Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: pedvVW9sr1ikd4R4Pwu2ppRbMkBv/cpqKNwAceQLgMk=
Subject key identifier: 42:A1:C5:3D:AC:B4:EE:F1:37:FB:B9:48:8E:DA:80:3E:04:90:3E:25
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 01A0D3EF6C4908A5DA150A338F5FC3551607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 09EC
Signing time: Thu 24 Sep 2026 15:01:18 +0000
Manifest this update: Thu 24 Sep 2026 15:01:18 +0000
Manifest next update: Fri 25 Sep 2026 15:01:18 +0000
Files and hashes: 1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: TM7YLCjl9qRinBgcqSStFvbKpnmY3zOzLXzZl2Fp6Dk=)
2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:6c:49:08:a5:da:15:0a:33:8f:5f:c3:55:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Sep 24 15:01:18 2026 GMT
Not After : Sep 25 15:01:18 2026 GMT
Subject: CN=42a1c53dacb4eef137fbb9488eda803e04903e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:ef:da:ec:86:96:79:ce:16:8f:dc:25:f7:
6c:52:7c:42:18:bc:06:0b:e8:a7:78:16:97:a1:88:
74:98:44:02:2a:0a:60:b4:c4:04:f1:61:41:83:25:
c5:0a:c6:4e:a0:fb:12:44:2b:c1:fb:33:da:a0:bd:
4e:aa:34:06:95:98:b3:66:0f:49:4f:b8:d6:1a:8f:
e7:65:55:54:a1:ae:2c:0d:2e:2f:1d:fb:14:7e:7e:
a1:b3:db:b9:63:d2:b7:05:55:9c:48:bc:98:56:ab:
91:25:f9:1a:b6:72:17:8d:b3:42:c9:51:e0:d8:21:
56:47:28:08:27:ad:38:1f:f3:f7:92:1e:e0:c5:3c:
9f:5c:07:72:c9:3c:89:21:df:1c:d1:4e:20:04:19:
f4:e1:04:4e:c4:94:af:ac:b2:32:2b:2d:e5:e0:d4:
c8:80:05:59:8b:7c:38:d0:cb:b3:0b:e4:21:a9:08:
36:2e:e6:29:15:fd:66:a1:79:19:8c:b9:08:27:3e:
c6:60:12:db:f5:73:de:08:68:97:bf:9a:9a:af:6d:
9a:37:7a:8d:90:fb:dd:92:dd:ed:fa:da:eb:62:d6:
e9:fc:61:9e:90:d7:f7:c6:cb:52:9a:46:48:49:d8:
0e:26:d8:8f:1b:36:ef:b2:f9:af:bb:87:72:90:c4:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:C5:3D:AC:B4:EE:F1:37:FB:B9:48:8E:DA:80:3E:04:90:3E:25
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5e:3d:6d:fc:70:f9:1a:d7:3f:95:f4:1d:37:1b:87:2b:b4:
76:61:59:af:5d:46:65:81:5d:cb:6f:00:13:bd:6a:e4:d1:1d:
8c:ce:5e:bd:96:6d:f8:d9:f3:4a:e5:8c:32:49:a1:e3:ec:17:
73:fc:8b:0c:9d:a0:17:00:59:74:6c:8b:3a:57:8a:ea:d8:32:
ff:39:b9:22:6f:32:e0:47:6d:85:a3:ae:57:88:44:aa:9c:29:
06:f2:10:54:01:18:a8:0d:7a:24:49:f6:9f:01:d1:e5:b7:2a:
08:0f:6d:c9:fc:0f:c6:db:74:cf:e1:3a:ba:22:8e:ad:8c:f3:
3f:97:bb:f0:06:48:f0:d2:4a:90:00:17:8a:f2:df:e0:de:92:
2f:0e:37:26:84:ad:ad:f5:78:a4:c9:c0:33:d9:b3:31:de:a3:
64:e5:07:5f:16:c3:7e:20:56:1d:bd:18:85:de:91:d9:c1:3c:
28:e7:27:03:f6:fd:0e:f3:7e:e3:c8:26:44:79:89:8c:75:b1:
bb:b5:ad:7c:d8:4d:b8:ad:64:3a:bb:45:36:8c:6f:49:27:89:
30:0b:8b:36:52:ce:c9:63:2d:64:41:59:42:ba:a2:a8:42:14:
ec:87:0b:23:e4:37:40:ef:21:2e:fc:63:29:72:cd:7d:06:13:
73:98:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:31:51 2026 by rpki-client