Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
File: 1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft (raw, json)
Hash identifier: Xc3YiFg1ddBF5ZdLDa/T1SieQKRrVm9QxCCLamEu4IU=
Subject key identifier: 1E:3D:D9:20:5A:09:B7:89:B8:5A:A8:27:F9:DF:E7:22:D5:C0:2C:5C
Authority key identifier: FA:21:20:AB:62:83:49:11:A9:7B:0E:02:42:73:6B:AB:91:4B:91:52
Certificate issuer: /CN=fa2120ab62834911a97b0e0242736bab914b9152
Certificate serial: 01A0DF8576E39D63F2F5B929C8D4FD904721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
Manifest number: 96
Signing time: Sat 26 Sep 2026 21:01:00 +0000
Manifest this update: Sat 26 Sep 2026 21:01:00 +0000
Manifest next update: Sun 27 Sep 2026 21:01:00 +0000
Files and hashes: 1: 1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl (hash: scEKPUHWeX7Y7d4/lp7Y1eNNPaO8HO0ZMESTIxRcmUs=)
2: Lrx1zAF4i1NRZc8JkzAIkbuyS-8.asa (hash: jBOfsIf251AOH0p/FGtKjU9a9Jasrkeb/rbKwC538eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:76:e3:9d:63:f2:f5:b9:29:c8:d4:fd:90:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2120ab62834911a97b0e0242736bab914b9152
Validity
Not Before: Sep 26 21:01:00 2026 GMT
Not After : Sep 27 21:01:00 2026 GMT
Subject: CN=1e3dd9205a09b789b85aa827f9dfe722d5c02c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:02:9d:4b:dc:f1:0d:e6:d6:44:35:b3:ae:
1d:da:a1:dc:f0:31:22:29:6d:85:f2:a0:4e:09:a7:
5e:8b:59:63:89:f4:35:88:cb:99:b6:5a:e3:6b:5d:
be:d1:1e:84:2a:00:6e:80:f4:ed:5c:e8:39:de:10:
12:98:e7:70:3a:c7:ff:2c:20:3e:b3:4c:e2:41:c2:
f2:db:89:32:e3:46:d2:7f:d8:0c:49:8f:0d:5c:12:
3f:5b:ad:6f:50:2f:d0:44:4a:ed:68:db:e7:34:e3:
0b:04:d1:76:2d:20:43:c0:a5:cc:d7:b4:8e:08:34:
74:f4:bf:89:0f:c3:2c:e7:16:e0:fe:04:94:04:48:
18:72:bb:60:84:ff:08:ec:a9:e2:09:24:03:2d:69:
12:2b:c2:3f:cb:e8:ea:4e:82:e8:14:46:4c:29:46:
30:65:98:06:bb:de:29:b7:9f:f6:99:69:b9:67:67:
17:3d:c2:55:e2:91:c1:25:2d:9e:3a:19:cb:27:a3:
2f:59:3b:e7:90:f3:92:d1:7f:34:7b:7d:ae:f5:d7:
50:c0:25:89:c4:45:d6:7d:45:7d:8f:27:60:22:bc:
9e:13:0a:3d:1b:d0:ff:e3:45:95:c8:eb:ba:b4:e4:
90:1a:30:f8:08:da:28:3b:22:9b:4e:26:0a:58:67:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:D9:20:5A:09:B7:89:B8:5A:A8:27:F9:DF:E7:22:D5:C0:2C:5C
X509v3 Authority Key Identifier:
keyid:FA:21:20:AB:62:83:49:11:A9:7B:0E:02:42:73:6B:AB:91:4B:91:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:b2:1c:cd:e4:e2:5b:9c:71:7d:cb:96:cc:2f:17:4a:2f:
37:56:09:e4:c1:c7:ee:b8:5d:56:8a:b8:b9:d2:a3:01:76:e8:
10:db:30:0f:c5:04:72:b0:27:f6:c5:71:5d:1e:de:c1:55:9d:
8f:5f:5c:82:c0:71:8f:87:90:55:69:f5:a0:96:fc:d3:2a:4e:
d2:95:c4:1d:54:32:17:5c:76:17:42:e0:26:12:94:21:f0:32:
21:c6:b6:a0:2d:6f:3c:c7:a1:91:d6:ac:99:87:b6:3b:81:2d:
88:b5:9e:cc:55:f4:a0:98:ae:5b:af:f0:71:c6:68:bd:a6:40:
71:a4:f2:06:59:93:ef:f4:14:85:02:cc:98:8c:88:86:9f:2f:
ed:a1:1d:9f:79:72:8f:6d:a0:05:f8:96:13:69:38:b8:c4:10:
2f:95:f8:98:83:18:65:91:47:43:8c:be:f1:a3:0a:a0:9a:e2:
33:16:3e:48:86:e7:8d:df:68:7a:f4:23:8c:71:ec:21:a7:5b:
46:db:56:31:3a:4b:28:ca:33:98:84:f4:09:61:a9:9c:37:06:
c7:43:55:bc:d8:1d:33:71:31:02:a1:9b:65:d8:eb:72:15:c4:
af:a9:d8:82:4f:f3:e8:3c:1f:6d:d4:05:23:00:c2:64:04:9d:
38:78:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:35 2026 by rpki-client