Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: zSyhDiFAY/+EOM5RTo1+CbfjpCqN1ioXC/eW0J8eC5s=
Subject key identifier: 88:EE:4B:FD:6E:BF:5A:5E:D6:36:4D:E6:2E:DE:17:43:F5:EC:A0:FB
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 01A1CE20D4790B76266E6B3F05428706CF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 128C
Signing time: Thu 12 Nov 2026 05:00:20 +0000
Manifest this update: Thu 12 Nov 2026 05:00:20 +0000
Manifest next update: Fri 13 Nov 2026 05:00:20 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: onKJtkCEswgvJHVmiWnGnnN3P5mnHxKbtgQMIKeRhrY=)
2: 69F3bfMIelWEttb5tJi_02EPqPM.asa (hash: 8J7HRmXhchbIN/c7Ahb5CS10AmGul2E79TFNJaxglMQ=)
3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:20:d4:79:0b:76:26:6e:6b:3f:05:42:87:06:cf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Nov 12 05:00:20 2026 GMT
Not After : Nov 13 05:00:20 2026 GMT
Subject: CN=88ee4bfd6ebf5a5ed6364de62ede1743f5eca0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:98:b1:e8:f7:32:5c:11:94:f5:24:26:de:
1c:e7:3c:b7:bd:39:fd:f5:86:11:3c:82:9c:ef:dc:
6b:9f:dc:f4:a5:f3:a8:1b:ea:6d:91:d2:ce:50:d9:
ea:55:6b:32:c7:d7:7e:29:6c:7b:c9:34:f6:1d:b4:
6d:e2:00:97:47:63:54:5c:0b:56:73:44:99:4e:89:
3b:6c:5b:01:c0:2b:8b:d2:7c:4a:31:39:bc:10:86:
90:98:f7:e6:99:f1:0e:94:03:59:b1:c5:be:fe:42:
b6:c6:9e:25:8b:0a:d2:46:6e:d9:82:71:f7:54:7b:
44:51:46:9b:0b:06:0b:00:e0:9e:dd:d9:d1:04:5c:
a8:db:41:0a:d2:d8:e5:f2:07:ac:5f:f1:8f:29:1c:
72:e0:a2:5f:e2:67:63:89:6b:cb:2c:cf:23:10:a1:
5c:f4:ba:0a:98:e2:70:0e:de:2c:d1:45:8c:b0:ea:
7e:30:a2:22:49:98:b1:2e:3b:11:2c:c3:a0:0b:a4:
c1:c3:3e:dc:71:53:99:03:94:78:7b:2a:1b:fe:bc:
ed:e9:11:e6:ed:76:fc:b2:1a:f7:ca:d9:61:b0:51:
b8:5e:bd:00:f1:b6:2d:ea:c8:94:b6:1e:ac:52:f7:
3c:cf:b6:db:4b:70:31:fe:1d:77:b4:06:4e:31:90:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EE:4B:FD:6E:BF:5A:5E:D6:36:4D:E6:2E:DE:17:43:F5:EC:A0:FB
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:90:b1:2e:14:9f:a9:ae:6a:8b:c2:ce:fb:d1:96:8b:7d:
85:43:72:07:a6:04:a9:59:29:f2:13:7a:3f:00:95:47:e9:e9:
be:46:71:24:e2:cf:3b:fe:b9:a5:c3:8c:81:14:6e:35:ba:32:
18:8f:d4:37:d9:a7:f6:ad:7f:07:87:0a:36:fd:61:25:4c:62:
0c:e7:bf:5a:22:e5:45:64:39:99:91:74:75:63:1f:a3:5a:69:
e2:82:d6:c5:21:19:c8:e5:71:75:e1:d7:d9:c5:31:24:96:74:
fc:b5:f9:41:0f:41:89:b5:2e:c9:26:bf:31:76:5c:ad:c0:34:
a1:26:ab:a8:84:32:8f:4f:aa:5c:17:24:38:22:59:2a:b2:c8:
75:06:d5:44:57:84:a2:42:71:2a:4e:46:c9:00:b1:3d:99:10:
1f:ba:35:26:4a:2c:e5:31:aa:e3:44:2f:c7:49:77:04:b8:f4:
62:b6:3b:a9:f9:4b:d5:3d:a5:d6:19:4a:90:c6:cd:8c:eb:05:
d1:4e:1c:20:af:d4:29:3d:03:47:e1:c1:d7:3e:d4:3b:0c:f5:
94:ef:01:ca:97:94:71:ae:8e:97:e3:6c:22:95:ce:35:51:0e:
a0:a1:8d:4d:2d:6b:55:4d:aa:82:ba:ee:7e:93:02:bf:06:9d:
df:e6:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 15:45:16 2026 by rpki-client