Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: LSTGku8FBQaPjBa/NVbqljFdpzASCPfVzPZkpuUaF88=
Subject key identifier: 7B:AD:BA:F6:08:0A:8A:73:9B:2A:C2:69:0F:DC:23:81:63:59:B3:F4
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 01A0D15C292CCC3766A29A2B2B0914530CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 12F3
Signing time: Thu 24 Sep 2026 03:01:12 +0000
Manifest this update: Thu 24 Sep 2026 03:01:12 +0000
Manifest next update: Fri 25 Sep 2026 03:01:12 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: PiaJs+aX2efYeIu9xzuqpUinx+5HDqhC12RYPe5cDlU=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:29:2c:cc:37:66:a2:9a:2b:2b:09:14:53:0c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Sep 24 03:01:12 2026 GMT
Not After : Sep 25 03:01:12 2026 GMT
Subject: CN=7badbaf6080a8a739b2ac2690fdc23816359b3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:a2:1a:70:6c:86:96:e4:89:94:f6:47:4f:
6c:cb:1c:ea:a1:c6:d7:cb:65:dd:29:a8:64:e9:c7:
7b:00:70:b5:c1:d7:0d:46:1e:c7:b8:a8:15:d0:1b:
c3:2b:26:67:c8:fc:a7:b9:dd:9b:4e:3b:27:03:53:
37:48:86:86:0a:ac:07:0d:b9:b8:49:98:d6:4a:7f:
b6:cb:52:b2:8d:e9:ce:6f:83:19:11:48:a9:7a:94:
48:b1:44:15:b8:8b:9b:99:07:4e:e0:1d:a1:43:11:
b1:c7:5a:10:41:a8:08:a3:71:2d:70:b3:17:a9:aa:
a4:e0:3e:cd:be:2a:b9:5b:39:b9:b4:41:f5:3a:36:
ff:28:94:bd:ce:8f:f8:9d:8c:93:c1:5b:8d:bb:09:
90:44:ab:96:e1:d9:b9:2a:ed:48:03:6b:f8:86:c7:
cb:71:5d:8a:fb:1c:2f:f8:62:93:52:59:a4:46:5f:
a2:26:8e:a3:13:ee:2f:5e:68:fb:ee:78:9d:42:54:
59:27:f8:28:c9:55:94:2f:c7:0a:69:38:a9:aa:72:
da:bc:4c:c4:77:ea:3a:ba:cf:a1:cd:cc:f0:ff:e4:
80:f5:05:01:69:c9:94:70:fb:ec:1c:0e:2b:e9:4b:
0c:12:69:d7:5c:f7:79:6e:32:57:11:ec:dc:50:85:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:BA:F6:08:0A:8A:73:9B:2A:C2:69:0F:DC:23:81:63:59:B3:F4
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:12:e7:8c:e0:9f:d7:59:3f:c4:de:77:68:dc:ef:03:d1:
99:7f:78:47:75:c2:dc:0d:98:83:1d:c8:f3:90:1a:87:65:48:
8c:19:6c:6a:f8:fb:76:0d:3e:ca:9f:7d:2a:c8:04:d0:fb:fc:
0b:fb:bd:f4:4a:d1:46:c9:de:90:fa:75:29:8a:9e:8c:a1:22:
bd:f5:97:b5:5c:00:75:f4:ed:22:75:5a:c3:24:ce:e6:9e:d7:
3a:72:ee:cc:1e:61:dc:07:89:4d:6b:3f:97:06:bb:04:59:ba:
20:52:37:55:6d:52:ad:c8:85:8d:03:c9:ae:d8:0b:fd:a7:6d:
5e:90:cc:a4:ce:ee:d0:63:24:89:8a:38:2a:6a:dd:27:e0:e9:
bf:e0:b5:8a:a5:62:e4:0c:77:0c:85:29:5f:ba:19:fc:ad:74:
fe:97:cb:10:dc:ff:86:f9:2c:61:e8:6b:04:af:01:27:7e:da:
a5:82:e8:44:08:83:c5:e5:9c:cd:c9:a3:f4:8a:ba:04:b1:53:
41:93:f5:fa:87:a6:ee:9c:be:e0:b3:86:30:1e:5a:03:31:02:
cf:ec:05:34:28:02:9f:8a:06:b7:f5:a0:7b:34:13:ed:1e:e0:
1d:1d:73:8c:26:7b:e4:b1:1a:e3:04:42:e0:12:33:30:46:02:
01:57:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:29 2026 by rpki-client