Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: QK0JLWkBoSXJv4Tjz8zlakKJge8RB5Baz6RiYI2ZOUI=
Subject key identifier: C5:97:23:F3:89:85:73:4E:31:8F:B6:52:2E:39:03:83:0E:F5:56:32
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 01A0D9F164FB0D70AE590085F7D0E152C65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 19:01:10 +0000
Manifest this update: Fri 25 Sep 2026 19:01:10 +0000
Manifest next update: Sat 26 Sep 2026 19:01:10 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: IYwVm2lBs0bLPpUZvuaRjXXf2EACCwx62oLVnBJCYno=)
2: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (hash: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:64:fb:0d:70:ae:59:00:85:f7:d0:e1:52:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Sep 25 19:01:10 2026 GMT
Not After : Sep 26 19:01:10 2026 GMT
Subject: CN=c59723f38985734e318fb6522e3903830ef55632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:3c:d0:eb:60:07:ad:59:ff:54:9b:c6:78:
54:d7:8a:0c:29:0d:b8:85:97:41:0b:a1:cf:5b:b3:
94:3e:d1:93:96:fb:0b:0c:69:9e:01:4a:5d:66:99:
64:18:cb:eb:82:c5:8c:da:37:ae:60:17:90:da:94:
15:e2:30:cd:d4:4c:d2:f9:bf:48:35:a0:41:5a:dc:
f4:16:a2:c7:e6:11:59:67:20:ea:d1:d1:09:f4:78:
62:c4:f8:0d:b5:1c:57:e5:e6:09:59:98:2e:d3:b5:
b7:12:cf:e5:7a:b2:08:0f:3c:5d:de:65:21:7a:b7:
14:f1:16:e4:e3:30:77:8d:6c:88:21:06:1d:97:30:
00:da:37:40:be:6a:c5:c6:ae:05:e2:44:d7:dd:71:
e2:d6:6a:90:ff:86:69:1e:ad:7f:23:8f:40:77:b1:
30:9c:0a:e1:df:eb:9e:c4:0e:4f:b2:e1:d0:09:de:
9c:07:34:69:62:80:5c:eb:52:33:a1:97:79:7e:ca:
d3:ac:a9:c0:0e:25:87:85:5c:8c:04:ca:a8:51:d0:
78:65:fb:89:7e:b1:88:f4:11:62:74:bc:6e:78:fb:
3a:e7:99:20:f3:18:0f:e6:c9:63:27:09:d5:36:2c:
42:3b:1b:58:72:74:f1:f7:0a:6b:11:31:2b:f0:1b:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:23:F3:89:85:73:4E:31:8F:B6:52:2E:39:03:83:0E:F5:56:32
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:f4:02:81:ce:08:78:99:ff:10:60:9e:be:27:04:dd:e6:
ad:1c:26:1c:65:ff:52:d6:3d:92:cc:10:61:f6:ae:98:e9:91:
e5:96:1a:f6:3d:63:4a:cc:5d:7d:7e:50:19:c0:30:67:53:8d:
fd:a3:70:20:39:5a:dd:45:80:62:14:64:a4:70:45:0e:9f:52:
e2:cc:66:d4:7a:ba:fd:8a:f1:d9:8a:4e:5a:01:2a:c8:ea:89:
d9:b8:ef:b5:00:41:d8:c2:b2:2d:6a:b4:96:a5:88:c9:cc:99:
a5:52:0e:34:10:6b:1d:af:6e:37:e2:55:4a:a4:b2:d5:ce:11:
08:22:66:df:89:04:c0:50:9f:90:e1:3b:87:7f:d9:32:9b:e3:
fa:ca:fb:50:1b:5e:f2:22:7d:bc:a6:5b:8b:48:36:67:2c:fb:
df:86:69:1b:03:03:55:81:7d:ab:55:7b:e3:7c:75:0d:a6:32:
2c:84:ed:c7:48:c3:3c:43:b4:d7:01:59:29:64:a0:31:e1:42:
7f:87:a4:9b:0a:05:1b:99:6f:98:1e:7c:fc:02:1c:18:be:c0:
a5:78:5b:03:43:ef:9c:c6:af:bb:ce:5e:dd:2a:6b:44:af:c4:
ba:92:6a:ba:5c:3f:9d:68:a5:41:32:6f:7b:bf:46:2e:63:1c:
96:2a:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:43:36 2026 by rpki-client