Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier: UcfMxOct7rWPyRgN3+ZVyBqf7d50foeKIEfU/eLYYKU=
Subject key identifier: C1:E5:DF:AC:0A:0F:95:9B:25:5D:85:C9:B6:D4:86:C8:A3:77:25:80
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial: 01A0D917C070DC821195AE8E2121628D8FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 15:03:27 +0000
Manifest this update: Fri 25 Sep 2026 15:03:27 +0000
Manifest next update: Sat 26 Sep 2026 15:03:27 +0000
Files and hashes: 1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: gbr30AD+V6Q83BmJLcGMn8FejeoBJWBMOMGRkdH5mX8=)
2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:c0:70:dc:82:11:95:ae:8e:21:21:62:8d:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Validity
Not Before: Sep 25 15:03:27 2026 GMT
Not After : Sep 26 15:03:27 2026 GMT
Subject: CN=c1e5dfac0a0f959b255d85c9b6d486c8a3772580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:66:42:cc:7c:1f:eb:0c:56:20:85:ce:b9:
ac:d6:a4:0d:06:c0:36:dd:83:c5:23:ab:61:02:3e:
5f:0a:78:95:90:ac:12:c6:bd:21:d8:ac:64:cc:9c:
f4:bf:bb:e2:06:36:63:a2:9b:d1:5e:ef:7c:f7:d8:
28:3f:7a:56:a8:aa:82:a6:66:dc:d5:a3:b2:08:37:
62:28:f3:63:28:3b:45:6c:a9:0b:fe:32:b0:e5:9b:
44:d8:94:2c:75:0e:4e:c1:07:d8:98:39:03:43:a9:
3b:0b:c6:e7:bd:5f:b4:de:da:11:b7:04:86:8a:85:
38:27:0c:96:31:24:b2:11:1e:b7:06:9f:d4:f8:d5:
d2:c2:46:25:0c:74:69:f6:df:5c:1b:5e:72:be:41:
ca:ce:ab:9f:10:5f:e3:e1:03:97:7e:1a:4f:f1:1d:
4f:49:f9:f1:d1:78:25:df:eb:8e:70:a1:f6:cb:3e:
2c:47:87:97:82:c0:b9:89:6e:e5:44:b7:ec:32:63:
ea:11:5f:07:25:06:39:8f:b8:91:fd:2a:fd:3c:c2:
0e:90:8e:02:4e:c7:a9:fa:68:04:b4:cf:54:2e:d7:
22:de:78:84:54:84:ff:3b:a2:3b:91:22:8f:7f:d9:
f0:22:09:de:c2:9b:ab:9f:28:91:65:f0:e0:46:41:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:DF:AC:0A:0F:95:9B:25:5D:85:C9:B6:D4:86:C8:A3:77:25:80
X509v3 Authority Key Identifier:
keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7e:cb:e5:fa:c8:05:c1:7a:c2:9e:05:92:d0:a7:b4:ef:c5:
ff:5e:cc:ee:a9:9a:7c:c8:e3:a4:64:9d:1f:11:6f:e6:3d:8e:
8d:2c:05:ca:3f:68:84:3f:85:4c:40:fa:91:be:b6:18:f7:17:
05:9f:71:39:f2:06:0f:f3:21:d6:8d:a0:76:15:6b:97:26:fb:
15:00:8d:e4:cf:47:01:44:6a:b5:d9:aa:f6:2d:d1:0c:a2:b5:
1d:7d:0a:21:b2:06:ab:fa:70:2c:ba:93:c3:ab:06:4e:a0:d7:
a6:2c:4d:85:7c:ca:80:3b:b2:77:e1:0f:90:9d:ba:cd:1c:7b:
46:ef:9b:e6:65:ce:f3:11:f8:35:d1:21:a8:ee:d2:05:e4:46:
87:3b:74:87:8d:e5:51:75:57:53:0e:2e:59:f7:17:4e:3e:68:
b7:89:08:a5:d8:97:be:fb:30:a1:db:03:60:7d:5f:79:97:d4:
06:26:96:c9:3a:64:5f:1f:dd:a9:97:7e:75:c1:53:74:1f:51:
7e:04:7f:2f:f1:f0:7b:ed:71:c6:68:aa:fb:13:86:a3:01:a3:
05:49:46:86:d8:bc:eb:70:37:8b:81:dd:c0:e9:cb:9f:2d:ab:
cd:70:76:5a:0d:73:da:f6:78:94:65:31:6d:41:b8:44:cf:d6:
2d:93:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:12:49 2026 by rpki-client