Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: IikcmX8dhIfxcjWmnAsIDIqI5mjwMlyzvDPMVoUlAk8=
Subject key identifier: 57:08:51:FA:EC:CF:CA:C2:C3:5E:E8:FC:01:B4:4C:DD:D6:4F:96:34
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 01A0D1C97E2365CEE506366AB2CCA8625589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 05:00:38 +0000
Manifest this update: Thu 24 Sep 2026 05:00:38 +0000
Manifest next update: Fri 25 Sep 2026 05:00:38 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: YhjOnY+vVEO22hry8TTM8RZO5PQENxpkNuWq3B4DIe0=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:7e:23:65:ce:e5:06:36:6a:b2:cc:a8:62:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Sep 24 05:00:38 2026 GMT
Not After : Sep 25 05:00:38 2026 GMT
Subject: CN=570851faeccfcac2c35ee8fc01b44cddd64f9634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:03:09:92:f5:29:72:1d:ea:ff:44:55:46:
07:24:4f:3d:8d:12:fd:25:b9:77:b3:ac:9f:28:98:
14:36:16:91:c1:81:68:2f:82:62:9d:23:1e:28:36:
a7:16:5c:51:d7:49:86:c0:a9:a4:d1:b7:0a:c0:54:
2c:c6:ed:6e:39:1f:e8:26:bd:80:06:c6:73:3d:a7:
e1:70:7f:58:32:68:bf:ce:97:e3:8f:ea:94:07:c5:
14:22:f8:94:20:c5:00:3c:8b:1f:9b:68:95:45:c0:
e7:0c:f5:aa:70:9d:f3:e5:b3:c9:c4:8e:02:59:c7:
06:d0:14:70:b3:fb:73:aa:bf:b8:d9:0e:b8:9d:af:
d6:96:e1:40:a9:59:4a:40:a1:24:86:a6:85:ef:e1:
0d:33:01:e1:f0:c8:25:57:1c:d3:c9:cc:ee:a9:96:
b1:81:ca:64:40:98:96:a7:a4:2c:d3:26:a9:3a:ed:
8b:6e:d6:75:9c:18:1f:38:8b:ba:8a:c7:11:b8:6c:
4d:42:37:5c:8d:d6:0f:85:b3:9d:97:dc:43:ce:ff:
19:45:73:fc:34:79:d8:d2:ef:6d:96:b4:9c:34:06:
35:b5:1b:2b:52:cb:dd:c2:ce:9a:69:1a:65:b7:86:
db:e6:bb:8e:b3:1c:6c:71:55:89:89:a1:4f:69:53:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:51:FA:EC:CF:CA:C2:C3:5E:E8:FC:01:B4:4C:DD:D6:4F:96:34
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:58:3c:b6:b8:9b:e3:76:25:58:3c:c9:2b:39:23:20:e8:98:
cc:b1:fb:91:19:e3:30:1e:b2:4d:5a:77:9a:4c:ba:0e:06:50:
11:4c:58:a4:56:fb:dc:ba:f2:1c:1f:b0:8e:88:7c:6f:7e:50:
00:22:ef:c1:82:1d:f9:28:11:ba:a8:d6:db:fd:9b:1c:86:d6:
86:f9:00:71:51:f9:6f:e8:cd:18:c5:18:a9:5e:41:29:7c:a1:
24:5a:41:f8:71:58:2e:13:c6:cc:13:81:2c:19:ac:6e:b6:8c:
e5:33:be:96:78:c2:72:49:d3:c5:d8:32:7a:be:af:86:cd:a7:
dd:62:99:2d:4e:fe:1b:3b:4c:ab:15:b9:6e:19:3c:0f:0c:a9:
49:cf:6f:bb:a5:1e:77:67:7c:1d:d6:ec:cc:3b:c0:62:3a:47:
80:d5:d6:7c:60:6b:d4:90:ab:13:38:ad:5a:24:04:1f:3e:ca:
93:31:99:88:8e:bc:e5:09:d6:83:d0:63:e0:51:b7:df:c7:64:
8b:c9:15:0d:a0:23:e7:ea:b2:e5:08:64:3d:94:8c:09:f5:38:
ae:a3:67:eb:9c:01:7c:8d:05:93:0e:34:ef:a9:a3:40:18:54:
f7:97:e7:c8:21:33:c7:c4:fd:84:fa:d1:6d:96:0d:03:4d:63:
ec:d6:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:51:57 2026 by rpki-client