Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: F0pMHJxSYkxbi2Z5PMMijTLixB67nY6efroqQoT2vdM=
Subject key identifier: 74:6A:25:1F:CD:E2:33:31:16:F1:17:A0:5C:1D:A8:F0:A1:FB:1E:F8
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 01A140833B4B3221F708F78DECEC16E626F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 17:01:44 +0000
Manifest this update: Thu 15 Oct 2026 17:01:44 +0000
Manifest next update: Fri 16 Oct 2026 17:01:44 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: HrFIdigmmZD89rAEuxos/G4mwgNZgyGQwrFQ+UmGtxM=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:3b:4b:32:21:f7:08:f7:8d:ec:ec:16:e6:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Oct 15 17:01:44 2026 GMT
Not After : Oct 16 17:01:44 2026 GMT
Subject: CN=746a251fcde2333116f117a05c1da8f0a1fb1ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:5a:4a:12:e4:dc:8a:13:c3:ea:fd:57:1d:
fa:2c:f5:14:9a:10:71:58:2d:a4:69:ce:a4:73:f1:
aa:c0:fc:2b:19:59:26:05:04:a6:cc:c6:4b:c9:e5:
e4:cb:71:a5:20:04:df:05:3d:ec:b7:fd:f1:64:0d:
bd:c7:e6:81:b1:2d:86:a8:e2:b7:2f:96:e8:ce:f6:
95:76:88:32:09:45:dc:2e:9f:c1:42:36:47:c9:12:
b7:7c:07:fc:d9:b7:e7:ca:ea:3b:fb:64:e0:8f:b0:
bf:d7:fe:39:af:12:89:79:1a:4d:f1:42:0b:15:2b:
93:ac:5a:e4:17:10:62:05:13:32:da:13:a8:97:2e:
88:7a:13:08:bf:4e:44:87:d8:25:fc:47:87:a4:64:
68:de:c6:9a:9e:75:7c:80:c9:f3:7b:a4:68:4a:4e:
c4:74:9a:de:27:8d:42:81:a0:96:16:19:a3:13:af:
a0:b2:1c:e3:99:46:44:18:2e:ec:bf:01:ab:93:13:
2c:2e:4d:d9:b7:ce:c6:ae:be:e6:b7:21:ff:5e:06:
28:75:b2:17:3c:99:f0:e5:4f:53:4d:b6:c5:b6:cf:
50:5f:95:0e:43:8c:3e:38:5b:1e:89:18:60:da:76:
1d:67:99:5a:76:e8:ae:dc:e9:53:16:11:5d:e4:1b:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:25:1F:CD:E2:33:31:16:F1:17:A0:5C:1D:A8:F0:A1:FB:1E:F8
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:62:d6:3c:13:59:d7:d6:8a:e5:48:6d:d9:af:8f:22:96:
e1:9a:af:9e:f3:ea:0c:c4:c2:03:75:1c:5d:69:5b:06:62:09:
f4:c0:35:9d:8c:8c:ac:c8:81:e2:6a:d6:f2:1b:0a:bb:8a:f4:
59:69:5b:0b:92:72:b8:66:27:39:c0:a3:92:b3:8a:30:6d:2e:
4b:8e:5b:49:69:e5:94:e6:7c:87:0e:48:be:9c:fe:dd:67:dd:
1b:d0:10:46:7e:f2:43:36:39:b1:2f:39:c5:ad:7b:7e:9e:14:
ad:94:ff:09:50:fc:1e:8b:de:83:65:c3:12:6f:fc:43:48:76:
40:51:5a:aa:29:04:b9:a6:0f:da:96:54:8d:0c:3c:46:49:c8:
a8:2a:44:81:54:3b:73:6e:bf:dc:97:f1:5d:7e:68:b4:a1:6b:
9e:e2:f7:fc:6f:84:fc:76:38:59:74:89:ee:3c:4e:52:8f:b7:
4e:ba:a3:02:aa:d0:3c:52:fa:b2:d2:8d:52:18:69:55:c1:d0:
fe:66:52:56:f0:32:db:da:1f:9a:45:5c:e7:2f:ac:1e:fc:a0:
06:bd:f3:f9:75:46:b4:b7:3a:af:f7:fb:e9:08:4c:cc:c4:85:
33:9b:e0:29:4a:7f:bb:38:36:76:67:0d:22:40:28:3f:27:13:
9c:dd:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:40:01 2026 by rpki-client