Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: VQtM5WuKzmitq1b9oyasafWR2ne6Vs6UDSHfVH4HsAk=
Subject key identifier: BE:42:0D:B4:AD:B1:AF:3F:1B:BB:08:B2:5B:5E:75:D6:98:BF:89:68
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 01A0EA09E6ED3744F51867B4C6F54E004485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 22:01:52 +0000
Manifest this update: Mon 28 Sep 2026 22:01:52 +0000
Manifest next update: Tue 29 Sep 2026 22:01:52 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: QuXSeJOy+bNttDw6BhpyIrbMFlAtq2LznvZKAmhQtYY=)
2: 61-4acpKq_PC7ATdZVCHWRg8JKs.roa (hash: XfLv38L+k8qNjwRe1RGjTzVU0A2ck+gkD6atchEx+8g=)
3: snhbQ-MBqaP4OUTW8WJ3Hr1dnUc.roa (hash: 9I5SXUe0pT58xK312SvCJFKTSES2daM8oG5AXaPkWQM=)
4: y0v5hqRnK3oXSef_pYXkfz4Oyzw.roa (hash: 0FZ3W5rrSzMRERGSvGaSIJBxiMzf+ECnXIculdCdNkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:e6:ed:37:44:f5:18:67:b4:c6:f5:4e:00:44:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Sep 28 22:01:52 2026 GMT
Not After : Sep 29 22:01:52 2026 GMT
Subject: CN=be420db4adb1af3f1bbb08b25b5e75d698bf8968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bc:8a:2a:92:84:9e:e7:45:a1:97:32:97:49:
ca:08:24:d7:39:db:4f:e6:d7:a2:3d:13:5a:3d:94:
e5:88:65:90:b0:dc:57:2f:31:bd:17:e0:f4:6e:52:
e9:94:e6:67:c7:40:62:85:06:67:39:33:b6:6c:57:
d3:e0:71:6f:78:a9:7a:7b:b6:55:22:c1:41:10:59:
f0:be:27:b8:ed:9d:bf:a7:18:3a:05:08:32:73:94:
f9:6b:f2:78:88:64:4c:57:0e:cd:89:0a:8c:f0:5c:
5e:d7:d7:c0:5e:96:5b:18:36:a3:0f:f7:58:62:de:
f0:64:42:fb:cb:a7:16:75:90:da:51:b1:47:d8:08:
44:61:6e:e8:ef:00:84:1c:eb:05:12:99:bf:47:a8:
86:dd:91:18:f6:ab:bc:6c:a5:9e:00:ce:6e:0a:91:
d7:93:e6:33:b4:6e:d2:8b:af:1a:38:cf:14:51:bd:
88:09:9e:01:61:9e:a9:6e:1f:72:eb:5f:fa:07:f2:
68:d4:e5:40:ca:b7:be:8f:47:a9:91:e7:81:cb:bd:
82:23:d4:09:7f:f7:c2:ce:ec:db:07:62:37:b4:f4:
d6:16:2c:47:58:13:4a:b9:ac:ec:c9:a7:c0:6a:d9:
38:82:11:96:39:35:4d:c9:91:c9:2d:aa:02:1a:f1:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:0D:B4:AD:B1:AF:3F:1B:BB:08:B2:5B:5E:75:D6:98:BF:89:68
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:01:5d:ef:89:89:db:d5:b7:0d:0e:7c:37:69:f1:73:63:
5c:7e:a8:87:93:54:f3:58:69:aa:78:ed:fc:85:7f:56:ae:1c:
5a:34:2e:66:2f:7d:e0:76:8b:e8:41:81:90:af:2e:b0:e5:3e:
6a:3d:c1:5f:1e:bd:76:f7:0a:1d:23:b2:37:e2:2c:cc:18:2b:
f2:45:63:9c:17:ac:cf:a1:1f:d8:11:7c:71:2a:76:c7:4f:99:
71:3f:4b:40:0b:39:d9:79:9f:f5:f4:fe:e3:f7:95:8e:9c:33:
6b:f4:cc:11:90:33:55:0a:78:d3:7c:3e:fa:ef:21:ea:9f:74:
1f:ed:02:04:eb:bb:76:6f:00:83:0b:cb:52:84:19:b9:34:e4:
0b:c1:45:00:60:9b:6f:08:ba:80:89:53:ef:b6:04:b1:51:25:
ba:9e:31:13:8f:f2:29:4f:a9:3f:6e:04:33:db:b0:e1:03:42:
2d:fb:a3:b2:5b:71:03:24:d5:cd:7e:d3:03:ab:6f:de:67:2f:
02:a8:3d:8b:18:d5:2a:7e:27:b4:2a:84:47:4b:10:65:76:57:
fd:e4:9e:bd:97:5d:a0:5e:03:98:ed:3a:1b:db:a1:83:07:90:
b4:ea:70:7e:b7:51:b1:3f:92:bd:61:f4:6b:81:ea:c6:89:c3:
06:f7:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:15 2026 by rpki-client