Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: l10qEZKfAgUbDLKnHiioS1NOG9BIJ8mwalPXT7o7sQ4=
Subject key identifier: D0:C6:33:D3:16:CD:FA:83:47:5B:71:A7:1E:A1:72:25:F0:0A:F7:6E
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01A0CA0FB230C0B0A6BA67883B878636C472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 17:00:21 +0000
Manifest this update: Tue 22 Sep 2026 17:00:21 +0000
Manifest next update: Wed 23 Sep 2026 17:00:21 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: X7BX3dRNLKChp2aaEAbVA4g7aBtuWQ5NjF4jfeDz7DQ=)
2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:b2:30:c0:b0:a6:ba:67:88:3b:87:86:36:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Sep 22 17:00:21 2026 GMT
Not After : Sep 23 17:00:21 2026 GMT
Subject: CN=d0c633d316cdfa83475b71a71ea17225f00af76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:24:f3:85:98:fc:10:3d:2d:f4:83:48:dd:c7:
de:67:d7:eb:e1:5e:be:f6:7e:3e:cd:6a:73:c1:27:
81:03:a7:33:70:10:bc:41:69:fe:7b:e6:0b:fa:c1:
f7:b5:5c:96:50:86:e3:63:7c:91:86:dc:81:5c:9f:
ef:21:32:4b:ae:ea:23:1f:5d:be:57:b1:c0:ea:9b:
b9:87:76:4c:68:db:e4:f4:18:bd:6f:e3:a3:5f:55:
70:64:c8:99:f1:34:3f:43:ca:f6:83:1e:24:26:ad:
3a:b4:04:55:53:00:48:fe:e5:df:28:67:fb:8a:3c:
0f:8c:af:8c:5c:5a:1c:9a:6d:be:43:4d:6f:b4:ce:
94:6c:8d:34:1d:ad:b2:0c:3c:8b:9b:38:8e:d8:e5:
95:03:08:67:0d:a6:bf:e4:22:f2:5d:3c:b8:cc:7a:
02:2e:46:64:f6:6e:1e:1a:2e:a5:88:b8:1c:85:d5:
ec:3d:c4:b7:02:30:36:47:a1:a1:b6:80:1c:36:a0:
d8:1d:0c:63:82:25:2f:d8:4a:ff:6d:20:e5:75:42:
5e:57:96:cf:b4:d1:cb:78:e4:d4:3a:ca:38:72:f7:
ac:95:f4:17:72:ab:b8:61:c6:6e:f2:e7:1c:21:5c:
17:3d:05:01:a1:5b:1d:87:54:05:84:89:48:45:91:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:33:D3:16:CD:FA:83:47:5B:71:A7:1E:A1:72:25:F0:0A:F7:6E
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:e6:1c:15:8b:5b:8c:a7:5d:06:07:4e:38:0e:60:bd:c5:
eb:45:16:61:16:1a:df:92:de:a5:84:95:5d:92:d0:23:c3:ea:
c0:d0:3b:25:d7:d2:81:ec:af:9d:ab:6f:e3:b9:fd:b8:a9:ef:
0d:a0:65:5c:a1:a6:a6:81:6a:22:34:08:55:27:d0:fd:c7:f8:
55:c7:9a:84:81:28:c8:b3:7f:09:9a:61:85:11:c2:75:ab:6e:
ca:0d:d7:af:0c:3d:4f:83:94:35:7d:34:50:00:1c:f3:12:34:
10:29:45:7e:ce:b2:6d:06:01:51:7d:90:e5:63:6e:b1:78:32:
b7:c7:22:18:7e:8b:6c:51:f7:d0:fb:0a:7a:99:08:0c:61:e0:
c4:9b:23:23:75:16:bb:5f:e9:5d:00:25:79:57:09:2c:41:9a:
e3:ff:1c:f8:ca:df:1e:c3:8f:45:51:93:4b:04:84:0b:96:10:
d4:9a:36:08:1b:9b:e7:70:fa:50:5f:be:a3:28:c1:a9:09:8c:
dd:5c:d7:f6:b0:25:02:fc:31:97:06:9a:9c:e9:cf:04:34:7a:
b0:c1:48:05:b6:3c:35:b4:11:82:05:ce:2c:63:6f:cd:bc:ee:
d6:06:5e:9e:e3:03:97:5e:b9:28:76:10:9e:5e:cc:85:54:57:
fa:17:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:13 2026 by rpki-client