Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: GBYEFMNbTFcdTkwru81sP8MCkfHWHGZ5lS8+B056PPQ=
Subject key identifier: 99:4F:AB:A3:BB:BA:9F:58:5B:3D:78:DA:E6:1E:D8:C4:47:DA:47:97
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01A0CE5A515A20E2D34DE4C940ABCB8FD679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 19E9
Signing time: Wed 23 Sep 2026 13:00:20 +0000
Manifest this update: Wed 23 Sep 2026 13:00:20 +0000
Manifest next update: Thu 24 Sep 2026 13:00:20 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: HDeECftZTz8TfZMJe3HYB7B5TkK+kT7wfQvp3cBVdJQ=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:51:5a:20:e2:d3:4d:e4:c9:40:ab:cb:8f:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Sep 23 13:00:20 2026 GMT
Not After : Sep 24 13:00:20 2026 GMT
Subject: CN=994faba3bbba9f585b3d78dae61ed8c447da4797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:dc:2a:89:93:ad:06:7b:da:ae:48:90:33:
28:c0:f6:ff:1f:07:36:ec:a5:6f:a2:6f:71:bd:4a:
32:3e:42:2e:4b:44:9f:0f:c5:6a:40:b4:0f:6e:5e:
9b:a6:0b:66:5e:43:15:b4:32:9d:21:e7:5c:b9:df:
bd:f7:1f:6f:b5:ee:74:26:0c:1f:a4:e3:8b:04:96:
e4:cd:df:ee:15:1a:ab:16:df:55:2c:44:d6:58:1c:
58:0c:1c:b0:d1:39:57:f4:6b:71:f2:dd:2e:52:62:
55:e2:ed:ec:7b:11:07:d2:d0:56:f0:9e:f3:6f:8d:
dd:92:22:18:2e:a3:70:0c:1c:09:df:ca:37:14:8c:
a0:b8:e6:67:9f:82:37:f3:d7:5b:17:e3:fb:39:c0:
3d:66:2e:c0:b8:4d:9a:df:dd:42:a6:2e:62:78:fa:
5c:92:fc:0a:af:18:2b:2b:d9:63:59:1b:62:f8:97:
5c:6c:86:30:73:f0:10:90:cd:32:8a:73:ab:6d:75:
fc:16:80:23:65:98:e1:83:a9:9b:48:a7:01:3e:4f:
61:8a:3c:e3:0e:2d:c4:e5:ce:32:78:08:8d:1c:a7:
75:ea:cf:4d:ee:e4:48:02:aa:8b:01:50:af:02:e0:
02:00:72:50:6b:99:23:95:cc:3b:19:94:dd:ae:71:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:AB:A3:BB:BA:9F:58:5B:3D:78:DA:E6:1E:D8:C4:47:DA:47:97
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:df:e3:c4:77:f4:f7:1e:1a:fc:d4:74:9e:e8:5b:56:23:5b:
25:fd:5d:ac:99:90:c9:2f:fe:3b:14:91:89:57:6b:ef:87:a4:
96:ca:0e:94:72:38:b7:c7:44:ec:bb:51:0d:57:63:d9:ba:73:
00:44:fc:3d:40:a5:01:1d:2a:e7:c5:e7:1a:f3:d8:e0:4e:5f:
09:16:2b:03:39:14:7e:c7:3e:59:f9:0c:5a:de:e0:9c:17:8b:
21:c8:55:3a:8b:36:c7:0f:fc:26:6f:dc:a7:cb:73:6c:e2:40:
95:d1:62:e5:a9:f4:e8:56:56:ef:ab:d3:1c:5a:7c:85:ba:98:
00:77:6b:77:09:a8:15:c3:04:77:87:f9:2a:b2:fa:43:40:8f:
cf:0e:89:09:d1:6d:a4:6d:01:b8:cd:04:c8:9c:4b:f5:1a:22:
35:3e:84:d0:a0:b0:cd:0b:78:26:1d:be:b6:76:98:cc:21:3c:
04:ea:ab:70:e0:75:b8:aa:c5:31:e0:79:ae:58:ac:c8:9f:d0:
bb:cc:98:96:e8:31:5b:b6:15:df:67:0d:72:7a:63:8f:f0:c7:
6b:1f:52:c3:f2:fa:7f:81:1c:59:24:0c:e4:c8:5c:58:8e:79:
cb:2e:dc:ba:5b:93:48:71:b1:7b:cd:f1:ab:85:cb:d7:e6:e7:
f7:89:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:59 2026 by rpki-client