Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier: QEzHLzfvR+tyHx8F+e9VDwWMl6KUPG/tudfsXIo9Zpc=
Subject key identifier: 5D:D6:82:27:11:DB:57:AA:48:BD:82:89:A0:F2:BF:6F:55:8D:C9:4E
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial: 01A0D0EE62A869839350F39270DC9C5A433D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number: 03B2
Signing time: Thu 24 Sep 2026 01:01:18 +0000
Manifest this update: Thu 24 Sep 2026 01:01:18 +0000
Manifest next update: Fri 25 Sep 2026 01:01:18 +0000
Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: 5lBvCEz8Hum/vnqGJftRRxjZ/pqmeN/TJazq80QaQ6I=)
2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:62:a8:69:83:93:50:f3:92:70:dc:9c:5a:43:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Validity
Not Before: Sep 24 01:01:18 2026 GMT
Not After : Sep 25 01:01:18 2026 GMT
Subject: CN=5dd6822711db57aa48bd8289a0f2bf6f558dc94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:a2:1e:46:f0:8d:fc:39:08:42:eb:32:a0:
23:66:21:f2:bf:d0:45:37:3f:b7:3c:77:a0:31:e4:
01:32:bc:5c:85:44:6a:78:83:8c:6c:ed:05:8f:34:
49:fa:bd:6d:88:38:d2:9a:34:6f:63:66:e7:7b:c2:
4c:7a:6c:d7:7a:5d:90:bc:13:88:49:46:df:23:bf:
77:91:ff:7b:18:be:21:64:83:56:32:1a:32:47:cb:
4b:3a:0b:35:55:13:ec:ee:11:55:00:a6:94:22:68:
94:ff:02:7c:17:7c:7c:d7:9f:6a:57:33:67:1e:37:
40:72:be:8b:3b:ad:44:dd:02:2e:d5:fc:00:3d:cb:
fc:d0:9d:07:44:84:0f:ed:90:37:68:a3:f4:15:f9:
48:ab:b6:b9:b9:6e:cc:09:33:27:fd:a0:9d:59:d9:
47:c2:88:46:00:5b:1c:c6:ae:88:00:7c:a5:ca:07:
a0:68:45:25:28:12:d7:25:b6:ba:95:7a:43:f1:95:
08:e4:fd:cb:5d:89:f9:d6:90:10:22:7f:b8:d2:10:
37:bd:9a:cd:fa:86:5b:fa:67:5b:2f:b2:71:f6:5f:
fb:a0:ed:a3:70:dd:92:b0:23:2a:a0:06:6a:47:83:
42:fe:cf:4b:15:f6:b7:ff:1b:ef:5e:94:ff:e4:87:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:82:27:11:DB:57:AA:48:BD:82:89:A0:F2:BF:6F:55:8D:C9:4E
X509v3 Authority Key Identifier:
keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6f:04:b9:10:71:3c:9a:87:5b:33:b4:80:2c:2a:68:d2:eb:
07:93:e4:16:fc:c0:95:ec:a5:07:f8:83:73:01:73:d6:83:8d:
98:45:d5:e6:72:3c:6e:e4:51:dd:d5:9a:7d:37:09:f1:3e:96:
7e:cb:b8:01:bd:a0:dd:b2:00:6a:41:49:e5:1a:c6:3f:65:5f:
ab:1f:ff:44:fd:d5:b9:3f:a1:27:39:cb:45:b8:e2:12:fc:23:
7b:22:08:83:1a:96:23:4d:7b:86:16:89:1c:8f:9f:8e:6b:78:
97:d8:0d:44:78:97:4e:d7:c5:bc:05:a3:a3:7a:1f:30:86:8e:
4c:2c:49:b0:2f:1f:85:26:78:ef:52:5b:f7:f0:38:45:66:c5:
45:56:f2:00:11:87:e5:e7:b2:16:e0:1b:60:75:63:65:3e:de:
66:cd:a1:a9:46:a2:d4:88:12:cf:86:34:82:93:06:40:78:40:
db:4e:c0:24:82:82:a7:84:ec:50:e7:6f:bf:6f:5d:ee:49:09:
99:a9:40:dd:5c:e1:43:7e:eb:d4:fe:81:bc:26:b7:f0:e9:f8:
5a:64:f9:08:b3:16:61:5c:f3:4e:9b:43:a8:59:ff:4c:77:1e:
2e:58:78:36:76:11:a4:41:a0:d4:fc:3c:98:f2:17:3a:eb:99:
71:b6:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:56:43 2026 by rpki-client