Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
File: 1-ItEPpksZlZYlC5okNKY1ozeZCU.mft (raw, json)
Hash identifier: uJcyBb97QTUKpIHf6nGjtYRADfcByjms2jZjhRt4SOo=
Subject key identifier: 68:65:C3:3F:B8:F0:D9:9C:53:71:08:41:A8:BA:1E:65:32:C8:90:F3
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 01A0EC2F382F92A83AB6AA947EF29C2C7F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
Manifest number: 0227
Signing time: Tue 29 Sep 2026 08:01:52 +0000
Manifest this update: Tue 29 Sep 2026 08:01:52 +0000
Manifest next update: Wed 30 Sep 2026 08:01:52 +0000
Files and hashes: 1: 1-ItEPpksZlZYlC5okNKY1ozeZCU.crl (hash: 9226CKnXIJ73xbSYqzVNeY0mF3pBr84T1wOKkZPkdaU=)
2: 560UvqVud9DEuhQPr1x60Rz_4no.asa (hash: R22iZnCp/y6i8IZet00/Fkh5m7KFKy8c2ikVMY1ramc=)
3: Kf9QvVgVrtl0XM8frEpJ_fd4yfM.roa (hash: fg4f8lm5urIblTtWM6P0oF5ZkLFnBYAOFc4g9paZJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:38:2f:92:a8:3a:b6:aa:94:7e:f2:9c:2c:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Sep 29 08:01:52 2026 GMT
Not After : Sep 30 08:01:52 2026 GMT
Subject: CN=6865c33fb8f0d99c53710841a8ba1e6532c890f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:31:a1:fc:7b:90:ef:98:f6:2e:30:d6:22:
d3:6d:40:8a:97:80:ce:ce:5f:3f:df:ae:f6:35:66:
e5:5a:21:22:c5:43:27:fc:5d:5d:a3:bb:d1:d1:60:
2f:1d:95:9d:51:b1:24:6b:38:57:76:54:f5:0a:27:
7d:e4:12:22:d5:e0:1c:c6:c6:65:1e:ba:dc:33:59:
e3:80:7a:3a:2d:8d:bd:58:dd:22:d0:64:28:a2:3c:
72:fa:7d:36:4b:de:61:b3:c7:16:80:f7:2f:7b:c0:
49:da:90:04:f1:f3:49:d4:89:61:93:02:09:cd:d9:
6b:8b:cc:28:1b:33:eb:81:bb:72:93:86:a2:99:af:
c9:cc:80:e8:4f:aa:ac:6c:fe:51:7e:fe:68:b8:89:
be:8d:ac:67:94:33:f7:98:06:f2:fa:be:66:a0:ca:
dc:77:9f:0d:23:c2:a5:6a:11:f2:1b:29:df:1c:fd:
ec:5f:aa:16:78:80:1d:43:29:b7:94:f6:35:22:d2:
d5:04:87:c5:2e:96:83:6d:1b:88:da:93:87:b8:d3:
67:91:d3:c1:1e:82:32:63:dd:a6:fd:17:1f:1b:3e:
18:42:5f:fd:30:81:27:8c:f5:a8:98:03:35:6c:7b:
74:7c:3b:02:46:c4:d0:8e:42:bc:2b:bb:7b:41:5f:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:C3:3F:B8:F0:D9:9C:53:71:08:41:A8:BA:1E:65:32:C8:90:F3
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:84:5d:da:7c:e3:4d:d8:c9:02:c6:d9:4b:18:da:22:2a:b7:
97:e4:49:a5:d2:1a:9c:fe:be:b4:20:03:1f:42:82:13:43:29:
c9:c7:98:a3:c2:1e:9e:a4:9d:22:e3:9c:4b:69:1f:a2:c4:88:
39:e3:df:ca:8d:d6:81:32:dc:c0:72:d3:ea:38:60:8d:62:e3:
07:ab:24:6d:af:db:48:89:ea:c6:6b:ee:9e:74:86:99:95:80:
72:bd:da:c5:ae:8f:6e:9f:09:9e:c5:99:ef:cd:a0:b1:dc:96:
4a:24:1c:05:27:42:bf:67:98:ce:eb:bb:48:44:34:1e:12:b3:
30:08:15:36:78:17:c6:7b:81:76:ca:cb:63:0e:91:24:28:35:
ce:d9:8a:24:f4:de:fc:13:d1:91:0c:99:42:8c:c1:6d:4e:92:
89:10:b1:43:5c:cc:19:3e:14:70:55:3b:8b:34:1a:f7:20:1e:
6b:98:ec:9d:d8:87:29:30:49:d7:1e:98:36:cf:99:94:b0:92:
38:fc:44:b6:2a:38:88:0a:1c:fd:85:15:38:d4:34:15:91:70:
3e:f4:ae:e1:8d:0c:7b:63:0b:45:5f:37:25:79:2c:70:03:3e:
0a:e7:e1:c9:c6:c3:de:8a:7d:5a:8c:bb:fe:92:5f:b2:9d:39:
1f:89:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:56:37 2026 by rpki-client