Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: zZxhKhn/DuZMi7GZgjRUbPYd/4amHfCbCJg9HiMyqtI=
Subject key identifier: 05:83:23:72:B0:65:A0:8A:BA:3B:B4:5E:1B:70:CC:E3:00:A8:93:E4
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 01A0DA5F3B91A7189A47BD18C83E67697843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0B5A
Signing time: Fri 25 Sep 2026 21:01:09 +0000
Manifest this update: Fri 25 Sep 2026 21:01:09 +0000
Manifest next update: Sat 26 Sep 2026 21:01:09 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: wgPSlygel+sL4wUQx+2X4jwJhxm3mvm0WMh9i5iceLk=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:3b:91:a7:18:9a:47:bd:18:c8:3e:67:69:78:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Sep 25 21:01:09 2026 GMT
Not After : Sep 26 21:01:09 2026 GMT
Subject: CN=05832372b065a08aba3bb45e1b70cce300a893e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:8d:24:b4:c8:8f:e7:dc:9e:e4:3d:64:da:
39:de:fd:b7:09:00:02:a8:ec:a8:c0:e3:ad:66:84:
5a:13:54:bd:8c:75:47:9b:cb:26:00:8a:18:dd:fa:
cb:61:40:d4:67:75:d9:66:80:b9:eb:39:0c:fb:4a:
c9:8a:49:19:c1:02:ac:65:b3:c8:9c:28:ab:b0:9f:
e5:f9:8f:65:1b:63:7f:4a:b7:1b:2f:e7:2e:33:7c:
84:8f:f7:d8:4f:e6:47:13:5a:81:7e:b0:1d:b3:9d:
aa:d1:fa:e5:e2:c8:00:a4:1d:17:25:36:53:d9:d9:
de:ca:eb:c4:eb:38:96:b1:5c:14:9d:b6:8b:a2:6b:
07:96:59:65:74:c4:65:ab:b9:4d:f3:d4:09:6d:27:
7f:99:11:0c:6e:d1:b4:5d:78:51:7b:5f:71:47:4b:
c4:71:eb:70:33:8b:9b:08:32:cf:24:a1:ba:64:b0:
e8:a8:b5:15:0b:66:6f:89:82:f1:02:d0:96:b2:a0:
17:99:9c:10:7a:cf:03:d3:b2:96:49:3f:75:45:bf:
fa:1b:c1:2f:b4:c5:ef:d0:68:60:11:fb:15:41:28:
2d:91:e4:1e:47:c2:c3:d8:b9:a1:74:1e:16:77:72:
df:9c:eb:80:92:c5:5f:20:f8:ae:97:b3:5e:af:74:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:23:72:B0:65:A0:8A:BA:3B:B4:5E:1B:70:CC:E3:00:A8:93:E4
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:66:b8:f9:a9:4f:a6:94:74:e5:2d:4a:d3:c9:aa:b6:61:19:
12:f6:f1:6a:eb:28:4b:59:d9:aa:5e:02:3c:06:f8:0d:d5:22:
16:25:d7:9f:65:bd:7a:2e:16:8a:72:dc:63:03:d1:65:51:39:
97:c8:4d:53:0d:4a:3e:c3:87:4b:11:62:1e:1a:21:40:7a:ee:
7d:85:58:89:33:ae:21:84:c8:87:58:7f:34:f1:94:c7:6e:09:
48:98:9e:53:9b:aa:97:aa:fc:4f:bb:ca:b1:50:79:ca:72:c9:
ba:d7:0a:c1:b6:d9:7e:a8:56:80:58:70:bf:1b:32:f9:d2:dc:
c6:e0:d9:a5:42:38:79:4a:17:f4:49:6f:24:38:86:76:74:d5:
0f:a5:98:46:d0:38:68:b8:27:99:dd:2a:68:69:fe:db:32:5e:
ee:c2:1a:76:aa:9c:08:43:73:f6:30:9b:d5:ed:58:79:b7:c6:
38:b7:54:24:8b:17:36:4f:f3:e2:3e:68:06:88:b4:89:b1:60:
e2:a2:b5:af:d1:3b:3f:54:b6:0d:ab:07:43:5e:5d:3c:e5:55:
6a:60:56:d2:fa:ca:91:7a:75:a8:92:26:c9:05:45:ab:ca:fa:
d2:0b:3e:47:23:fa:29:71:2d:63:1d:6e:dd:e7:c6:8f:d8:57:
7c:85:4e:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDaXzuRpxiaR70YyD5naXhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjYwOTI1MjEwMTA5WhcNMjYwOTI2MjEwMTA5WjAzMTEwLwYDVQQD
EygwNTgzMjM3MmIwNjVhMDhhYmEzYmI0NWUxYjcwY2NlMzAwYTg5M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztyNJLTIj+fcnuQ9ZNo53v23CQAC
qOyowOOtZoRaE1S9jHVHm8smAIoY3frLYUDUZ3XZZoC56zkM+0rJikkZwQKsZbPI
nCirsJ/l+Y9lG2N/SrcbL+cuM3yEj/fYT+ZHE1qBfrAds52q0frl4sgApB0XJTZT
2dneyuvE6ziWsVwUnbaLomsHlllldMRlq7lN89QJbSd/mREMbtG0XXhRe19xR0vE
cetwM4ubCDLPJKG6ZLDoqLUVC2ZviYLxAtCWsqAXmZwQes8D07KWST91Rb/6G8Ev
tMXv0GhgEfsVQSgtkeQeR8LD2LmhdB4Wd3LfnOuAksVfIPiul7Ner3T5AQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAWDI3KwZaCKuju0XhtwzOMAqJPkMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWa4
+alPppR05S1K08mqtmEZEvbxausoS1nZql4CPAb4DdUiFiXXn2W9ei4WinLcYwPR
ZVE5l8hNUw1KPsOHSxFiHhohQHrufYVYiTOuIYTIh1h/NPGUx24JSJieU5uql6r8
T7vKsVB5ynLJutcKwbbZfqhWgFhwvxsy+dLcxuDZpUI4eUoX9ElvJDiGdnTVD6WY
RtA4aLgnmd0qaGn+2zJe7sIadqqcCENz9jCb1e1YebfGOLdUJIsXNk/z4j5oBoi0
ibFg4qK1r9E7P1S2DasHQ15dPOVVamBW0vrKkXp1qJImyQVFq8r60gs+RyP6KXEt
Yx1u3efGj9hXfIVOpQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:44:28 2026 by rpki-client