Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: YIH+5iuIQJKy42Nj+ht74xlLCLgggtOES24/ukttAwY=
Subject key identifier: 7D:08:B9:EB:D5:E6:2D:8E:89:EA:C4:E2:F1:35:A0:DC:7E:57:F8:B9
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 01A0D201024806E964BFBDE0A8A5F368BC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1A68
Signing time: Thu 24 Sep 2026 06:01:16 +0000
Manifest this update: Thu 24 Sep 2026 06:01:16 +0000
Manifest next update: Fri 25 Sep 2026 06:01:16 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: rCsJotQSX9acxvSOyjGJMka9UsiqBxuhM1Wezm7FYO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:02:48:06:e9:64:bf:bd:e0:a8:a5:f3:68:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Sep 24 06:01:16 2026 GMT
Not After : Sep 25 06:01:16 2026 GMT
Subject: CN=7d08b9ebd5e62d8e89eac4e2f135a0dc7e57f8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:9c:20:f4:76:9e:ba:66:6c:f1:6e:ce:8c:
7f:a4:be:83:cd:ee:8e:49:2a:fe:cc:6a:77:0a:46:
73:ca:76:e8:20:50:cb:40:0c:04:ae:66:69:a6:1d:
34:b6:5f:82:ec:91:ae:dc:55:db:a8:c4:ab:1f:dc:
ca:eb:2b:a8:47:28:a7:5f:14:0e:08:9e:f1:c5:7c:
95:0a:81:98:29:fa:2e:e4:58:3d:fa:0d:9e:b8:0a:
f6:1b:16:26:eb:5c:29:48:62:42:a2:1c:a8:13:47:
53:66:52:20:a9:ef:72:8c:e5:80:a3:f9:f8:57:c0:
60:c2:d7:c1:14:c9:e2:5b:1c:03:51:74:5f:15:5c:
8b:95:5c:e0:d2:c1:54:ba:f0:e1:6f:48:2a:5a:a5:
d6:03:bb:5a:0a:c8:11:2f:db:10:6d:8b:fa:45:37:
24:89:78:9a:0d:fc:df:cb:53:08:f5:e0:16:97:b0:
8f:17:2a:9e:ac:f7:ec:4e:8b:31:2c:28:37:6c:bf:
98:e4:56:8f:60:f8:11:00:7e:8f:5c:fe:34:e2:0c:
b4:10:00:3c:c7:1d:ca:4f:88:18:21:33:89:b8:29:
97:63:ef:65:b4:02:de:1d:c8:66:44:64:63:4a:f0:
0a:b6:2d:32:e2:dc:d3:3a:4e:57:82:e3:c8:c2:51:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:B9:EB:D5:E6:2D:8E:89:EA:C4:E2:F1:35:A0:DC:7E:57:F8:B9
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:08:c3:27:ea:71:00:ba:4e:d0:98:0c:e9:69:ce:03:3f:13:
76:f2:93:e8:a6:91:0d:f8:61:ee:92:30:6f:68:23:0b:97:01:
d4:58:da:23:ba:41:7f:54:91:73:35:fd:d6:c5:2e:a8:cc:b1:
f8:ee:2c:c3:30:96:bb:5f:c1:e8:c5:b5:54:09:97:d2:cd:97:
e6:3c:b0:03:af:3e:32:05:48:a5:fb:4e:a5:7a:0f:b4:0f:fe:
a4:b1:59:db:40:a7:ea:96:a6:07:21:3a:96:9e:1b:6f:e6:22:
4e:07:a7:6a:5d:f1:61:74:63:57:03:7f:3c:97:01:e5:87:58:
24:5c:d9:8f:2a:f9:b1:36:d8:d2:49:1c:02:1b:9a:bc:71:40:
c8:d7:36:56:03:7e:8f:5e:c0:82:55:cf:5c:37:99:4c:78:ea:
80:ce:18:a6:c2:ba:11:3f:ab:86:42:41:a0:5c:07:11:52:d5:
69:f1:a4:5a:03:4a:30:de:8a:26:f9:c7:6c:96:c3:0e:76:9b:
6f:6b:08:20:c9:af:c1:74:97:98:71:d1:1c:65:16:6a:ee:6b:
ca:3c:72:f6:aa:dc:6a:95:a3:f1:13:27:f6:b0:d1:74:2d:c4:
ea:4f:38:db:b5:22:ed:14:80:e9:25:14:e0:56:1a:4d:06:28:
37:4c:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:46:35 2026 by rpki-client