Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: 7Zq5G5BZ6/UAZgMOXtg0kfsGUDlXOjfa0X4gAVugk3c=
Subject key identifier: F7:20:EC:A3:84:EB:0C:75:28:4C:6B:4A:B4:CE:01:7F:EF:C6:35:98
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01A0D15BA0A29B181ADCD79521C34AF17608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 03:00:38 +0000
Manifest this update: Thu 24 Sep 2026 03:00:38 +0000
Manifest next update: Fri 25 Sep 2026 03:00:38 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: b13EIQtkWB34F/Mjeoj0vBc0WHTNWSRMTlDcFH4iRg0=)
2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
4: 7OXas1BE939lVr3MLLkFfgwwLME.roa (hash: FALGOD2pTrLC0LwxjWMNOoQIcuSrSVg8619SA2u9eio=)
5: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
6: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
7: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
8: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:a0:a2:9b:18:1a:dc:d7:95:21:c3:4a:f1:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Sep 24 03:00:38 2026 GMT
Not After : Sep 25 03:00:38 2026 GMT
Subject: CN=f720eca384eb0c75284c6b4ab4ce017fefc63598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:c4:3b:03:bd:02:c6:9f:31:83:29:1b:f0:
5d:7d:4d:61:1e:8f:32:e2:88:ac:e9:85:f5:25:2b:
a5:32:6a:28:1f:9b:28:e2:50:f6:88:0a:38:35:48:
1b:de:a9:f6:db:b4:81:dc:9f:f8:83:dc:8f:ec:4f:
35:4a:fa:55:61:06:20:f3:a0:30:63:86:49:9c:41:
ff:4f:9b:d3:dd:b7:9f:ef:23:84:80:1d:03:f5:57:
80:f3:88:84:6d:11:1f:50:25:a6:59:d6:4d:5a:da:
e4:74:f8:b2:9c:f4:1c:10:77:2f:2e:52:b6:46:6d:
74:76:47:14:04:d3:81:52:0b:8c:6c:a3:b4:b4:c5:
fc:42:56:32:42:bc:ad:4a:b5:30:d8:c0:41:e8:98:
ed:a6:16:6e:f3:27:2d:ec:e4:e2:68:7f:9e:b4:d2:
31:c0:5d:a3:55:8c:94:a5:e9:98:b2:ac:e5:a0:3a:
bf:d3:4b:89:c5:14:0c:2d:4b:8b:3f:94:24:d4:07:
0d:c2:77:2b:ec:8e:84:c9:11:dc:de:2c:eb:b7:27:
1d:01:04:e5:20:b0:ea:f5:c1:91:9b:25:bf:44:53:
68:9d:0a:30:c8:38:3a:d9:f8:23:3a:ea:4b:96:f9:
b2:20:72:a9:8b:14:94:32:ec:45:3c:93:de:97:40:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:EC:A3:84:EB:0C:75:28:4C:6B:4A:B4:CE:01:7F:EF:C6:35:98
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:da:70:d5:91:31:f6:12:ec:68:17:e6:52:5e:9c:96:d9:
86:d7:89:30:49:6c:c4:00:70:ae:e9:8e:18:36:ac:b4:a5:84:
3b:e8:02:79:59:bb:ee:7e:24:48:4c:86:2a:0e:ff:54:88:15:
07:23:15:ee:d7:e6:a5:30:da:a1:dc:15:71:32:e7:f9:f1:ce:
64:dd:8b:bc:b0:6a:ea:f5:bb:d7:60:8a:3f:3d:bc:65:98:8d:
e6:5e:0e:f5:83:f9:ec:43:7b:0a:66:fe:ab:4a:bf:1e:a2:fb:
19:2e:25:52:2d:b3:1a:58:a4:b1:3c:68:f0:31:bf:6d:c3:e3:
4a:e6:d8:03:98:09:eb:21:9a:4d:56:a7:41:46:78:f4:e1:4f:
14:c7:84:c4:38:56:20:bf:97:e2:48:6c:e2:9a:ed:2b:01:27:
bc:ec:60:0a:8b:7d:f9:c4:8f:f8:ad:99:a2:02:70:cf:65:ed:
ab:41:5b:54:7f:a8:0d:a0:e6:5c:a5:d1:22:0c:be:a1:28:70:
71:45:bc:03:23:71:1c:69:25:6a:b5:7c:22:6a:8a:2b:9a:db:
d6:22:0c:c5:88:ac:88:24:da:36:91:07:60:52:08:e8:29:76:
35:9d:9d:93:9d:35:8b:3a:b2:4b:3d:d2:ca:7b:b0:44:ce:73:
d1:ed:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:40:58 2026 by rpki-client