Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: MBJN17ZdnjFYRHAVxT8P7eXdo2Q3mLWdkk3lCJqIzsI=
Subject key identifier: 5E:2A:63:F4:4F:74:28:F4:08:3A:50:17:FC:53:B3:18:E1:F6:A8:7D
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01A0D07FCCAC89A9EF57238C5F11C2DCA933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0CBA
Signing time: Wed 23 Sep 2026 23:00:31 +0000
Manifest this update: Wed 23 Sep 2026 23:00:31 +0000
Manifest next update: Thu 24 Sep 2026 23:00:31 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: qQEElC7hURNWj4uAuP7yPhcMinrtjMCdQJv9/xm5fsc=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:cc:ac:89:a9:ef:57:23:8c:5f:11:c2:dc:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Sep 23 23:00:31 2026 GMT
Not After : Sep 24 23:00:31 2026 GMT
Subject: CN=5e2a63f44f7428f4083a5017fc53b318e1f6a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:31:17:fd:99:d5:51:76:53:08:ff:0d:76:
04:b4:7c:a6:b6:32:be:de:ca:6b:e3:c5:0c:5f:33:
2f:ca:63:a5:45:b5:59:34:f0:f0:40:85:45:bc:00:
1a:3e:39:41:99:e5:cf:a3:2b:f1:c6:85:25:64:72:
9d:62:09:d8:63:f3:4b:dc:a8:59:bf:db:47:16:5e:
42:3e:d3:62:0a:c8:d8:97:ea:8f:84:e4:32:5a:cb:
f4:af:e9:2c:a6:d3:f4:0d:7c:ef:4a:8b:6c:01:e3:
ef:a6:53:06:68:6b:6f:6b:7a:21:08:56:a8:b0:3d:
20:b0:db:f7:f8:c2:dd:92:e7:f3:72:3c:82:fb:2e:
60:d8:aa:9b:62:e3:f3:47:13:9d:18:3a:a6:2e:29:
23:81:70:05:aa:57:e7:38:aa:e2:bc:6b:94:cf:6d:
22:45:44:b9:dd:93:94:83:f7:82:8f:86:5a:b7:83:
92:e3:57:53:47:5c:5b:7b:e1:ac:e0:02:98:93:87:
72:f0:9f:97:0e:e4:56:20:41:99:08:9d:15:68:98:
ee:58:39:8c:26:a8:9d:54:d2:1f:8c:cd:1f:af:15:
24:65:76:2f:4c:ce:74:62:84:03:d3:fd:2e:0d:db:
99:97:97:72:63:35:e2:f4:02:1c:ba:71:f9:0f:86:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2A:63:F4:4F:74:28:F4:08:3A:50:17:FC:53:B3:18:E1:F6:A8:7D
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:64:7c:95:7e:06:e8:60:b2:a0:7b:42:23:f9:62:ef:c9:
70:fc:e1:cd:6d:34:3e:fa:e0:d1:46:89:d0:fb:d3:db:18:7f:
d3:c3:07:d2:5d:88:b2:b4:1a:77:29:1d:57:4e:d1:43:ac:d7:
f5:65:63:5c:f5:42:4b:37:cb:7d:17:78:3b:9c:e2:9f:00:1d:
ed:21:5a:8e:4c:d2:f2:27:af:6d:2a:01:0c:dd:0a:4d:6f:03:
49:83:f7:c6:06:ff:4f:9a:6b:f6:19:22:75:5e:2d:77:9c:54:
73:64:cb:a6:bc:62:af:98:e3:ee:12:41:66:30:90:7d:cc:a7:
cf:f5:cd:15:be:75:da:9b:05:cd:15:6f:b7:33:18:b9:09:ef:
da:26:49:a5:94:c7:41:db:1f:5d:96:0a:74:5c:8d:8d:46:55:
87:69:72:9a:7c:3f:b0:6b:bc:6c:15:bb:cd:42:5b:34:f4:1a:
c1:89:70:bd:ce:a1:e1:c2:91:55:0b:22:3d:bd:cd:40:fb:ac:
a1:5f:e5:c8:aa:af:01:80:5e:21:b6:17:8d:2a:4d:36:c8:cc:
a5:5a:fb:89:18:56:52:7e:06:95:9a:41:1f:c6:a7:8c:9d:2c:
05:3c:84:7c:e7:a8:9e:d3:42:2b:48:59:26:6c:4e:ab:76:c7:
48:21:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:40:17 2026 by rpki-client