Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: EGXr2Q7KS0hyXxnw1Ttp2iu0F4N4t63C1i88TzE0Zd0=
Subject key identifier: 00:FE:93:D9:BE:5B:E2:E7:E2:18:50:4D:26:E5:6D:F3:6D:55:6E:D7
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 01A10437422A9626A2A36FEC3AEE29B268E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 08CF
Signing time: Sun 04 Oct 2026 00:01:32 +0000
Manifest this update: Sun 04 Oct 2026 00:01:32 +0000
Manifest next update: Mon 05 Oct 2026 00:01:32 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: LVw6pXFCLd9dBNjbMBywe+LdfR1m2yMt3laU2YHmhCk=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:42:2a:96:26:a2:a3:6f:ec:3a:ee:29:b2:68:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Oct 4 00:01:32 2026 GMT
Not After : Oct 5 00:01:32 2026 GMT
Subject: CN=00fe93d9be5be2e7e218504d26e56df36d556ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:7d:ca:7d:76:97:65:67:31:40:e1:cd:be:
b9:ab:1a:22:b0:ff:c7:e2:14:8d:b3:36:c3:b9:ff:
59:5c:38:1f:1e:d5:23:8c:db:6d:45:ae:43:da:eb:
2a:f0:d9:fc:a7:58:7c:e7:7b:31:30:7a:ca:61:d8:
27:49:9a:c2:88:78:59:e1:ec:4b:a3:16:9e:24:e1:
50:3a:87:87:4c:6c:e7:59:9a:98:2f:ee:21:87:24:
39:e4:19:0b:a7:3e:3d:30:c2:2e:4c:6f:a3:6a:f5:
58:2a:4c:ff:00:1b:46:51:53:e9:15:59:57:1e:e8:
bc:b9:24:49:30:86:b1:2d:bb:90:10:7d:fe:b2:d8:
83:6f:3f:5f:46:9c:05:dd:ed:38:9e:0d:e2:74:ef:
ba:2a:c0:d8:72:96:cd:97:22:b7:6f:b4:09:6d:fc:
be:dd:7e:e4:06:40:e6:88:4a:c8:da:a6:53:cd:44:
c5:60:5d:81:42:d0:ce:63:b1:9a:83:dc:86:ff:99:
5d:2b:57:3b:79:44:3f:aa:99:3c:85:19:22:95:98:
81:f9:55:26:1f:66:eb:15:b8:59:f6:09:a2:de:6c:
fd:16:76:27:69:e9:06:27:ef:7f:dd:c6:b4:18:33:
c4:69:81:c3:e2:93:38:3e:7c:a2:82:8d:18:35:37:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FE:93:D9:BE:5B:E2:E7:E2:18:50:4D:26:E5:6D:F3:6D:55:6E:D7
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:4e:4d:7a:c4:59:ce:18:ee:af:bf:9a:e2:f4:66:e7:62:
f2:4d:76:5e:bf:bf:45:e9:37:bc:b0:e1:1b:9a:9b:23:1d:b9:
c4:79:8a:42:ab:97:61:d1:c5:27:fc:32:25:db:82:93:33:f9:
f7:3a:ce:10:e2:42:43:b5:79:55:21:8c:11:a2:7d:2a:07:49:
d9:92:82:79:f1:7b:55:d4:be:06:0e:68:45:ba:a8:6d:f2:c8:
5a:5d:a3:57:ae:db:b0:8a:3a:79:48:7b:42:c5:98:da:7f:d0:
b7:32:cf:9f:b5:89:61:26:df:a9:c3:56:51:55:70:3a:8f:f7:
ff:47:05:c2:12:2e:d8:85:2c:24:96:65:47:17:69:72:94:18:
9a:87:93:76:cb:fd:bd:72:10:9b:fb:9a:6a:f2:3f:07:26:ba:
f5:3e:88:7d:18:15:d8:f1:92:4a:4f:b3:99:75:ca:6e:b1:84:
f0:79:93:77:40:c4:70:b8:ec:05:f8:fe:57:4b:fb:73:1b:e5:
92:98:85:2c:ce:71:4f:b4:29:fa:5d:5d:b2:1b:0e:55:78:78:
4c:02:bf:ce:4d:70:00:e9:ce:8f:ed:e7:44:63:4b:6a:e1:c7:
74:7f:57:71:9f:b0:93:fc:f1:d4:20:de:c0:83:4c:af:3b:b3:
b6:48:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:07:37 2026 by rpki-client