Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: hget8+AiJ1ziTkYhQFUKmEEyWfNn85THSCML1mc9MS4=
Subject key identifier: 9B:DD:D6:2E:A6:4C:F1:F4:8E:9D:BF:D2:DC:8E:F9:D6:E0:39:7D:5D
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 01A0D8A85F0A75EFA466ECCBA6B43341BDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 13:01:48 +0000
Manifest this update: Fri 25 Sep 2026 13:01:48 +0000
Manifest next update: Sat 26 Sep 2026 13:01:48 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: sVwQIWOvzy13zNud9Iu9KFL/ps2RnLsgYBn14D+LzJw=)
2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:5f:0a:75:ef:a4:66:ec:cb:a6:b4:33:41:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Sep 25 13:01:48 2026 GMT
Not After : Sep 26 13:01:48 2026 GMT
Subject: CN=9bddd62ea64cf1f48e9dbfd2dc8ef9d6e0397d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:1a:07:fe:c2:c2:f6:16:79:ad:06:87:ee:
51:a3:48:42:fd:62:d8:22:ae:1a:62:bf:68:c0:80:
af:db:8b:2b:7f:06:74:5d:6f:3f:42:c9:df:02:1e:
72:52:6c:5f:68:6a:31:93:04:52:07:88:27:51:cc:
cd:d6:2f:6a:67:be:8e:5d:9b:36:c5:41:16:25:b5:
f5:1d:8c:ab:6a:c8:a8:d0:2b:00:7d:c8:8e:c8:76:
32:52:93:fd:57:e7:2c:ab:65:ed:9e:b5:b8:b7:94:
bf:3c:e8:9c:26:74:84:be:10:ad:20:9a:49:40:7e:
0a:be:09:e1:b7:0b:88:ed:f0:8c:47:21:33:50:cc:
80:24:35:08:25:bb:13:6e:db:6f:96:42:8b:9d:5f:
a1:1d:fd:5d:97:b1:2d:e8:23:2b:be:55:a7:b9:7f:
ec:7f:7c:c7:c8:7e:5f:5f:31:a2:90:f7:a7:aa:c2:
a1:da:12:84:ec:ca:21:d6:b6:9f:c1:59:2b:6f:c4:
2b:42:e3:11:c4:79:e6:3c:b0:0b:e9:b9:db:e7:41:
b0:f5:62:e0:34:a8:ab:5f:5c:5f:1a:58:b5:56:ae:
ab:4f:ca:d2:b2:d6:76:fb:dd:54:fe:af:84:8a:bd:
c8:be:e1:a5:4a:8c:93:4e:b2:b7:57:09:30:19:ac:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:D6:2E:A6:4C:F1:F4:8E:9D:BF:D2:DC:8E:F9:D6:E0:39:7D:5D
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:c9:f2:a0:67:41:1f:a8:75:c5:e7:69:31:99:89:c7:f9:
61:5a:21:3b:67:44:f6:df:6e:03:cb:80:38:67:10:73:f1:49:
1e:18:0f:8a:08:a4:23:f0:95:ae:1d:57:67:f4:d0:49:28:89:
6b:11:e9:c7:b7:3f:b9:3f:c2:ee:78:c6:66:0a:79:b0:bc:fc:
b5:e5:d6:23:7d:bc:77:89:db:98:70:38:5d:6d:b0:5f:07:6c:
92:2b:18:76:0c:d8:ba:1b:c8:a6:e1:c6:4b:4c:e2:90:6d:e6:
dc:21:3f:71:60:82:fd:ca:5e:57:85:d7:0f:8a:9b:64:4a:ba:
cb:9d:be:10:f3:87:88:02:8a:13:65:22:37:41:c5:50:f5:90:
72:00:e5:77:a0:4c:ef:88:51:2c:9c:25:95:61:b9:aa:a6:05:
67:96:7d:90:4b:49:7b:98:a9:5b:73:d3:81:58:46:4c:73:b4:
94:ad:9f:7f:5d:54:fc:06:ba:8f:32:9d:38:17:b9:ac:e4:d1:
b0:27:e1:52:34:f9:ed:1c:44:b3:36:e8:97:bb:1f:79:e0:9b:
6b:d4:7e:8b:f1:0e:66:fb:54:a0:a3:44:84:c9:8f:30:ea:14:
46:9e:f0:d4:54:19:6c:c7:f9:19:bd:ef:c1:65:59:2e:99:31:
45:79:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:11:16 2026 by rpki-client