Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: sLvtF6yxSVG4xyrLRsibJhBdVI/adOIn+5HR9bsDpy8=
Subject key identifier: 96:E8:A2:AB:2F:49:D1:9C:A7:DA:87:41:89:83:B3:24:6F:17:6E:63
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 01A0DD605A80A2A7D35CBD302A89CA04266F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 11:01:14 +0000
Manifest this update: Sat 26 Sep 2026 11:01:14 +0000
Manifest next update: Sun 27 Sep 2026 11:01:14 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: Y1q/Y/COPuo9Dm+JOV5InFrG1LhY2H5pjebQSPQi6U8=)
2: a1yKgQiS1kQqWALGhb3azz9xPgM.roa (hash: QrlCwnjrUJMDarRIw4ovkDjdQhcibYW6n6I1xi7Yys8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:5a:80:a2:a7:d3:5c:bd:30:2a:89:ca:04:26:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Sep 26 11:01:14 2026 GMT
Not After : Sep 27 11:01:14 2026 GMT
Subject: CN=96e8a2ab2f49d19ca7da87418983b3246f176e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:0f:cc:7f:7a:29:bf:ac:93:74:3f:9c:a6:
75:d2:a9:85:c3:8c:f7:1d:2c:98:6d:5b:b9:1c:a6:
ea:97:e6:50:81:32:87:b9:b5:8f:f6:19:41:42:89:
4f:c2:88:73:12:5c:28:92:17:88:4d:3b:3c:c2:99:
a7:62:68:f3:17:91:ec:8d:d2:52:96:8a:19:90:f0:
be:5b:42:69:89:26:bd:af:7d:49:f5:ca:1b:35:21:
35:a2:e2:d3:c4:c7:22:e5:4a:1d:df:6e:b3:ed:1a:
75:f5:ea:c1:66:c7:b2:88:2d:58:44:3b:ef:fb:7d:
8c:2f:38:2f:78:c9:77:8b:78:92:9d:1d:dc:ee:b6:
33:0c:5e:da:15:c2:24:f9:e6:69:31:d7:11:62:0f:
45:6d:80:3b:1d:31:de:37:ac:98:0d:fd:5d:07:b5:
93:00:c6:f7:31:ef:bb:3d:91:7f:d9:27:69:21:a3:
78:7d:c3:b3:d8:76:b6:c1:d2:64:9b:e0:44:e1:2e:
99:cb:72:bb:fe:ed:47:4c:31:53:12:f5:44:be:99:
82:52:d4:eb:60:07:12:55:44:25:17:40:bf:85:85:
c5:36:c7:c2:a5:9e:7b:a1:11:93:46:49:a0:38:73:
a9:02:b5:dd:01:bd:ed:8c:e1:db:f1:1a:90:a6:98:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:A2:AB:2F:49:D1:9C:A7:DA:87:41:89:83:B3:24:6F:17:6E:63
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:cb:4a:75:b4:92:ed:75:6f:c0:af:22:2c:ee:59:15:b5:
bd:2b:48:07:ef:99:06:77:0b:45:2a:df:06:bb:ed:4c:00:82:
d5:14:48:fa:b3:cd:52:a4:a2:3c:6f:07:fe:39:88:7a:16:98:
85:65:55:c3:bf:9b:6a:42:0d:82:55:b1:a2:e5:14:fd:de:ce:
17:52:a2:99:63:e8:e5:ec:a4:03:93:c6:de:4a:cb:0b:d8:1d:
cd:8c:db:31:b0:8c:16:85:3b:a8:a1:82:45:d9:12:77:d5:6f:
32:f3:44:d1:19:02:af:b8:ea:6d:9b:eb:a6:d1:e7:ba:cb:b2:
47:97:2e:7a:49:6d:ba:58:e9:d7:a5:0b:7e:2f:95:3c:ec:47:
6e:79:21:8d:6a:a2:ae:47:bf:74:ff:d3:43:d8:ec:a8:04:8f:
5a:a9:2a:04:27:4e:1e:02:0c:cc:c0:82:81:0f:ef:57:8d:0c:
92:76:1b:87:ec:93:19:39:09:90:4f:8a:bf:5f:d3:68:7c:ab:
91:39:3a:84:60:f4:6c:81:b5:42:66:42:bd:0f:10:17:95:35:
62:ad:23:20:fe:98:c9:3f:a7:c4:57:5b:0f:43:73:b1:42:db:
0d:bf:d2:b0:c0:80:b7:a0:fd:96:40:03:c4:ac:b2:02:38:c9:
8c:c5:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:38:04 2026 by rpki-client