Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
File: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft (raw, json)
Hash identifier: EJR6gR+MyK5JsDvw1rSROwgPLG2pptNdYIeKtEV/f3Q=
Subject key identifier: A6:50:5B:21:EA:6B:4A:4C:04:06:3F:9A:8A:7E:1E:57:42:53:75:FE
Authority key identifier: FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
Certificate issuer: /CN=fac020f12091a4eba81e4c0466de771db7561650
Certificate serial: 01A0CBC7153592DB1EE4C509C8D73C2134FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
Manifest number: 020A
Signing time: Wed 23 Sep 2026 01:00:16 +0000
Manifest this update: Wed 23 Sep 2026 01:00:16 +0000
Manifest next update: Thu 24 Sep 2026 01:00:16 +0000
Files and hashes: 1: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl (hash: tBmta8kuW/pQXaKdwKwTUH6x60Tphwlt9MOAzhFDybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:15:35:92:db:1e:e4:c5:09:c8:d7:3c:21:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac020f12091a4eba81e4c0466de771db7561650
Validity
Not Before: Sep 23 01:00:16 2026 GMT
Not After : Sep 24 01:00:16 2026 GMT
Subject: CN=a6505b21ea6b4a4c04063f9a8a7e1e57425375fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:cc:97:27:7d:ef:91:4e:d6:21:08:85:42:
bb:1e:5b:7a:07:9d:88:b8:6e:53:26:6e:a6:dc:50:
d6:f2:f1:5d:5f:00:ea:88:91:9d:2b:4e:95:2d:bc:
23:32:83:f9:9f:20:3f:34:2a:7b:c1:2b:bf:42:3e:
bf:fe:40:57:fb:a6:27:f6:1c:c7:74:2f:f3:e2:27:
cc:62:e2:b2:1f:0c:02:7d:1f:14:fd:a5:b3:9e:7e:
b4:59:f1:48:02:7c:ec:7a:44:b9:57:7f:f8:d9:ba:
fc:ab:a0:6b:a5:a7:2d:4a:ff:9d:98:5b:a7:06:1b:
ea:44:97:7b:00:57:1a:15:04:97:bc:73:b9:da:ac:
98:b2:1c:cf:4f:30:43:f9:d0:5c:3f:6c:a9:80:ac:
f4:e8:38:ec:2f:34:db:9d:ec:67:0b:e9:78:42:43:
6c:a9:85:fb:a2:af:7d:b1:3a:0b:3f:a6:b5:84:c0:
3b:54:c3:5a:1a:97:fa:a3:53:bd:a9:4d:78:c4:2c:
3f:2d:82:84:b5:f9:46:fc:28:1e:75:31:87:41:bd:
47:91:6e:e8:85:85:95:55:fd:18:ff:e7:7a:02:15:
cf:57:50:40:00:3e:d6:c3:11:b9:be:a9:8d:87:75:
70:86:20:69:94:0e:d5:56:21:3d:2a:fc:59:a9:bf:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:5B:21:EA:6B:4A:4C:04:06:3F:9A:8A:7E:1E:57:42:53:75:FE
X509v3 Authority Key Identifier:
keyid:FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ba:18:ae:6d:a9:c8:cd:3e:a2:26:14:6e:e9:a5:0a:49:df:
37:04:a7:f3:02:ff:85:a5:06:e8:a4:68:8d:03:e6:5e:34:99:
03:5b:8f:c7:19:d8:87:d0:c8:9e:4b:e0:1b:fb:7f:bd:d6:d5:
6b:7b:b9:09:64:4e:5e:13:f6:a4:04:2a:af:f8:9c:81:fc:e1:
a7:f7:0d:e3:98:0b:71:29:b7:74:6a:48:a6:a4:ea:46:0f:9a:
0b:5e:08:7d:19:d2:18:e3:a0:79:cf:a8:43:d2:6b:8d:cf:35:
15:1f:25:44:81:3f:76:ad:c2:8c:7b:bc:bc:7a:61:cc:67:79:
1f:63:3c:c9:2b:84:a2:eb:57:7a:85:38:5a:65:92:67:74:03:
4a:0f:0b:22:86:77:f2:2c:45:0f:25:79:e4:f5:d5:3d:da:42:
1b:d5:9e:c7:7b:98:d0:76:44:5f:82:89:5b:72:ed:4f:05:20:
6d:63:b7:52:5d:46:93:b3:1a:69:d6:34:2e:ec:ba:f9:83:a2:
51:b0:63:69:59:bb:01:b9:e5:da:fe:5c:16:27:94:6c:64:22:
84:d5:55:6b:be:59:0d:40:25:ee:da:5a:02:06:9b:13:03:ab:
98:3f:8e:f7:d6:82:13:14:da:89:6d:39:ba:a8:7d:c4:ec:8f:
b3:26:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:59 2026 by rpki-client