Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
File: 1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft (raw, json)
Hash identifier: oZAWwSrYOmwKoDtwlQWvKY9dWRNzxXBJKfFcAjcYGas=
Subject key identifier: 78:EC:1B:8E:B8:59:7F:9D:D1:EB:DC:C7:88:9F:0C:C0:9C:22:34:7B
Authority key identifier: F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
Certificate issuer: /CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Certificate serial: 01A0CE2492029EAE311A01F956D861F06AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:38 +0000
Manifest this update: Wed 23 Sep 2026 12:01:38 +0000
Manifest next update: Thu 24 Sep 2026 12:01:38 +0000
Files and hashes: 1: 1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl (hash: kwhdpBV7ER+E0LSqGIlC0y9PMLIwFhtIazb0EKFFlHw=)
2: k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa (hash: H47SjZ9BIhJeQGY/J6bkZroBOYzowjDBp3fQiJCG8Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:92:02:9e:ae:31:1a:01:f9:56:d8:61:f0:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Validity
Not Before: Sep 23 12:01:38 2026 GMT
Not After : Sep 24 12:01:38 2026 GMT
Subject: CN=78ec1b8eb8597f9dd1ebdcc7889f0cc09c22347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:ab:0c:51:66:bb:73:57:f8:c1:e3:cb:c0:
82:5c:3e:3b:bb:4b:43:98:72:9e:a4:da:bd:17:25:
f7:fe:07:86:d2:c5:bc:cc:0e:7c:99:db:27:67:5e:
b2:df:df:2f:a3:6b:a1:45:b7:cc:38:58:20:18:34:
a4:3e:d9:a1:1b:8c:1b:d2:e4:ff:cb:fb:67:09:39:
2f:01:eb:02:53:bc:75:a5:22:f8:6f:7f:04:6e:e3:
7c:64:fd:d5:3e:1d:23:42:42:46:0d:f4:d4:89:a9:
cd:5f:8f:31:ef:28:83:6a:d2:1f:be:ca:a2:58:50:
71:b0:29:80:d0:73:a2:22:fe:a3:b6:78:2a:49:0e:
37:94:ff:0d:34:81:a1:ce:d3:75:df:4a:3f:57:a2:
0a:c9:21:ee:12:a9:bf:95:84:3f:12:eb:b3:1a:cc:
be:67:9a:65:c3:30:dc:7e:80:73:9b:4f:82:ea:77:
84:f2:07:49:c4:d9:ea:da:1a:f8:56:3d:80:a2:46:
77:df:84:f4:90:48:7f:5e:f7:b7:51:69:07:29:c3:
59:e8:99:ef:37:ca:99:b1:5c:13:76:dc:69:ee:82:
fe:14:2b:01:36:30:06:c9:82:a4:a5:d5:f0:12:30:
3d:93:aa:06:7e:91:e8:82:f4:b8:d4:aa:94:29:13:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EC:1B:8E:B8:59:7F:9D:D1:EB:DC:C7:88:9F:0C:C0:9C:22:34:7B
X509v3 Authority Key Identifier:
keyid:F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2b:8b:b5:fd:73:ac:74:6a:62:6c:2a:4b:2a:0c:e7:11:c3:
3e:35:5f:5c:ae:48:30:05:f3:b1:2c:f9:10:81:7c:2c:77:21:
44:14:21:3c:b4:c4:4a:bf:75:a7:63:11:39:bc:c9:c5:44:7a:
2d:f6:3f:62:34:fc:42:61:25:87:8c:8a:35:2f:73:09:55:51:
f1:5f:31:29:7c:92:17:33:39:a7:8d:1f:fe:04:20:e6:0f:b8:
90:02:3f:ff:c6:87:a5:18:b8:ba:5f:47:06:65:20:14:4b:e0:
8b:28:7f:98:98:bf:2d:63:37:08:85:39:01:5c:f8:1c:b5:03:
23:63:16:d4:c3:e4:63:0b:41:90:4b:d7:63:48:38:18:0a:f3:
a6:58:92:69:50:69:ed:3e:14:e8:98:39:3f:0c:a9:6f:f9:3f:
fb:a7:ec:43:1d:8b:e0:d9:e6:b3:59:79:b6:53:3b:cb:0b:47:
25:ef:bf:63:c8:74:d0:9a:80:3b:95:28:26:60:24:22:69:5f:
41:58:75:c9:5a:4e:8f:b7:fd:e6:ea:86:9e:a2:ad:3a:5d:6d:
c3:a7:f1:ef:e6:c7:ae:ac:5b:8f:ca:e7:56:f1:94:46:20:4e:
25:ba:04:04:83:a3:d3:5e:83:d9:19:be:3c:9b:1e:47:a2:11:
35:72:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:12 2026 by rpki-client