Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: ffU8j2aRyN0qcDxC/xLOc44SzK/1VgLLmIx1lhE+z3g=
Subject key identifier: FA:81:8A:F3:A2:B2:2D:79:CA:96:E2:B7:EE:55:18:47:89:9A:DE:52
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 01A0DD2920630E512447EEC6D47359DCFFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 10:00:54 +0000
Manifest this update: Sat 26 Sep 2026 10:00:54 +0000
Manifest next update: Sun 27 Sep 2026 10:00:54 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: dcU69mX3rMhxMjmK9AVXJSusBlosw2qHzJopZFQIJ8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:20:63:0e:51:24:47:ee:c6:d4:73:59:dc:ff:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Sep 26 10:00:54 2026 GMT
Not After : Sep 27 10:00:54 2026 GMT
Subject: CN=fa818af3a2b22d79ca96e2b7ee551847899ade52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:f8:48:60:f8:0c:59:58:3a:e0:1d:88:68:
a5:6f:be:ac:27:35:6a:db:7e:fb:3c:7b:21:98:65:
12:31:9e:1e:78:5b:6e:7a:60:f4:65:5e:f3:72:c5:
0d:66:0d:58:9d:0e:76:45:56:c4:62:05:32:86:a1:
bc:11:5d:ec:5f:ed:d6:7f:dd:e0:d4:12:c2:67:e1:
e8:d8:60:31:09:1a:a3:95:b6:70:72:ab:4c:59:9d:
5b:0d:49:ee:aa:94:b9:a2:6c:e2:11:c9:a9:f1:26:
a2:34:27:ed:bb:ca:dc:7b:b8:88:12:88:aa:04:8b:
3e:4f:c3:a9:99:0f:34:55:5a:08:90:bb:5e:04:3e:
df:0c:cd:f0:30:e0:33:7a:26:c4:06:fe:cc:20:cd:
5c:fa:b7:f8:9f:76:60:55:bc:70:d9:91:7d:65:42:
81:99:de:e0:bb:52:f1:3c:e6:62:fa:f3:5c:fc:cb:
ba:63:10:a1:a8:19:4d:e1:a1:83:9f:88:98:07:eb:
be:8e:05:d9:29:7d:09:ce:5c:75:97:c7:fb:39:8a:
a8:77:0a:54:6b:f0:a0:68:c0:08:e1:a9:bb:28:1a:
0a:ff:0f:fe:2d:d1:30:23:56:3c:7c:db:da:5d:64:
a1:1f:26:32:02:03:40:e4:1d:e4:6c:ae:b3:af:2d:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:8A:F3:A2:B2:2D:79:CA:96:E2:B7:EE:55:18:47:89:9A:DE:52
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:45:f2:91:c5:cb:1d:b4:32:f3:80:9b:c8:bd:bc:6b:50:
b3:2b:f8:3e:af:0b:4f:76:84:14:2b:72:38:22:fd:d0:45:e5:
7b:33:e9:f0:73:4e:80:16:d5:bf:0b:36:ad:8f:26:25:e9:6b:
a1:d9:3a:03:c5:e8:79:c2:96:3b:58:97:89:75:ca:83:e7:86:
03:7b:b1:9a:6f:5d:b1:dc:4a:53:67:c9:27:3b:bc:42:ff:64:
fa:9b:d5:a9:7e:58:74:2f:b4:12:1d:9f:85:fc:ea:e3:70:32:
0f:eb:e0:d6:10:60:c5:2f:a4:ef:67:86:7a:e9:66:d3:6f:4c:
87:3c:c9:51:9b:0d:7a:a1:9e:02:66:30:44:33:fa:b0:7a:c6:
d1:ee:22:58:8c:91:d4:3f:87:6c:d9:52:a8:9b:46:4b:58:6b:
d6:0b:64:96:fd:2c:ee:4e:28:0d:90:e3:01:df:9e:26:a1:71:
52:43:a5:3d:a8:07:9e:c3:44:c6:c2:24:54:c9:0a:7b:7c:18:
b6:14:76:5d:d8:93:bd:c5:da:94:ea:38:8f:a2:d4:d1:13:0e:
9f:b2:90:63:be:fd:6f:bd:c8:7e:96:cf:9d:1f:aa:b7:b7:c6:
3c:5a:2f:b7:65:cd:48:08:cb:56:2a:31:58:57:23:b3:28:a9:
77:bc:55:81
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDdKSBjDlEkR+7G1HNZ3P/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjViMWQ2MWUwOWE0ZTRiMGRkMWIwNWNlZDhlNjUxM2Jj
NjYxODcwHhcNMjYwOTI2MTAwMDU0WhcNMjYwOTI3MTAwMDU0WjAzMTEwLwYDVQQD
EyhmYTgxOGFmM2EyYjIyZDc5Y2E5NmUyYjdlZTU1MTg0Nzg5OWFkZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOT4SGD4DFlYOuAdiGilb76sJzVq
2377PHshmGUSMZ4eeFtuemD0ZV7zcsUNZg1YnQ52RVbEYgUyhqG8EV3sX+3Wf93g
1BLCZ+Ho2GAxCRqjlbZwcqtMWZ1bDUnuqpS5omziEcmp8SaiNCftu8rce7iIEoiq
BIs+T8OpmQ80VVoIkLteBD7fDM3wMOAzeibEBv7MIM1c+rf4n3ZgVbxw2ZF9ZUKB
md7gu1LxPOZi+vNc/Mu6YxChqBlN4aGDn4iYB+u+jgXZKX0Jzlx1l8f7OYqodwpU
a/CgaMAI4am7KBoK/w/+LdEwI1Y8fNvaXWShHyYyAgNA5B3kbK6zry18hwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPqBivOisi15ypbit+5VGEeJmt5SMB8GA1UdIwQY
MBaAFPu1sdYeCaTksN0bBc7Y5lE7xmGHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03V3gxaDRKcE9TdzNSc0Z6dGptVVR2R1lZYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZThhYTc5LTE1NzYtNGNmYS04OTRh
LWIxZTAxMzUwNjc1Yi8xLzEtN1d4MWg0SnBPU3czUnNGenRqbVVUdkdZWWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VlL2U4YWE3OS0xNTc2LTRjZmEtODk0YS1iMWUwMTM1MDY3
NWIvMS8xLTdXeDFoNEpwT1N3M1JzRnp0am1VVHZHWVljLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLhF
8pHFyx20MvOAm8i9vGtQsyv4Pq8LT3aEFCtyOCL90EXlezPp8HNOgBbVvws2rY8m
Jelrodk6A8XoecKWO1iXiXXKg+eGA3uxmm9dsdxKU2fJJzu8Qv9k+pvVqX5YdC+0
Eh2fhfzq43AyD+vg1hBgxS+k72eGeulm029MhzzJUZsNeqGeAmYwRDP6sHrG0e4i
WIyR1D+HbNlSqJtGS1hr1gtklv0s7k4oDZDjAd+eJqFxUkOlPagHnsNExsIkVMkK
e3wYthR2XdiTvcXalOo4j6LU0RMOn7KQY779b73IfpbPnR+qt7fGPFovt2XNSAjL
VioxWFcjsyipd7xVgQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:57:03 2026 by rpki-client