Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: ZaABF9DvfwcF1Lrin/BUlYmISm3CeoRiDNIsIyP02NE=
Subject key identifier: 8F:D3:26:42:A4:A6:42:9C:78:37:53:B5:1C:AC:40:A3:C0:1B:AC:16
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 01A0D5703984B7BB103FA4E8AFB477AA8276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 22:01:36 +0000
Manifest this update: Thu 24 Sep 2026 22:01:36 +0000
Manifest next update: Fri 25 Sep 2026 22:01:36 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: UAeh97B8R1cEauWNE7FSexKbM4FZqKl2Jwe6SP2uc4Y=)
2: t8lhPpnb3jBYI7JFlQQfV9cLCwY.roa (hash: 7Oegrqcmc5k3ZrtmRr9RVKtmbCenTomOyuIvGLuIKzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:39:84:b7:bb:10:3f:a4:e8:af:b4:77:aa:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Sep 24 22:01:36 2026 GMT
Not After : Sep 25 22:01:36 2026 GMT
Subject: CN=8fd32642a4a6429c783753b51cac40a3c01bac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:2d:e3:35:e9:7f:fc:15:44:4b:0d:2e:b4:
7b:c4:ea:59:b3:f6:44:e5:e3:ef:6b:18:53:5c:4e:
fc:b7:d2:5e:91:bc:06:67:9e:60:51:a7:d1:db:02:
44:71:c8:69:ae:8c:ed:00:9e:95:cb:0a:78:76:6d:
f8:71:5d:fc:80:25:79:f4:d1:c0:13:61:6f:18:34:
f3:3c:4c:11:80:54:31:a7:a4:c1:9f:e6:5e:b3:ed:
ff:f7:b0:b0:3d:f8:30:e5:4f:f4:5e:ed:a9:27:74:
f0:af:30:3d:be:01:2a:f6:64:68:c7:4d:fd:21:1f:
10:18:9e:ac:b1:c7:fb:8f:8b:dd:cd:4a:e8:e6:92:
8a:9a:c8:2e:d9:f8:c5:9f:0a:aa:fc:79:56:48:06:
2e:43:cc:ea:ed:0c:6a:c4:7a:54:db:91:94:4b:14:
58:c8:f1:fe:7a:63:aa:68:6c:67:1e:31:f0:99:2f:
88:f3:82:5f:4c:bc:05:5f:d3:b6:c2:c3:14:b2:41:
23:7b:fa:3f:cd:64:4b:6c:c7:a6:a6:02:39:86:96:
33:17:31:d8:28:1d:68:e2:a8:2e:46:63:83:f0:9f:
2f:fc:bd:4d:2d:f4:fc:c3:71:00:c3:af:eb:52:f2:
ec:a0:4b:f7:da:b5:dd:82:1c:e9:35:46:cd:09:f8:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:26:42:A4:A6:42:9C:78:37:53:B5:1C:AC:40:A3:C0:1B:AC:16
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d5:3f:a0:d5:b5:4b:db:f3:2d:a2:9d:a1:65:22:de:b3:33:
37:d2:db:bf:d1:1b:6f:36:5f:69:f3:2e:be:73:11:ad:29:3b:
da:ef:f2:b9:60:ce:49:61:bc:e2:43:7b:f5:71:55:93:aa:ea:
7a:6a:23:89:82:71:9e:9e:e4:53:b0:05:0d:e5:28:23:d0:61:
e5:ef:4f:af:f0:f1:aa:34:3d:1c:2b:6a:29:91:fc:47:8d:a0:
a1:f0:cb:87:ac:aa:ca:ec:da:af:25:81:7c:68:c9:ea:39:eb:
a2:d3:c6:12:e6:42:1d:f2:ab:ab:e6:00:a1:43:31:7c:b9:68:
fd:45:6e:4d:68:32:dd:84:5e:25:d4:c4:2f:84:8c:37:ed:1d:
20:42:95:13:83:d1:89:6e:ed:23:e2:bf:bb:4b:67:4a:a7:09:
9a:0d:87:ca:4b:5d:45:b3:6c:a7:2f:93:b2:11:ad:c3:e2:4b:
5b:92:16:46:37:cb:37:5f:92:37:45:9a:a4:8c:5e:41:5e:8f:
c9:c3:e1:0c:8e:67:e7:74:fd:1c:19:18:94:a8:b7:ba:69:cb:
45:d9:32:60:56:6e:bd:72:30:5c:b9:4b:4e:c6:c1:71:81:df:
fe:1f:ee:62:b1:50:9f:52:3b:87:e5:c6:6f:6a:42:eb:7f:01:
f4:e5:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:04:25 2026 by rpki-client