Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: L3tJyktjQFK7p5N4mp9ecDD9dXXVaKiAiZko1q99lAM=
Subject key identifier: 37:34:D8:40:28:E3:E6:82:01:52:79:CA:74:49:7A:E3:32:AF:A9:BF
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 01A0D7607131C794D626180B263ACB13703F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0AD5
Signing time: Fri 25 Sep 2026 07:03:36 +0000
Manifest this update: Fri 25 Sep 2026 07:03:36 +0000
Manifest next update: Sat 26 Sep 2026 07:03:36 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: LB/McKhLV5m945yb3XVcZzm2riRwatqNd3F0OF/dqEU=)
2: zsQtQXRIMfmAATwnDwSYChB6X74.roa (hash: Usub4GZLrzPgjoxI/zygWmH+Aj3bFEudCK+rN9RJJeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:71:31:c7:94:d6:26:18:0b:26:3a:cb:13:70:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Sep 25 07:03:36 2026 GMT
Not After : Sep 26 07:03:36 2026 GMT
Subject: CN=3734d84028e3e682015279ca74497ae332afa9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:0e:9e:d4:d1:bd:ea:4c:9d:58:82:4a:ed:
24:78:c8:83:96:ba:51:f1:89:d2:91:8e:a2:15:ce:
3b:1f:48:1d:1a:2d:8e:6b:a7:ae:c3:10:55:75:2a:
22:d4:57:7d:8e:15:e5:25:10:5e:ba:4d:00:87:64:
5c:c3:ec:95:59:f6:4f:7e:83:e4:fc:51:17:16:74:
2e:c3:1b:42:15:1b:f1:e2:23:da:fd:24:85:b6:21:
1b:dc:9a:0f:df:2f:3b:8d:41:09:f2:ac:8f:4b:1a:
76:68:ff:42:c5:15:4c:7f:d6:1f:9c:ef:c1:1d:31:
56:29:15:d8:43:79:2e:8f:d4:6b:b7:41:f5:97:25:
9c:fd:d5:85:1d:b1:dc:00:6f:8c:e0:d6:e5:d3:8e:
2f:67:47:24:39:38:51:1a:e2:8f:0e:50:87:f0:6b:
88:77:29:af:37:9e:34:0a:6a:6e:94:a2:62:1b:cb:
87:a5:37:0d:a1:49:e3:45:d4:81:99:65:52:33:90:
57:c8:11:60:04:b3:60:b7:ba:a7:1a:44:34:77:d7:
73:af:4d:70:41:35:13:c5:c7:dc:5a:21:17:ec:ed:
59:d6:bd:81:fb:50:0f:fb:7a:0f:94:36:98:2f:79:
64:04:f9:dd:21:97:93:10:1d:41:5f:64:24:2c:ac:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:D8:40:28:E3:E6:82:01:52:79:CA:74:49:7A:E3:32:AF:A9:BF
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6f:79:12:4f:4a:eb:45:4b:7c:5a:7c:08:a1:2a:0b:90:37:
32:1f:78:86:55:41:f5:9c:42:b0:e4:23:69:49:f3:52:25:72:
72:af:6b:b8:a4:3a:83:28:d7:bd:5c:ef:e5:c5:d3:5a:36:78:
9f:9f:a4:af:50:9b:87:50:a1:13:b0:c8:b0:29:ae:8b:f7:ff:
63:5b:dc:e8:72:67:84:50:0c:53:b5:f9:e7:c6:48:be:2e:5f:
39:41:6e:54:82:2b:7e:25:8e:86:d3:3e:da:46:eb:40:ce:99:
93:f4:c2:2f:1e:0d:8d:02:fd:90:45:1a:c4:ab:76:f6:79:d9:
ed:92:6f:bd:aa:a1:b1:ce:52:02:ae:22:b0:fd:ac:01:2f:66:
6b:5f:07:17:06:e5:b4:1a:1e:24:0f:8f:1d:54:a5:ce:ff:30:
7c:9a:aa:31:e7:bb:f4:8c:49:21:3a:c5:81:02:ca:54:78:13:
d9:c5:1c:62:e3:34:aa:f2:37:e6:99:c1:cd:cf:48:3f:a3:b0:
90:b6:37:ed:3a:1d:fe:f3:5a:78:43:aa:7b:a5:4f:8d:46:22:
56:24:cc:0e:af:ce:d7:ce:6b:d9:ae:30:33:52:25:ee:f7:15:
dc:0d:02:68:8f:8a:8e:e0:c5:54:8c:c6:c4:7e:ca:de:e8:35:
b3:4d:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:32:06 2026 by rpki-client