Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: NU3n/2FaMT3FostYmqkqnIFa3SGgeSMskYeSgSDJXaI=
Subject key identifier: A3:E6:B5:4A:B4:1A:1D:5F:14:B5:A4:52:4E:88:DC:60:E6:8D:8B:DB
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 01A0DA285CF0484122475556D032279F08F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0DCB
Signing time: Fri 25 Sep 2026 20:01:13 +0000
Manifest this update: Fri 25 Sep 2026 20:01:13 +0000
Manifest next update: Sat 26 Sep 2026 20:01:13 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: 2IfQq9MpZePR5nBU9XtCBw/XohRBEEBmZzeJUILXivg=)
2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:5c:f0:48:41:22:47:55:56:d0:32:27:9f:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Sep 25 20:01:13 2026 GMT
Not After : Sep 26 20:01:13 2026 GMT
Subject: CN=a3e6b54ab41a1d5f14b5a4524e88dc60e68d8bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:5a:8c:43:f4:64:03:ad:1f:c0:b5:36:f0:
a1:ae:e1:b3:c4:cb:d8:19:57:ff:99:4e:43:31:6c:
9e:44:8b:88:4b:8c:1c:b3:b7:e1:d7:75:c4:6c:98:
90:e9:17:e4:3b:b2:82:98:20:85:d3:b3:93:10:75:
74:f9:c2:97:c6:05:d5:66:1f:85:69:c7:ad:e1:59:
68:e8:75:d8:ed:7b:90:db:9f:d4:db:00:68:21:9e:
9e:c0:95:90:91:4b:84:98:9c:85:a2:59:11:ca:ba:
fa:46:c5:4f:8f:f9:57:7c:f8:65:61:da:60:79:d7:
6c:1b:89:41:ce:a7:65:39:cb:9c:32:21:9a:b4:77:
24:6f:cc:63:22:50:d8:9b:f1:60:94:7f:0a:ae:a6:
36:b1:db:06:3f:00:d4:4e:15:b1:87:d1:5d:56:b0:
41:b0:7b:43:2e:d8:77:a7:67:3a:27:d1:38:d1:e6:
df:59:bc:d7:36:8d:b2:5a:fc:98:10:b1:ff:f9:d5:
27:23:a8:db:75:a2:7a:33:b2:f1:02:20:ee:b6:b0:
52:26:c5:0e:65:5a:a7:7a:2d:7b:4d:ab:52:48:de:
34:e3:e7:53:8e:af:68:19:de:a7:b4:e2:bc:7e:97:
a9:4f:45:62:41:34:07:fc:e5:f8:51:64:78:85:38:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:B5:4A:B4:1A:1D:5F:14:B5:A4:52:4E:88:DC:60:E6:8D:8B:DB
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f7:a9:9b:c8:da:93:d5:34:fe:4d:83:b8:7a:5d:db:f3:e0:
e3:2e:06:f7:d9:40:50:19:53:c2:09:02:0c:a0:5f:a8:37:40:
2a:fe:bb:98:62:57:f7:5e:d2:67:fb:72:23:70:e5:24:af:b0:
55:88:ee:df:e7:37:02:f5:33:06:aa:08:f3:f9:48:26:2c:d2:
71:da:19:03:bb:58:c0:03:ef:b3:b6:04:e1:d6:98:31:ae:cc:
52:3f:22:98:93:d1:e4:29:20:4e:37:59:e6:b8:38:64:c3:eb:
30:52:42:1d:a4:1c:75:79:4a:87:97:34:29:bf:2c:f8:49:7a:
98:e6:5c:2a:c0:d3:7b:50:af:07:6e:60:34:1b:1f:44:36:82:
9a:da:bb:12:6a:6c:d3:dd:11:12:61:58:10:a7:0e:6a:9d:cf:
4b:eb:5c:0f:e8:c2:b8:0a:0e:83:d3:30:82:f3:41:8e:a9:f6:
81:c5:23:86:3f:b0:44:00:81:9d:bd:7c:74:f4:73:84:84:29:
8b:7f:b7:1f:15:19:9f:2d:51:b9:f9:b1:ba:a7:c4:30:ac:b0:
92:18:dc:43:b0:6e:41:c3:3c:d9:a6:e5:bb:ae:d2:12:9f:63:
95:b9:1b:c7:85:0b:ad:d3:81:1c:19:70:b0:2d:cd:b5:23:c8:
f4:53:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:40 2026 by rpki-client