Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: U+3T8bNE/YMhqqNcWD/DZNawbrFK9M3eTGm//Ym2ohM=
Subject key identifier: 5E:3B:E7:F0:BE:08:2B:3D:F0:A9:86:56:FC:34:19:47:D3:36:F7:7A
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 01A0C9D967F809248C73618C29282E159B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 119D
Signing time: Tue 22 Sep 2026 16:01:03 +0000
Manifest this update: Tue 22 Sep 2026 16:01:03 +0000
Manifest next update: Wed 23 Sep 2026 16:01:03 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: GGz2iyHJzSRt0/UXWsQRWU8WCapUTvuNefmwNwI5tGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:67:f8:09:24:8c:73:61:8c:29:28:2e:15:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Sep 22 16:01:03 2026 GMT
Not After : Sep 23 16:01:03 2026 GMT
Subject: CN=5e3be7f0be082b3df0a98656fc341947d336f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:40:c9:de:2f:db:a8:5d:e1:0a:7c:dc:9e:
65:65:a0:9e:0a:c0:a0:18:1e:ea:b0:a6:47:0d:7b:
5d:5e:7f:82:fa:0b:fd:81:b9:6c:5e:1b:3b:fc:82:
bc:be:f6:e5:e6:6a:6a:5b:34:08:41:9a:c7:06:c4:
1f:8c:ba:ae:51:8d:c0:53:0c:39:f4:ae:e9:57:e7:
8b:35:a7:df:d0:3d:6f:10:ea:96:f7:dc:3d:e9:b0:
c4:41:61:d5:05:4d:10:60:8e:b9:7d:a0:7e:29:c3:
a3:72:3d:70:94:0a:db:42:21:ea:98:0b:12:54:51:
0c:57:38:0c:5a:37:35:45:e3:52:1d:4b:f4:a7:a4:
9b:b4:28:07:99:88:3e:31:56:a6:55:03:24:f5:e4:
a2:f5:c2:db:cb:42:fd:49:cf:d9:70:96:f8:d0:83:
44:1f:98:01:1d:41:38:99:2a:60:f1:ed:a7:0f:70:
e4:14:95:5c:bc:7d:c3:c6:d3:e7:61:2f:45:f3:2f:
6e:fc:6a:e2:67:43:0c:36:b8:2f:18:52:74:21:ea:
18:f2:d6:68:96:1e:20:98:e8:9f:af:c8:a3:fb:ae:
3d:ea:8b:33:98:db:07:6e:fd:57:96:c5:4e:cb:b2:
c6:8d:05:bf:45:db:64:3d:4d:5e:1b:ac:10:20:5e:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3B:E7:F0:BE:08:2B:3D:F0:A9:86:56:FC:34:19:47:D3:36:F7:7A
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9f:2f:60:68:4a:18:fc:c1:bc:9d:0f:4d:76:46:1a:ae:dc:
85:12:d5:4b:be:30:72:f5:e8:16:b9:4e:05:a2:5f:23:97:42:
9d:dc:5d:5c:ce:78:1d:75:2d:84:6f:40:58:4a:1a:8f:3c:58:
49:9e:f2:f1:ae:bf:5c:7a:2c:10:3b:56:f2:c7:a2:88:5d:cf:
e3:fc:a2:a3:8f:38:ee:c8:a1:bc:e5:d0:28:c7:53:0a:fa:c5:
ec:af:d8:8a:6b:e3:54:19:5e:2d:d2:12:06:65:8b:fc:f5:f3:
9e:92:23:7b:da:3c:af:8e:f5:ef:72:1f:48:da:20:a4:0c:00:
c9:e3:99:76:e0:a2:f2:a2:8a:d3:78:a9:ee:d4:e0:3e:c9:d8:
b9:bb:93:d0:28:ea:ad:0e:0d:f5:16:94:1c:7f:46:ce:00:2f:
3a:e7:a6:38:db:96:05:8b:1e:a8:1e:82:7f:50:05:43:91:8b:
a6:55:b9:9f:67:e9:fb:de:23:be:6c:fd:c3:05:fa:e9:a6:b1:
7d:60:4d:0e:73:bd:6c:d6:94:04:fb:c9:07:66:c5:5d:6c:e0:
e7:b7:16:94:4a:3c:95:76:f3:8e:45:30:01:e7:7f:37:9c:8e:
c2:b6:02:e6:63:89:d1:ff:85:02:a8:e8:64:e9:8b:81:82:af:
d1:0b:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:21:23 2026 by rpki-client