Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier: FqNwQMnMPnMxbLGqjrskqFr6kQAii9e7boWI8J8PM3g=
Subject key identifier: 3B:89:6F:71:9F:AE:E0:17:E7:D7:70:A9:40:85:02:E4:F1:D9:E2:51
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 01A0D19265100BF34A991B191BE09B96D516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 04:00:27 +0000
Manifest this update: Thu 24 Sep 2026 04:00:27 +0000
Manifest next update: Fri 25 Sep 2026 04:00:27 +0000
Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: Z7JNBShJtMdxv5hS0oDN9p4a8HL1NQR7Lag1q2UKdwg=)
2: B_KGcXQ0DuIdghhkI0CttQjaBiY.roa (hash: vrjC5dTNYvxDZ+tn/uxjJ/eLDEIZEWZ3qbbhNWSnHdg=)
3: Fzbx011u7RVOot7S1xohG9qyhz8.roa (hash: d3cH8nlBzo4ygFaoC3yncTUnU72/qEe1SfOmm7ZS+sU=)
4: ZMvIxxGP7qocWq6cskVSeYzqx0o.roa (hash: 3C3h+rU23U84LO7lG7BTF7dtlYQvYrPkr1tHRpjMHRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:65:10:0b:f3:4a:99:1b:19:1b:e0:9b:96:d5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Sep 24 04:00:27 2026 GMT
Not After : Sep 25 04:00:27 2026 GMT
Subject: CN=3b896f719faee017e7d770a9408502e4f1d9e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:98:cb:d8:c2:06:52:7f:8b:f1:46:9e:70:
c7:e9:f2:7b:fa:78:96:1e:bf:36:c4:1e:3c:53:5a:
61:ca:c1:a1:6c:5e:7c:9f:e7:37:18:e1:41:6b:23:
09:66:26:de:e4:27:5d:d1:8f:0e:34:6a:a4:fd:cc:
17:24:78:6f:9b:af:dc:57:2c:d9:52:3c:7f:73:d6:
54:ab:ef:60:ec:e2:62:f4:8b:ea:af:62:87:4f:c3:
e4:46:5b:f5:7b:76:5b:6c:65:cd:e3:14:92:9e:d8:
d8:e8:4c:c2:42:fd:e9:43:33:1f:8a:14:ae:27:fa:
df:37:62:33:10:66:50:c3:ec:f6:e7:37:e1:f5:3c:
d7:ed:f3:64:2a:b4:63:c5:95:58:ec:77:8d:94:7d:
93:d7:cf:28:14:55:72:e2:9a:53:b8:91:84:83:ca:
71:a7:51:8b:12:f9:22:be:cc:d0:c0:b4:d0:b5:79:
58:62:50:90:1d:70:80:ac:6d:25:f4:49:18:ed:9b:
fb:e7:19:ae:13:af:63:85:39:cc:02:dd:b1:2d:f3:
af:51:f7:c9:9d:af:72:3c:c0:0f:68:af:67:47:86:
2a:45:94:f5:61:6d:46:33:e9:3e:b7:15:62:ba:89:
89:38:56:b0:ff:0a:61:ab:23:71:a6:f3:34:31:e5:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:6F:71:9F:AE:E0:17:E7:D7:70:A9:40:85:02:E4:F1:D9:E2:51
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:22:46:19:60:e1:d4:3b:29:cd:99:65:4b:93:22:ba:ce:75:
fe:cc:56:ea:f4:a4:45:da:08:bf:a9:c8:5c:55:76:e5:d4:7c:
83:83:3a:86:35:3c:67:0e:0f:6c:f0:9f:f6:a5:38:e9:9e:b8:
a6:00:01:35:4d:93:b6:cb:96:5c:6e:ef:df:4d:0f:14:5f:0d:
ed:29:e0:b1:21:5c:1c:06:7b:21:e8:60:e5:96:5e:52:f5:7a:
f6:a5:2c:ee:76:e5:d6:63:29:63:97:9e:2d:24:92:4b:d7:b7:
1f:60:3a:b5:0b:e5:70:b9:d1:d1:2a:89:d9:6f:25:d4:64:1a:
bb:cd:47:f0:26:f0:c8:7f:a0:6a:62:05:eb:b0:b9:6d:43:e0:
aa:f2:f8:5f:42:68:ed:f5:a3:ab:1c:3f:ed:5c:aa:87:93:52:
5d:76:f2:d5:5a:8e:89:31:2f:a8:7b:88:00:30:67:ed:ff:be:
bf:18:5f:28:3d:14:4b:23:01:45:61:2f:6f:64:f4:46:d4:37:
78:81:8b:38:f6:70:fc:e6:8e:a8:78:db:14:a1:dd:0c:d0:86:
51:17:ff:31:d8:21:bb:3e:b9:83:af:86:b8:45:08:30:09:2b:
6d:8a:38:67:b6:93:c0:d5:cc:e0:23:e1:fd:46:d8:6e:18:ec:
6c:85:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:31:12 2026 by rpki-client