Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: MqQrT8VHoSqDphMnPiM6IyqzM91d6VzFaX/OX9ygl5g=
Subject key identifier: 3E:B7:23:90:48:D4:19:9D:B8:5D:87:EE:29:DD:02:E0:47:28:1B:89
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01A13CA58CE60AB3194E79C3D79D1FEDC1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0ECF
Signing time: Wed 14 Oct 2026 23:00:44 +0000
Manifest this update: Wed 14 Oct 2026 23:00:44 +0000
Manifest next update: Thu 15 Oct 2026 23:00:44 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: 0ELe5My1KylQBiH2PDTo8NbnL9ivjr4Wdwx7ZcGZ4cM=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:8c:e6:0a:b3:19:4e:79:c3:d7:9d:1f:ed:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Oct 14 23:00:44 2026 GMT
Not After : Oct 15 23:00:44 2026 GMT
Subject: CN=3eb7239048d4199db85d87ee29dd02e047281b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:21:85:81:2d:e9:45:66:21:bd:3c:82:62:
a7:84:7b:57:31:36:e4:59:69:5f:ec:c6:bb:76:6d:
20:9d:78:4d:ad:b5:ac:18:5e:1e:0b:3a:c2:68:35:
12:09:16:a0:6d:06:90:94:87:ae:5b:34:c3:6f:f6:
73:8f:e4:df:f1:37:a2:18:d1:9e:d1:25:a5:74:9d:
b3:3b:f9:6d:c8:22:d1:e1:ce:b7:36:3e:66:57:a7:
22:1e:0a:98:ed:c7:99:7e:e4:d3:86:8c:5e:cb:a1:
89:64:b8:4e:64:75:9b:1e:99:09:47:df:e2:79:10:
71:36:af:bb:95:d9:20:d4:c0:d1:0d:1f:6e:cb:e2:
9c:26:56:78:81:1b:32:e0:3b:5c:16:d4:fd:c0:2c:
a4:8a:a5:ca:15:08:ba:07:1a:32:42:c7:71:55:33:
9d:34:db:52:36:32:d1:c3:a0:55:01:07:06:60:0a:
2f:f9:ce:59:f1:2e:fe:c8:c5:22:9c:d6:39:28:d3:
fb:41:bc:fe:f6:02:1d:3e:59:03:9a:0b:78:18:4c:
3d:af:cd:a0:9f:ff:ef:3b:4f:17:76:35:24:47:a8:
50:02:91:84:09:42:bf:5d:d1:61:eb:c7:40:cf:29:
fe:55:e1:45:5c:ef:16:3b:19:53:89:93:a7:99:69:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:23:90:48:D4:19:9D:B8:5D:87:EE:29:DD:02:E0:47:28:1B:89
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:1c:08:57:7d:25:4b:13:48:61:46:5e:a4:9f:66:c4:49:
0d:9e:4d:5b:24:96:c5:2e:cb:5e:f8:e6:ad:d0:8e:18:e5:d8:
2c:90:53:5d:28:db:3f:88:84:35:91:f8:cd:cd:df:fd:2c:0e:
62:bc:b4:73:42:f9:65:40:88:6a:47:62:bd:64:17:66:cd:d5:
3a:91:8d:85:3a:ed:81:ab:19:75:15:43:27:71:cc:1c:b9:71:
91:94:90:19:79:73:c1:47:19:ed:08:70:64:68:c1:52:85:d2:
99:a5:cb:c6:f1:9e:81:f6:39:87:6e:3c:ab:92:0c:62:bb:48:
e6:08:f5:78:c3:c6:9f:4a:b4:d7:73:59:46:0e:e3:bd:60:3c:
fd:de:0d:4d:41:04:12:7b:1e:3f:17:6f:fb:3a:35:80:16:ea:
b6:9b:6a:54:5e:0c:a5:0a:3d:8a:02:31:90:8d:c9:3d:2f:89:
ea:19:ae:62:17:76:8b:89:a1:ab:e6:7a:70:8b:69:72:51:b4:
57:4b:17:22:81:13:c5:9d:0d:38:7f:ac:e2:91:e9:d5:29:2b:
74:79:7a:dc:92:68:c8:aa:ce:67:50:da:27:3b:37:56:4b:f5:
8c:45:14:1f:37:d9:a0:02:92:2d:1f:02:3d:11:2c:6d:00:cf:
b4:80:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:23 2026 by rpki-client