Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: llvYPPh7a8AiqF/qSOZ6vHwK9+hO732U/VzLNky2EoU=
Subject key identifier: 2C:52:E4:9F:ED:3B:A9:C9:B0:37:36:EB:C3:5D:35:CC:09:AF:58:54
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 01A1DFF0F23729A9923516656D7A82B5A367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 16:01:12 +0000
Manifest this update: Sun 15 Nov 2026 16:01:12 +0000
Manifest next update: Mon 16 Nov 2026 16:01:12 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: UdpZtYeiL+fBB0cUO+OpcB+4w8PP/1lSI7RnSooAysY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:f2:37:29:a9:92:35:16:65:6d:7a:82:b5:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Nov 15 16:01:12 2026 GMT
Not After : Nov 16 16:01:12 2026 GMT
Subject: CN=2c52e49fed3ba9c9b03736ebc35d35cc09af5854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:f8:ba:90:a5:63:78:fa:be:89:3d:3e:66:
0c:d6:ec:21:35:cc:cc:49:72:b3:b4:06:02:fc:1f:
fc:9c:0c:9d:f5:ee:eb:c6:bc:23:ec:ad:44:02:f8:
1b:97:df:67:62:a0:1a:9f:bb:57:ae:71:69:ad:b7:
80:a2:d3:e0:a2:db:87:85:45:dd:4e:bc:8d:72:e9:
81:6e:c6:ea:5b:3f:5a:b1:45:dd:73:0d:36:7f:b7:
f4:8f:cc:9f:97:2d:41:65:be:65:79:39:8d:c3:3b:
9d:19:cd:cb:b3:06:8c:6d:27:dc:85:ad:85:e5:78:
ec:e5:ff:72:79:40:11:14:3b:11:3d:07:b8:a1:da:
9f:41:a1:99:9c:fa:90:6e:34:f0:c6:c3:27:13:41:
89:c0:c6:07:a8:4b:df:32:77:07:9a:bc:7c:f5:72:
2c:b0:72:bd:db:57:2f:5a:98:d3:06:6d:86:53:6c:
45:97:65:58:62:78:97:01:92:1a:15:d3:a4:3c:e8:
80:e1:30:ab:99:d3:35:1e:a1:0a:9f:d1:da:c8:69:
23:ec:27:aa:83:85:c3:de:3f:81:d1:3c:df:a2:72:
91:a8:e3:42:90:06:41:cc:26:84:8b:d6:dd:84:00:
80:04:d2:c7:1c:9a:1b:de:86:5d:e6:fd:9f:b9:30:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:E4:9F:ED:3B:A9:C9:B0:37:36:EB:C3:5D:35:CC:09:AF:58:54
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:54:29:80:e6:c1:0b:32:de:31:97:d5:95:7b:00:31:a8:86:
22:a0:84:94:22:aa:56:68:4a:07:76:27:cd:8b:16:e1:4b:83:
36:a5:88:b1:cf:07:5f:d6:98:fc:ba:56:ce:0f:d1:36:52:af:
25:f8:64:f1:96:8c:63:f0:69:b7:ed:4d:af:70:be:6c:7c:51:
ae:e7:5f:6e:ab:91:62:94:b5:16:ca:fb:bc:51:98:a5:7a:e5:
0d:31:2f:87:3d:6b:7e:ee:5f:47:ad:dc:79:4c:53:06:4f:e8:
65:bf:12:51:50:91:c9:12:54:37:c7:8a:ff:a2:fb:29:e1:c0:
a8:b0:67:5b:93:d9:f3:53:0d:da:15:78:3d:c5:ef:5d:25:80:
11:37:03:9e:1c:cd:4c:51:30:49:44:95:07:ec:8c:ec:ad:e7:
cc:97:47:e5:9e:a4:42:c9:40:6f:6b:d7:3d:48:d4:ca:1c:bb:
15:5a:84:bf:31:93:ba:ca:6d:72:32:d2:e2:d3:4e:5b:e8:b3:
c7:89:4e:39:49:0c:24:b5:42:e0:a1:4c:40:6a:03:7d:f8:3b:
19:d3:9f:67:df:d7:59:5e:36:67:72:6f:46:cf:63:e8:6d:6c:
95:18:4a:1c:8f:97:4e:75:be:31:e4:20:32:b2:01:9c:1a:b3:
c4:de:ce:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:14 2026 by rpki-client