Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: osyrk+blE+DLVg6/+zxqtkUNfVSFnMbuUnx7ZHiE/qw=
Subject key identifier: CF:0B:E0:D4:81:4B:6A:7B:F8:24:F2:7D:7D:9B:17:35:22:F8:1C:47
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 01A0FF478539C7A95B20E11E5C0B9023D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 0825
Signing time: Sat 03 Oct 2026 01:01:12 +0000
Manifest this update: Sat 03 Oct 2026 01:01:12 +0000
Manifest next update: Sun 04 Oct 2026 01:01:12 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: ti0xZ+RmajdQmY0ODKvDSeBkL1vzbkV9SayrMFFIXcA=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:85:39:c7:a9:5b:20:e1:1e:5c:0b:90:23:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Oct 3 01:01:12 2026 GMT
Not After : Oct 4 01:01:12 2026 GMT
Subject: CN=cf0be0d4814b6a7bf824f27d7d9b173522f81c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:39:bf:25:e3:74:44:0e:db:db:b8:60:1b:
2f:6c:35:72:2c:5a:ad:8f:b9:2b:ed:9c:5f:d8:1e:
ad:23:8b:b7:1e:c4:80:c2:3f:fd:6e:2e:6c:7b:f4:
6f:fe:d5:59:6f:8e:55:72:d1:a4:d5:43:ee:f6:26:
85:b9:a7:48:3d:b0:8f:6b:e2:26:70:3d:9f:c9:13:
ea:02:0d:27:51:de:66:a3:e2:65:de:fe:0f:80:4e:
67:d8:9a:17:57:50:16:67:24:23:e9:22:f4:81:bc:
bc:f3:9b:03:c7:f5:ac:3e:87:ae:c5:8a:e4:91:80:
9f:a1:a4:54:e0:46:47:22:39:36:47:6d:c4:81:4f:
2b:42:73:43:f8:da:11:6a:b9:cd:55:ee:d7:ef:d3:
56:58:2b:d5:a1:63:74:cf:90:d7:81:43:2a:2a:d2:
83:68:83:1e:25:a4:ce:f1:a1:1c:1c:87:f0:29:06:
a0:1b:11:a8:ed:a5:af:b5:16:71:69:b1:53:34:2f:
a3:32:6c:8f:7d:a7:31:3f:f3:ed:b1:dd:d6:8d:5f:
b6:b7:f6:b9:fb:71:89:b5:10:fd:20:ef:6f:ed:ae:
bb:55:02:59:fc:4d:cc:5c:b5:90:43:8b:b7:79:50:
29:7f:9f:43:98:e6:0f:e8:46:f8:7b:76:10:6f:c4:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:E0:D4:81:4B:6A:7B:F8:24:F2:7D:7D:9B:17:35:22:F8:1C:47
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7f:6c:29:13:aa:a4:25:16:0d:72:80:a8:11:53:b5:78:3d:
3b:02:fb:92:b4:cf:3c:8d:a9:bb:94:f7:ad:0f:bf:68:23:3c:
22:37:29:64:2d:0d:b5:ef:00:ac:ef:c1:35:75:6b:4f:3d:6b:
12:ef:4f:2a:e3:46:6a:6e:7c:b5:ed:50:eb:2d:7d:69:45:a5:
80:0b:45:1b:5e:2b:7f:5c:4a:35:10:42:ec:88:f1:e3:b9:2e:
6c:10:25:93:25:c8:af:b3:8f:c0:85:b5:58:96:37:cd:12:b3:
af:a6:e6:87:71:23:e6:bf:b4:0a:13:00:de:05:d6:97:e9:29:
b2:fc:5b:0e:b9:b6:b9:0c:5a:f4:4e:24:b4:28:db:0c:cd:a3:
0e:eb:1a:65:32:7a:a5:f8:9b:3e:91:ec:12:88:63:bc:89:2e:
2e:6a:c1:f6:a4:ac:cb:7b:e8:c8:88:c0:1b:49:35:75:0a:2f:
e6:cf:10:97:4b:6b:9b:6b:fb:b3:7f:47:0e:21:2e:82:9f:c9:
b1:c2:c6:41:48:34:aa:3f:66:3f:6f:6d:a2:a7:f2:1f:34:ab:
bd:e7:fd:fb:45:04:23:40:e7:d8:3c:ee:07:4b:80:61:aa:21:
41:a9:af:bc:d2:73:31:71:41:a4:35:41:87:05:d1:e6:df:5c:
4d:71:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:19:10 2026 by rpki-client