Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
File: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft (raw, json)
Hash identifier: LKuw09L+hVtvIQY48Wo5MEY00MmdrbW5O0EdIJLixYs=
Subject key identifier: 5B:EA:63:44:13:05:12:B5:1B:E4:D9:00:AB:BE:3C:AC:AC:BA:C3:5D
Authority key identifier: FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
Certificate issuer: /CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Certificate serial: 01A0D1C9992C384E4A62E5BD531DC87CE1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
Manifest number: 0284
Signing time: Thu 24 Sep 2026 05:00:45 +0000
Manifest this update: Thu 24 Sep 2026 05:00:45 +0000
Manifest next update: Fri 25 Sep 2026 05:00:45 +0000
Files and hashes: 1: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl (hash: EfYXygIBfMfHto/jr/wau/vOsg4N3yNtTXsArrR+6Ag=)
2: sjcD7P1b4OH3bAoChPJ2EGVO_80.roa (hash: 3ibINEJI2J0CI3oq9fJ1To5iRpHn9oYrPYwzYRGItP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:99:2c:38:4e:4a:62:e5:bd:53:1d:c8:7c:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Validity
Not Before: Sep 24 05:00:45 2026 GMT
Not After : Sep 25 05:00:45 2026 GMT
Subject: CN=5bea6344130512b51be4d900abbe3cacacbac35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:81:f5:1b:06:63:2d:ce:cb:53:eb:d6:eb:
17:bc:f2:23:50:40:8c:f5:96:37:4c:6c:c3:2c:22:
32:6b:f1:5b:8d:c5:d7:24:fb:c5:96:41:b5:3e:78:
b9:60:54:59:a2:bb:36:99:ec:d5:89:d0:98:0f:66:
9c:fd:d6:e7:c9:d7:ea:3c:f3:67:e4:df:ab:81:75:
6b:a9:33:df:10:9c:90:48:f6:c6:65:db:56:bc:41:
47:2e:ca:fa:dc:e1:17:ef:16:75:94:4c:f4:01:a3:
76:af:a5:2b:28:42:ee:41:a2:ea:c9:3a:89:63:2e:
47:0a:bf:52:a7:c0:12:3a:11:a3:1c:e1:b4:0e:53:
f8:5b:ad:82:67:0c:aa:08:ae:47:75:6d:c2:11:88:
ab:3e:0b:77:44:17:30:5f:01:99:96:68:5d:f3:70:
c7:5e:74:6b:71:65:59:b9:a7:fd:cb:39:02:b6:4c:
19:c1:aa:87:98:65:ba:25:4f:c7:44:8d:fd:28:e1:
4c:0e:20:82:0c:33:87:15:bc:b7:8a:c8:f7:ad:37:
8d:7d:ed:74:ed:87:1e:5a:e3:81:be:a5:15:60:f2:
73:b9:48:5d:7e:20:d2:ac:c4:75:bc:b5:14:db:6f:
ee:63:35:0d:c3:20:c6:2b:5c:6c:89:38:8c:e1:72:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EA:63:44:13:05:12:B5:1B:E4:D9:00:AB:BE:3C:AC:AC:BA:C3:5D
X509v3 Authority Key Identifier:
keyid:FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:72:74:d5:e1:00:51:34:04:9d:fd:00:4b:bf:eb:d8:f2:39:
13:12:00:f8:2f:52:b4:c4:58:4b:27:1b:e0:0e:5e:ff:a7:f6:
fd:9c:ce:b7:a1:90:aa:93:02:c3:a3:c5:08:14:52:ec:03:16:
a5:e5:ea:33:12:8b:43:80:a8:3a:97:11:5f:b9:aa:a3:6b:86:
9b:0a:8a:c8:6d:cf:1d:b3:e5:d5:52:23:78:df:9f:2c:ad:0d:
a6:a0:f2:9c:70:45:1e:ef:4f:6a:34:bc:de:3a:59:3a:2f:fc:
f7:00:05:e0:35:19:4f:d3:c4:6e:9f:ea:84:c7:24:ad:50:13:
d4:69:4d:0f:74:8b:56:41:09:f7:ed:d6:6f:10:a4:68:1e:a6:
bf:78:b3:22:6f:ec:5a:b6:35:a2:a0:b4:74:4b:82:6d:e6:48:
dc:9c:70:a1:37:c6:ab:ae:62:de:40:18:47:35:6a:5f:8d:12:
2c:2f:7a:97:e7:db:a6:fb:c0:fb:c5:13:0d:cb:cb:9d:e1:56:
fc:fc:3d:97:75:a3:55:94:38:00:03:67:e8:8d:26:d2:3f:db:
d2:97:c6:2e:45:97:ce:ee:00:94:16:73:ff:c0:fc:f1:90:eb:
b3:2b:8f:e4:61:60:23:2e:10:f4:75:af:36:3b:56:c8:91:ca:
e4:b1:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:56:12 2026 by rpki-client