Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: 8SC6Cw5ndYnrrVn584JILYk12VC+xjir+okNA7WqALw=
Subject key identifier: 07:E1:BD:CB:BD:42:54:8D:E3:46:7A:73:37:DC:44:AC:56:02:B0:25
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 01A0D83C3043780A71B8D7D4135916AD9DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0E7F
Signing time: Fri 25 Sep 2026 11:03:38 +0000
Manifest this update: Fri 25 Sep 2026 11:03:38 +0000
Manifest next update: Sat 26 Sep 2026 11:03:38 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: 2dCXzRlmXR0FpBvDBQmLFt2Q4jMXiqsCFsz9jLmIbYE=)
2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:30:43:78:0a:71:b8:d7:d4:13:59:16:ad:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Sep 25 11:03:38 2026 GMT
Not After : Sep 26 11:03:38 2026 GMT
Subject: CN=07e1bdcbbd42548de3467a7337dc44ac5602b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:50:89:11:83:75:9c:26:5d:72:24:0e:05:
bb:5a:f0:f4:c2:f8:61:da:fb:86:e8:f8:df:2b:2e:
ed:46:88:7b:59:1c:90:09:19:c3:d7:06:f5:91:b7:
5f:68:89:f5:ba:59:ae:24:35:43:1d:78:9f:81:e5:
50:be:72:78:89:11:ad:1e:43:e8:7a:21:54:6f:3f:
1e:68:2c:4e:8d:1e:e3:44:0a:4e:a8:eb:1c:f9:83:
dd:22:2a:28:03:d4:b6:a0:39:34:e7:2e:e2:e1:cc:
bb:a4:95:d7:1b:e1:d1:d5:e9:fd:52:e9:d3:19:a1:
0c:f8:93:0f:0d:57:d6:ab:49:a6:51:d9:9f:16:17:
ef:dd:54:86:2c:36:d0:c4:c9:36:63:9f:30:35:bc:
55:9e:f5:2d:bb:b6:46:2c:a8:f7:a8:7e:76:39:39:
b5:5f:9f:7a:ad:d1:00:77:7d:18:a2:42:5a:b6:e3:
70:8e:a9:dc:f3:db:35:7d:84:4d:d5:24:16:93:93:
56:8f:04:8c:97:a0:0f:4d:d8:df:3e:79:b8:b5:08:
fe:95:b6:a4:29:0f:8c:34:2e:d3:4e:5a:9c:1a:23:
6e:23:e4:93:2b:ea:5b:40:98:9e:97:f1:50:6b:31:
b9:83:45:e7:ce:97:df:bd:2f:82:c4:f0:f7:22:c1:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:BD:CB:BD:42:54:8D:E3:46:7A:73:37:DC:44:AC:56:02:B0:25
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:18:a6:ce:c6:75:e5:77:6d:6a:7a:f8:ab:28:54:9d:26:
24:c0:28:a5:d3:8f:77:57:41:25:e1:bc:92:13:1c:b9:42:28:
1e:7c:27:58:e2:26:9f:0a:80:e5:ca:9d:77:6b:1c:63:a9:2f:
00:00:55:4a:fd:78:64:45:4e:ad:13:4a:0a:bc:e8:91:66:40:
38:4f:e5:09:11:88:36:8c:27:9f:b5:9c:6b:95:f5:80:61:26:
e7:73:6e:8d:87:4b:ab:d3:6d:44:6b:92:2f:ca:4f:c6:28:12:
f1:89:11:6b:91:75:19:e4:b8:3a:b4:74:fc:de:3d:ac:0e:ea:
03:98:5a:14:ba:b9:3b:6a:5a:08:c9:4d:2f:ae:89:dd:38:20:
f5:d6:64:43:e4:dc:00:d1:c5:1e:24:5e:fc:c0:be:9b:6d:7a:
28:a1:f2:24:f6:57:75:1e:ab:e7:9c:d8:92:c4:37:6e:55:2c:
c0:48:5e:e2:1d:5d:3b:1b:6e:f9:14:67:5f:3c:58:2b:e7:4f:
0b:48:ff:43:29:b5:ec:93:98:33:db:1e:01:2f:38:da:16:01:
5b:5d:8a:5c:80:fc:7b:f2:a6:12:59:c7:5c:5d:1d:2a:60:63:
65:25:89:52:e3:cb:c7:43:7c:50:c2:65:a4:a1:b9:17:c7:e0:
b7:5b:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:24:51 2026 by rpki-client