Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: X1QWmhM9Y/adlAzyhP6QaJbJBN6LZ6Q5sXJwjWRHydw=
Subject key identifier: CE:75:94:AD:F8:95:D7:03:A5:4E:7F:3F:CB:FA:66:1E:C8:68:AA:13
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 01A0CB59771FBB989C0BCA32E76CBCCA9B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 0C7D
Signing time: Tue 22 Sep 2026 23:00:33 +0000
Manifest this update: Tue 22 Sep 2026 23:00:33 +0000
Manifest next update: Wed 23 Sep 2026 23:00:33 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: zUs/WbtdwhaVsfZJEG6rJbzsgTdzz+XKJ0QYv6ct2bY=)
2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:77:1f:bb:98:9c:0b:ca:32:e7:6c:bc:ca:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Sep 22 23:00:33 2026 GMT
Not After : Sep 23 23:00:33 2026 GMT
Subject: CN=ce7594adf895d703a54e7f3fcbfa661ec868aa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:9f:b7:10:00:c9:d6:a9:70:3c:89:18:71:
4a:bf:33:2f:25:25:8c:27:32:ea:51:ad:74:35:f4:
d5:02:10:88:d3:a4:66:54:74:4c:e5:5a:00:c2:6c:
99:13:f5:3a:71:10:b1:1c:5c:02:84:99:87:9b:cd:
a2:cd:9e:68:9b:45:f6:fb:52:c4:2e:1b:c7:21:89:
bb:9b:48:78:1d:fa:fd:04:b9:3a:93:12:df:19:2a:
fc:62:7a:43:38:29:17:8c:cd:af:d0:6b:1b:67:c4:
ff:07:df:fa:94:54:5c:4b:e1:92:40:bf:2b:bc:24:
32:80:0b:86:77:4e:f1:bf:1a:64:4a:9b:17:bc:45:
b3:03:61:1a:6b:c0:f8:42:bd:d7:a6:98:db:45:a6:
6b:09:7f:f0:5a:23:2d:27:5b:3f:be:15:54:38:bf:
a8:23:98:9b:d1:b4:92:3d:40:32:27:d8:e9:8c:a9:
cb:05:b5:5a:91:48:79:19:bc:af:59:f2:6c:e8:5c:
05:67:ce:aa:f4:89:05:87:f5:64:eb:bc:18:94:1f:
e2:64:ee:b8:1f:fb:1e:fb:38:83:12:4b:f2:2a:be:
91:e4:f4:d3:f4:48:50:38:3a:b7:a3:fb:52:8d:6e:
82:42:39:5c:2d:71:c4:05:38:e1:18:24:e5:35:fe:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:94:AD:F8:95:D7:03:A5:4E:7F:3F:CB:FA:66:1E:C8:68:AA:13
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cb:6b:ea:8d:a4:18:df:82:16:b4:c9:0b:fc:02:db:67:e9:
4e:10:b2:10:b9:de:f0:37:1e:9a:f8:b4:3c:bf:ad:52:28:ba:
5b:88:19:a8:a1:67:16:eb:0f:6a:4c:14:71:93:37:43:fb:ca:
80:d5:16:00:50:9b:9e:25:a9:be:cc:98:66:63:63:2c:69:b0:
f0:dd:d1:bb:6d:1b:66:a6:d5:91:f0:8b:9b:08:ae:2a:96:b1:
1b:54:42:df:a0:35:b2:0b:97:27:1f:5c:b3:98:df:9c:eb:a9:
b9:82:9e:c1:a5:b5:a9:ac:e1:ed:b1:4a:bd:44:87:e5:5b:ef:
44:af:ec:77:b1:a5:62:38:36:0c:82:9e:31:84:84:c5:51:5c:
59:7d:04:50:38:60:e8:a2:af:40:07:b0:92:62:3f:17:d4:0c:
4d:73:4b:17:22:f7:7c:3b:a8:d2:62:2b:80:78:42:25:ad:db:
40:3a:0f:ec:74:f0:cc:0b:d5:b0:d6:68:57:ae:bc:f0:0c:16:
73:f8:4b:a1:a6:6a:bd:65:eb:e5:89:0f:1e:20:66:1e:28:02:
d6:9c:78:61:f3:ae:98:4e:e2:31:b9:fc:99:cd:92:60:84:c8:
28:47:e6:24:38:b3:2a:0b:d7:36:ee:78:e6:b3:c3:d7:e9:9c:
4a:40:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:51:57 2026 by rpki-client