Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: GlxpTSym4qtpP54XRMgn58+SPxKZ6yYGVHmd9CsAjxw=
Subject key identifier: F1:53:BE:14:6C:BC:01:96:CD:C0:3B:35:45:CB:D9:D0:4D:C0:EA:E6
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 01A0D72816A59C80365E6CBF299BCDCDF5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 040A
Signing time: Fri 25 Sep 2026 06:02:03 +0000
Manifest this update: Fri 25 Sep 2026 06:02:03 +0000
Manifest next update: Sat 26 Sep 2026 06:02:03 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: VOPj1hr5dCC3ahjR2eZDOxxlSwc0hiL6TXB5bcDsJGc=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:28:16:a5:9c:80:36:5e:6c:bf:29:9b:cd:cd:f5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Sep 25 06:02:03 2026 GMT
Not After : Sep 26 06:02:03 2026 GMT
Subject: CN=f153be146cbc0196cdc03b3545cbd9d04dc0eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:ec:0f:f8:ae:0d:6a:db:e3:18:f0:f8:fb:
6d:f8:e3:e0:e1:1f:9e:8f:b2:84:d0:78:18:8c:f6:
be:b0:54:48:ce:a2:80:78:b0:db:64:ae:48:4d:a4:
23:10:dc:3c:5e:44:39:c0:4e:a5:47:13:5f:94:00:
cb:dd:4b:44:8c:0d:d0:45:70:98:a6:50:da:b5:0e:
a5:a7:ae:c3:6c:a3:f5:59:3d:22:6e:6b:eb:17:de:
7c:d8:93:94:3e:91:52:e2:99:6a:93:7a:23:63:eb:
81:23:68:1c:61:ce:82:df:67:52:d9:ee:3c:de:b8:
c9:f2:18:f7:b3:b8:74:e4:e1:11:83:01:08:ee:ca:
60:6a:91:3b:67:24:fa:05:1d:ae:f3:1f:12:1a:6d:
7c:13:34:b5:33:f6:5a:fb:c8:d1:9a:f2:39:cb:0b:
55:9e:5f:0a:e3:e3:f8:61:36:9d:90:47:16:cd:d0:
e4:d1:38:9c:e2:b5:1d:f4:73:2a:a5:e6:ee:8f:d1:
79:62:9d:2e:bb:ea:ae:19:d0:15:0a:8d:7f:8d:43:
a1:a4:f9:13:34:61:9f:c3:ec:e8:33:94:b4:c5:b6:
e7:15:b3:35:72:24:12:59:bf:13:b8:53:54:b0:c7:
89:92:d9:af:8c:15:17:24:6b:69:41:18:d7:54:cd:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:BE:14:6C:BC:01:96:CD:C0:3B:35:45:CB:D9:D0:4D:C0:EA:E6
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:43:31:4d:22:89:d4:d2:38:9b:2b:70:07:49:0a:b0:e9:
95:ca:25:34:12:a7:25:0a:80:f0:55:25:6f:52:90:fb:9a:8a:
f0:76:43:c4:99:ec:f2:10:ac:9e:79:a2:78:f3:0a:52:4f:bf:
6c:5d:f3:18:9d:2c:fe:e9:68:a9:8f:50:21:ca:87:0e:66:f2:
d6:dd:d3:07:b2:42:79:d1:5b:5d:3a:05:e7:1c:62:9d:d7:94:
5a:49:c2:78:c2:3a:1f:cd:90:4d:da:0f:ad:5e:2f:0c:c7:ba:
e9:ce:43:64:7f:bf:13:1e:8e:03:84:8e:a4:9c:7f:25:1d:31:
25:41:97:46:41:44:0d:70:9b:2c:bf:f2:a0:5a:d4:96:b3:8d:
17:33:77:cb:78:5e:20:cb:5b:ea:47:eb:24:4b:82:7f:63:12:
b2:0e:26:19:4b:48:54:01:26:8e:8e:f0:bf:56:0a:b4:83:d9:
4e:6b:6d:b0:35:43:c1:c8:33:93:68:1c:47:44:45:44:ce:2f:
31:78:66:bc:73:ef:bd:1f:35:01:7d:9b:80:84:0a:72:51:2d:
5f:a3:c5:65:52:6a:5d:02:ba:cd:6e:61:8b:dd:66:01:30:27:
e0:da:d9:87:a9:2e:68:c3:84:07:86:dd:21:bf:35:27:07:06:
4f:21:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:31:05 2026 by rpki-client