Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: GUtfMdMlQzyA0uXgVpQK6Ve2qP+1OXUzM+3jhsIsBzY=
Subject key identifier: FF:90:81:A8:73:62:21:09:C7:82:57:4C:70:89:57:AA:3D:96:D5:E7
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 01A0E3994AA81AC73F724D101CF5DB063AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1A7B
Signing time: Sun 27 Sep 2026 16:01:09 +0000
Manifest this update: Sun 27 Sep 2026 16:01:09 +0000
Manifest next update: Mon 28 Sep 2026 16:01:09 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: kF6zJ0VGYjj+M0BvvNQhRlvPYTXjJu//WC4hFxVgNDE=)
2: GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa (hash: bXptPxFQyb9Owh/hKmiA83+wjy1OBwsMr11rFf9sFDQ=)
3: jn0yEdikXWBGn1EaR0b8w0TJFr8.roa (hash: 10DA5MXiJsweYaG/q6sof9ShkMYv66PwkP1hNlnqUDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:4a:a8:1a:c7:3f:72:4d:10:1c:f5:db:06:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Sep 27 16:01:09 2026 GMT
Not After : Sep 28 16:01:09 2026 GMT
Subject: CN=ff9081a873622109c782574c708957aa3d96d5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:0b:94:e2:8b:29:f3:47:b5:94:a3:6c:e4:
d3:80:f8:ca:ea:df:f6:70:05:0b:c2:e1:a8:2b:3c:
f1:d3:fe:af:fa:f8:b0:36:4c:a6:21:29:9e:b2:9f:
ab:56:71:ad:75:ef:82:54:d8:9d:c4:77:47:1b:99:
18:15:ac:b6:30:13:45:10:3f:de:4e:03:24:a6:d9:
80:b7:dc:85:63:0b:3c:0d:fc:08:fd:7a:e5:a7:ca:
79:d3:8f:86:f8:f5:71:ac:78:33:68:39:f9:84:42:
56:8e:3a:dc:5d:8c:31:a8:fc:c5:5c:11:e4:b9:24:
3d:3b:51:7b:5d:06:84:23:a3:24:bc:bd:fe:8c:35:
54:ee:a5:12:76:69:21:38:d5:df:20:f2:fb:50:83:
1d:bd:91:68:d7:c5:34:46:e4:be:2c:36:cc:6b:d6:
74:c3:cf:e2:ae:67:a8:65:a0:e8:0a:09:14:43:ac:
93:be:a8:82:23:b3:35:e9:8d:f9:16:9f:89:11:21:
48:b4:c7:d3:9b:87:21:31:cb:16:17:21:6f:c0:03:
e4:10:b9:47:6c:35:fe:cf:03:e7:08:d1:da:2a:2a:
90:12:b0:6f:d7:f8:f5:fc:2a:d2:10:d8:62:ee:09:
06:03:10:75:e9:89:df:23:26:43:ef:fb:74:c2:c5:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:81:A8:73:62:21:09:C7:82:57:4C:70:89:57:AA:3D:96:D5:E7
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:52:8f:ea:fc:7b:ea:7d:11:63:62:b7:75:8c:3b:c6:5b:f9:
be:28:a5:72:ec:ae:33:b8:af:f7:7d:a0:63:a1:4d:d0:8f:f0:
fd:2e:83:c8:f8:30:ed:9f:72:3a:0e:c1:2e:0e:cb:8a:67:b5:
4e:6f:55:6c:04:a1:28:b2:cf:d2:9c:23:ce:01:5f:fa:97:7c:
18:2b:32:6c:e8:6f:3f:8c:44:26:56:d2:f8:d1:6b:c9:df:cc:
1f:77:26:17:02:c1:8a:24:cf:f9:43:37:40:81:dc:5a:c7:d7:
7f:a0:6c:6e:e3:fc:9e:8a:8c:1e:08:86:37:86:33:65:f8:6f:
bc:c3:24:72:0c:79:b8:f3:03:ed:bd:ad:3d:4d:3b:7e:8d:2d:
a1:1c:13:2e:a2:19:ef:54:b8:79:6f:b9:56:24:73:b4:5d:10:
34:b0:5c:4e:f2:c2:ad:93:c7:2b:e0:7b:64:7d:97:c2:60:df:
50:dc:90:7d:d8:9b:bf:c4:ce:24:2b:e3:06:ac:09:e4:40:7f:
f1:7f:08:f8:b6:c0:59:74:54:d1:46:3a:16:be:89:0d:89:16:
6c:4e:e4:89:c7:74:60:38:06:d8:60:4a:b4:2a:e9:16:a2:a2:
0d:3c:14:4b:19:19:a5:e8:52:fc:7a:5f:3e:72:ad:8c:8a:ef:
d4:91:08:5b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDjmUqoGsc/ck0QHPXbBjqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk
MDM5YjAwHhcNMjYwOTI3MTYwMTA5WhcNMjYwOTI4MTYwMTA5WjAzMTEwLwYDVQQD
EyhmZjkwODFhODczNjIyMTA5Yzc4MjU3NGM3MDg5NTdhYTNkOTZkNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh0LlOKLKfNHtZSjbOTTgPjK6t/2
cAULwuGoKzzx0/6v+viwNkymISmesp+rVnGtde+CVNidxHdHG5kYFay2MBNFED/e
TgMkptmAt9yFYws8DfwI/Xrlp8p504+G+PVxrHgzaDn5hEJWjjrcXYwxqPzFXBHk
uSQ9O1F7XQaEI6MkvL3+jDVU7qUSdmkhONXfIPL7UIMdvZFo18U0RuS+LDbMa9Z0
w8/irmeoZaDoCgkUQ6yTvqiCI7M16Y35Fp+JESFItMfTm4chMcsWFyFvwAPkELlH
bDX+zwPnCNHaKiqQErBv1/j1/CrSENhi7gkGAxB16YnfIyZD7/t0wsVzXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP+QgahzYiEJx4JXTHCJV6o9ltXnMB8GA1UdIwQY
MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy
LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk
MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVKP
6vx76n0RY2K3dYw7xlv5viilcuyuM7iv932gY6FN0I/w/S6DyPgw7Z9yOg7BLg7L
ime1Tm9VbAShKLLP0pwjzgFf+pd8GCsybOhvP4xEJlbS+NFryd/MH3cmFwLBiiTP
+UM3QIHcWsfXf6BsbuP8noqMHgiGN4YzZfhvvMMkcgx5uPMD7b2tPU07fo0toRwT
LqIZ71S4eW+5ViRztF0QNLBcTvLCrZPHK+B7ZH2XwmDfUNyQfdibv8TOJCvjBqwJ
5EB/8X8I+LbAWXRU0UY6Fr6JDYkWbE7kicd0YDgG2GBKtCrpFqKiDTwUSxkZpehS
/HpfPnKtjIrv1JEIWw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:31:40 2026 by rpki-client