Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: Jd5Zs++ua5D+sw+xjcs5oerp8kaJA5T9JlWPtgUYfdU=
Subject key identifier: B3:39:07:20:8B:AE:DC:C7:58:50:4F:7E:CE:57:FE:A4:74:82:B3:CE
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01A13E5D02BB1C7397E029CFB3A526ADEB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1A23
Signing time: Thu 15 Oct 2026 07:00:45 +0000
Manifest this update: Thu 15 Oct 2026 07:00:45 +0000
Manifest next update: Fri 16 Oct 2026 07:00:45 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: uhA1hgIW+rTD/wbmKAPG7bSGObREVkIn66KyNX0FeLE=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:02:bb:1c:73:97:e0:29:cf:b3:a5:26:ad:eb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Oct 15 07:00:45 2026 GMT
Not After : Oct 16 07:00:45 2026 GMT
Subject: CN=b33907208baedcc758504f7ece57fea47482b3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:50:e8:ea:fa:65:41:e4:5b:be:6e:50:c0:
48:80:17:6c:b9:8a:74:77:1d:77:9b:88:3a:bc:10:
7d:d7:2a:52:94:50:54:93:be:18:7f:f6:2f:7b:23:
39:84:a1:a1:7e:bf:30:bb:b8:53:36:bd:cb:05:56:
0c:66:72:5d:c0:d1:54:d8:0c:15:7c:07:f7:4e:30:
c9:c5:7f:2a:ee:d9:82:77:90:35:26:2f:df:0d:37:
3d:1d:6f:c3:f6:2c:c7:ef:3c:aa:e9:35:a6:fa:91:
70:55:f6:08:52:0c:f3:0b:89:cd:24:bd:f3:b2:74:
d7:38:32:e5:67:90:93:45:80:14:18:9b:22:8d:e4:
4e:38:0e:86:e1:03:58:58:47:13:67:d8:3f:22:f3:
3d:4a:c6:05:74:04:21:b3:b8:48:f9:25:83:87:64:
a2:c3:fa:f8:c0:e4:16:f1:0d:3f:4a:25:fc:72:b2:
47:20:c5:6e:b2:9e:40:6e:14:df:71:f2:34:50:96:
37:5d:6f:b4:12:2a:6e:c4:71:41:88:a9:19:3c:07:
9d:ff:e4:89:d7:8f:23:10:62:ac:d4:bb:d0:f6:c2:
89:19:8a:de:51:64:85:fb:d8:f5:e3:e9:e8:f8:a2:
36:21:98:2d:cd:77:6e:b7:aa:c0:5f:cf:23:f2:78:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:07:20:8B:AE:DC:C7:58:50:4F:7E:CE:57:FE:A4:74:82:B3:CE
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:22:e0:3e:ef:6d:3d:f5:76:27:8f:1c:5b:c0:27:ff:4f:
20:1c:ca:7d:28:2c:75:e9:77:eb:2f:4e:37:6a:1f:ad:c5:b1:
50:aa:df:48:6b:17:6c:4d:56:f2:c8:b6:33:66:22:67:e1:d7:
ba:7c:c9:49:7d:04:87:96:49:3d:74:82:74:58:8b:16:6c:f4:
29:d0:74:5d:2f:21:82:6f:4f:ce:d9:e9:16:f6:30:71:05:c5:
ad:9d:50:6e:1b:6c:b4:e5:14:9b:61:fa:ad:e2:e5:74:d6:94:
f0:b7:b5:47:14:c6:bc:9e:5c:74:e2:d7:ca:6c:d1:86:ff:d2:
c0:38:9c:e6:3c:a6:b2:8f:20:65:e0:14:23:02:ff:9f:5a:20:
b9:21:3a:5d:e1:6a:de:bf:3d:d6:de:3e:1a:34:ea:24:8e:9d:
dd:99:86:ff:f5:db:c1:f3:2c:bd:57:16:8e:c0:e3:fc:79:90:
25:71:d5:3a:b2:ca:c4:bb:89:e2:69:70:7d:9b:9a:8b:ba:5f:
7a:e0:61:b2:07:85:fa:33:fe:94:b5:7f:56:6f:1f:e4:27:0d:
d7:70:71:7d:23:46:7e:e8:5b:e3:81:49:8d:16:6a:e8:8f:57:
09:b1:8c:bb:3e:f7:5b:e5:0c:be:56:90:eb:a2:18:90:a9:f7:
8b:43:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:36 2026 by rpki-client