Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: s2FQzf1atJx6L8rOvM+8pMO/I+7o06cVS6ZW8P7kNDw=
Subject key identifier: EF:F2:77:31:8E:37:A8:28:B3:85:B6:54:C4:E3:A7:BB:10:EC:FC:C6
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 01A0D15BDDC08DDDA7D44DFFAEBB832C6478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 03:00:53 +0000
Manifest this update: Thu 24 Sep 2026 03:00:53 +0000
Manifest next update: Fri 25 Sep 2026 03:00:53 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: T6rYOCxB8vC3IcZ1Ahiz+exc2WugtkS/gjTW9+KK7Ss=)
2: 4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa (hash: l+G/CcJNCFJU4d+SNUaOc2KOUJVWckb0n4DNmMjMMz4=)
3: yJ2MXHIuwnlLBfSQT_c_ui7bxZ8.roa (hash: bKb0mrONqrCtemohnhY7UQM4/Wb2IQBdRvBQnmw2e9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:dd:c0:8d:dd:a7:d4:4d:ff:ae:bb:83:2c:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Sep 24 03:00:53 2026 GMT
Not After : Sep 25 03:00:53 2026 GMT
Subject: CN=eff277318e37a828b385b654c4e3a7bb10ecfcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:fe:aa:51:86:b2:66:40:31:93:bf:6b:8c:
17:ea:0a:be:fe:3f:5e:9c:79:0d:29:2f:8d:9d:b4:
bb:16:c5:34:76:b7:a1:ef:5d:7d:04:f6:b6:ae:b3:
27:90:8a:5b:32:f6:55:02:86:2f:78:84:1e:bf:a3:
f1:1d:51:1f:da:85:d2:bb:9f:fd:92:20:86:1b:3d:
a8:3c:28:63:20:aa:31:3e:f7:cf:44:d2:2d:d3:e8:
b4:f9:78:ba:f2:39:81:4e:7c:9e:d1:19:26:d2:c4:
14:be:3a:fc:a0:ae:5d:95:9e:75:b5:fb:af:1b:4c:
09:e9:d7:86:b3:92:24:17:6b:ef:e8:08:5f:7e:c4:
03:1e:84:ae:c1:f2:b6:74:46:b9:e7:29:86:04:3c:
4c:ec:6f:24:e9:e0:98:12:d2:9e:82:54:f4:4b:c5:
0c:fb:14:54:c0:9b:8b:87:54:2e:97:0f:f9:b4:75:
ea:98:02:d5:2c:5c:60:ba:2d:0e:7d:df:84:00:af:
fb:a7:05:2a:71:ce:75:81:9a:f0:77:08:b2:34:03:
4f:71:4b:aa:42:e7:af:61:82:9f:9f:f7:76:72:fd:
5a:36:f2:18:88:d8:e8:71:6e:e8:ce:4b:a4:5b:e9:
f6:5c:5f:c5:62:10:d1:fb:d1:4c:84:91:70:97:cd:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F2:77:31:8E:37:A8:28:B3:85:B6:54:C4:E3:A7:BB:10:EC:FC:C6
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:02:6e:c4:36:2f:c7:0e:0a:bd:4b:52:95:e9:69:b1:04:da:
e2:b2:30:e8:a4:2e:91:94:9f:95:09:2e:38:b1:6d:b4:01:65:
ba:0c:92:d4:a2:cf:32:93:df:91:e8:d4:b4:7e:06:58:78:15:
e1:b5:30:f7:76:d5:38:b9:ca:ad:0b:f9:38:46:8e:13:51:dd:
85:b8:5a:53:82:b1:f6:e2:c8:50:46:e2:27:04:a2:09:a9:53:
3d:d2:ad:13:41:41:69:95:a4:14:8d:c3:97:1f:ac:e0:8f:2e:
c6:3d:fa:98:39:e1:79:d3:63:bc:62:7e:72:ae:c7:f4:91:f2:
b1:81:5b:87:bf:be:bd:6e:3e:23:60:5c:74:59:07:4a:71:cf:
89:f4:04:8d:57:6f:9b:e9:3e:49:07:27:ee:ef:cc:63:5d:b7:
84:16:89:67:b6:95:7d:2c:e2:ed:38:86:99:a4:95:76:fd:70:
b5:5d:fa:73:2e:6c:df:fb:8e:84:f6:66:ae:b6:dd:32:3f:59:
fe:b9:68:66:2d:f2:b8:81:52:4b:fc:a6:42:c1:43:da:1d:52:
af:a0:62:15:a8:ef:2e:40:41:91:36:ae:8b:74:b2:fe:ff:87:
1d:19:5f:1c:ef:b0:d9:59:6e:b3:04:aa:73:2f:f0:e2:99:0e:
25:09:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:57 2026 by rpki-client