Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.mft
File: 1-8EeNyIFloe3shzm724G4Tquf_c.mft (raw, json)
Hash identifier: MoNswi8DJ6GAigdKEpmaXIBfFh8f4UAs/HG9PF69Q9I=
Subject key identifier: FA:90:45:D5:CD:35:61:1E:60:52:44:58:4B:5B:79:B1:3A:19:B4:00
Authority key identifier: FB:C1:1E:37:22:05:96:87:B7:B2:1C:E6:EF:6E:06:E1:3A:AE:7F:F7
Certificate issuer: /CN=fbc11e3722059687b7b21ce6ef6e06e13aae7ff7
Certificate serial: 01A0CDECB427E47C5E70A3991E7C745A6AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.mft
Manifest number: 035A
Signing time: Wed 23 Sep 2026 11:00:36 +0000
Manifest this update: Wed 23 Sep 2026 11:00:36 +0000
Manifest next update: Thu 24 Sep 2026 11:00:36 +0000
Files and hashes: 1: 1-8EeNyIFloe3shzm724G4Tquf_c.crl (hash: Qp2RSiGWw6HumQqQC9VZFN00EUSuDaRQ3+2sQf5xwj8=)
2: nZDK7sbY21bRj2Hp0i9KCOGbsKk.roa (hash: G7kaYo8IGsXaWPAso4urxMGsWcq1i7qYSJitxmHJ7pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:b4:27:e4:7c:5e:70:a3:99:1e:7c:74:5a:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbc11e3722059687b7b21ce6ef6e06e13aae7ff7
Validity
Not Before: Sep 23 11:00:36 2026 GMT
Not After : Sep 24 11:00:36 2026 GMT
Subject: CN=fa9045d5cd35611e605244584b5b79b13a19b400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:d5:fa:4b:a5:8a:1c:ee:ef:d9:76:42:75:
ea:d9:6c:e4:ed:7a:78:bc:b3:72:7f:06:2b:c0:1e:
7e:d3:60:2a:32:cf:81:1a:b2:f7:7a:9b:68:f1:52:
c2:56:43:77:dc:2a:da:33:56:c0:62:e5:d9:4e:ed:
e5:c1:4c:67:e8:70:9b:76:a3:8d:82:27:95:0e:66:
5f:3d:3a:d2:9a:58:57:75:b5:be:1d:7d:f9:69:1f:
15:9a:e9:bd:21:0d:e1:80:ae:b5:c8:97:5b:99:d3:
7c:e1:0b:af:33:9c:e4:20:be:e6:7b:4f:33:78:3d:
41:58:4e:a0:a9:dc:b8:77:6b:a9:9f:5d:07:25:05:
91:7f:32:67:9f:ae:78:c2:5c:09:32:f1:98:59:f6:
0c:89:6e:21:d2:af:3b:94:b7:eb:d7:01:0c:06:ab:
aa:25:18:40:83:2d:ad:a5:94:8e:f2:ee:08:a6:af:
9d:0d:4b:fb:53:ac:91:93:85:fe:ab:98:ce:38:ee:
81:2e:18:f4:7b:92:1a:22:54:28:f6:b7:03:8d:94:
6c:c3:d1:df:54:e8:45:d8:92:18:97:d7:d2:a5:4e:
93:31:ca:cb:7d:19:1d:23:a3:e2:8e:63:1b:8f:3b:
88:54:b6:45:38:42:9b:11:79:e8:a8:32:fd:9d:46:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:90:45:D5:CD:35:61:1E:60:52:44:58:4B:5B:79:B1:3A:19:B4:00
X509v3 Authority Key Identifier:
keyid:FB:C1:1E:37:22:05:96:87:B7:B2:1C:E6:EF:6E:06:E1:3A:AE:7F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f7:93:dc:f2:1c:a9:b4:fb:63:90:fd:fa:4a:26:c0:29:9b:
00:d2:be:ae:09:10:0e:79:b6:b3:b5:25:01:ec:bd:88:3d:fc:
a4:d1:bb:c0:d4:dc:33:25:95:80:f8:15:a8:7e:f4:78:cb:e4:
d7:c4:39:13:7b:84:ee:4e:6d:22:c9:54:d0:a7:b3:9a:40:8f:
d7:84:0a:22:81:92:f7:5d:29:67:e9:75:f1:3e:b3:e5:45:02:
1b:63:c7:6b:c9:9b:4a:bd:70:ef:39:97:28:8a:87:02:20:4d:
0e:24:17:7c:cd:a7:5e:29:73:03:9f:69:6c:83:cf:f9:3b:45:
7d:6f:b9:60:ba:41:77:f7:e8:69:55:6f:5f:03:9d:9b:c1:53:
48:fa:7f:f8:7f:99:f2:a3:b3:d6:6d:7f:5b:e6:d6:fc:40:70:
f3:fb:cb:de:3c:ec:a8:fd:71:55:fb:8a:20:1b:7a:93:57:8e:
29:bd:5a:31:73:c4:b1:b2:d5:f2:ff:5d:f3:18:43:02:8b:66:
aa:2b:08:6f:59:8f:b6:cc:1e:d1:1b:2a:d8:11:ad:34:e3:aa:
b7:81:97:af:c9:a8:f4:93:7c:01:0c:71:94:8c:4f:10:6d:4d:
a4:4a:d0:cf:69:4c:70:cd:f0:f0:56:cb:00:71:59:28:5e:f1:
66:5f:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:36:03 2026 by rpki-client