GMT
Subject: CN=d317985ed2f315737333228ac6530f0331c711e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:ba:9a:2e:9b:ff:a5:1b:4c:35:aa:b8:1d:
2f:fd:f6:4b:d2:6d:d4:31:7f:5f:d3:2f:d1:3e:b3:
6a:b5:f5:a1:e6:df:39:df:8c:37:d7:0d:df:1b:cd:
24:49:c3:65:b5:01:05:88:00:b1:71:07:f7:31:8d:
73:39:94:7f:76:0d:99:cf:62:29:5e:46:50:d1:e9:
77:55:0e:12:08:d8:de:37:74:79:40:c4:1c:7b:71:
c1:43:e6:a2:d7:a3:f6:c2:61:e3:28:e8:97:68:42:
8b:da:1c:7c:42:1c:9d:cc:59:dd:0d:c2:91:3e:8a:
5c:28:b4:66:9c:05:a4:53:3f:48:06:a4:8d:67:d3:
0f:86:40:bd:ad:8e:ac:59:93:7f:9d:12:ab:c2:8c:
78:8e:8f:e0:bf:06:8a:f7:8a:27:62:91:f1:8f:fc:
2e:1c:46:e8:8b:c1:33:3d:46:ff:df:f2:05:eb:4b:
4e:b1:c4:70:62:6c:3f:06:4e:13:7a:8e:50:d4:44:
ac:0c:75:24:2f:f7:1e:8f:0b:eb:68:d4:a4:9b:5b:
10:c5:d9:ca:25:57:41:c4:88:d8:89:d0:2a:77:e7:
5b:a4:95:66:c1:a4:49:0b:ab:37:a5:e3:2f:84:cf:
9f:39:59:81:58:87:4f:e5:1f:9e:64:b4:d1:85:cf:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:98:5E:D2:F3:15:73:73:33:22:8A:C6:53:0F:03:31:C7:11:E3
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ff:54:87:78:2c:6e:ae:ed:26:15:8a:28:9c:d4:0f:ce:79:
c2:61:e7:e9:16:5c:1f:ef:63:69:14:3f:57:0c:2c:64:a1:e7:
89:6f:a1:20:3f:07:b7:89:db:42:51:4e:d8:46:a6:6a:d3:b7:
8c:19:c1:6d:87:cb:a4:28:d1:d8:20:aa:e5:ab:9a:a4:85:df:
38:fc:b9:cf:55:86:9d:42:8e:c2:30:0a:15:de:cb:d2:a7:a1:
ba:36:bf:ba:9f:b8:c0:37:e8:12:db:7e:86:a8:b5:b8:4e:87:
92:1e:17:1d:8f:f4:40:00:f8:9e:ad:c1:85:53:67:1f:d3:6a:
07:75:c6:38:33:1e:62:fb:a1:21:64:c8:24:fd:39:18:74:c7:
3e:40:5a:9f:65:2e:7b:46:87:57:56:00:f1:ff:b7:6a:40:cb:
7b:46:3b:5d:4a:f8:ff:e5:c1:37:92:84:d1:29:6d:4d:2b:5b:
74:42:ca:7b:f0:09:1f:59:96:65:74:fb:c3:8a:cf:c8:ce:da:
fa:1a:8d:56:96:12:21:88:14:c8:3a:07:fe:b7:ba:cd:73:3f:
03:ee:84:3f:3b:89:99:61:97:92:f5:da:62:fc:29:b5:31:0a:
8f:a1:b9:da:ca:d1:32:64:5d:9a:f7:ca:1b:0e:28:83:2e:6e:
78:1e:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:13 2026 by rpki-client