Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: zgSIfTxD/Xfl6j22wC2bGaq7o5yvBQrSYl03CaZvkpo=
Subject key identifier: 92:F4:03:6A:1F:71:F4:B4:B2:00:60:63:40:ED:A8:33:E3:2A:68:5B
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01A0ED0BA591113E812B8669BCBD0DDC50BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1A81
Signing time: Tue 29 Sep 2026 12:02:38 +0000
Manifest this update: Tue 29 Sep 2026 12:02:38 +0000
Manifest next update: Wed 30 Sep 2026 12:02:38 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: VC6pNUGeF/lZ0r4m1JoR59CYEPWGSes88qUOS6RTXVM=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:a5:91:11:3e:81:2b:86:69:bc:bd:0d:dc:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Sep 29 12:02:38 2026 GMT
Not After : Sep 30 12:02:38 2026 GMT
Subject: CN=92f4036a1f71f4b4b200606340eda833e32a685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e3:cf:f7:c0:e0:b1:39:5b:0f:82:d4:87:a4:
de:72:2f:c9:3a:51:4c:55:d5:51:cc:8b:38:9a:50:
c4:63:85:1f:62:c7:5c:0e:ba:20:fe:1f:0a:d7:25:
d0:00:3d:73:e2:fb:d0:ee:83:65:80:e5:31:9c:5c:
bc:01:65:2b:38:b4:30:52:2c:d0:d5:3f:96:44:44:
cf:c9:ac:49:8b:01:97:1e:6f:ae:0a:6e:e1:e6:cc:
1c:a5:09:83:7d:a4:8e:83:78:e1:b7:b3:04:67:f3:
f7:aa:f2:4e:b6:b0:b1:68:30:5b:e9:d6:81:e3:55:
7b:fd:1b:32:f8:31:dc:c6:08:c6:4d:24:30:66:84:
77:62:f6:d1:93:87:49:0e:d4:c7:8c:33:f9:40:53:
25:e3:8d:db:37:77:ec:90:a8:30:f9:ef:4b:b3:89:
da:14:e4:bb:a5:10:35:05:f9:f6:f7:f0:37:23:ac:
98:0b:61:92:17:02:41:70:34:a9:49:08:76:35:35:
8c:b6:b3:69:42:5b:71:5f:b6:e4:08:97:cf:c0:07:
63:05:30:c6:7a:34:7c:fd:95:ea:32:f0:ab:35:83:
33:3d:6e:c0:3f:74:fc:c7:62:c3:84:14:61:9d:22:
40:91:57:11:88:de:a8:ca:98:50:91:03:5b:71:1f:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:03:6A:1F:71:F4:B4:B2:00:60:63:40:ED:A8:33:E3:2A:68:5B
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:18:c5:08:9c:f5:e1:e0:4e:c4:24:ec:8c:8d:95:e3:cd:
ae:01:f3:5b:80:01:bd:53:29:85:be:9a:19:9a:1a:ae:bd:86:
e2:0c:ee:2e:ef:71:ed:f1:b1:94:76:58:45:3c:df:bd:53:b2:
6b:cd:d2:f4:db:5b:68:dd:ba:9a:02:d8:67:c9:50:1f:ea:ea:
26:27:e3:b7:0e:6d:e0:e6:ad:36:7f:2d:5f:ea:d3:d0:03:f0:
d4:59:24:85:2d:90:da:5d:63:e3:c9:12:8f:12:d0:00:c4:42:
f0:3c:c5:5a:bd:13:72:3b:e3:ad:79:f1:33:cd:b8:a4:71:ad:
28:54:d2:70:f9:aa:c7:01:f0:0a:14:29:9b:1f:4f:8c:cf:f6:
20:57:d0:16:6c:8a:b6:b4:cd:8b:28:a8:c3:dc:2b:d0:4f:df:
fc:0e:a8:68:8b:79:47:38:52:0a:c0:5f:ae:93:fa:6d:0a:9e:
02:03:6b:bd:cc:51:20:a1:3c:d5:be:41:b8:f4:35:40:e7:e3:
39:c9:8b:d3:74:0a:6e:22:24:1d:60:4f:0b:9d:7a:88:92:0f:
b8:0e:b0:c1:fb:74:f1:b5:c9:12:b1:02:05:f8:05:3f:19:34:
f2:8c:82:88:ed:cc:01:3f:bb:16:cd:69:e3:78:a0:f6:d0:51:
c8:92:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:38:53 2026 by rpki-client