Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: PFeTQkl4+YjH4XVBSn/z5zRuo3QyTY/jRRjb+IQuvOg=
Subject key identifier: 9F:80:03:36:2A:12:B5:25:D0:7A:93:55:06:E9:8B:71:23:97:E0:AB
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 01A1219C39FF39683B24F6528A3CBB9D1149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1A98
Signing time: Fri 09 Oct 2026 17:00:48 +0000
Manifest this update: Fri 09 Oct 2026 17:00:48 +0000
Manifest next update: Sat 10 Oct 2026 17:00:48 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: L0qQNM112lcaJaV4tJxwF0LcifZcY91CZB2efCWov6k=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:39:ff:39:68:3b:24:f6:52:8a:3c:bb:9d:11:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Oct 9 17:00:48 2026 GMT
Not After : Oct 10 17:00:48 2026 GMT
Subject: CN=9f8003362a12b525d07a935506e98b712397e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:bc:0b:f1:9f:52:ee:5d:10:56:87:15:24:
ec:49:c8:73:9a:2f:09:ae:e7:05:61:91:2b:45:d7:
a0:6c:ce:a2:14:98:95:cf:27:b3:eb:6b:3c:e6:1a:
83:32:04:03:ac:cd:3c:90:6b:d5:46:4f:04:dd:2a:
80:f2:af:13:66:df:a4:88:38:15:55:73:89:75:58:
21:63:3c:51:0d:77:1c:17:a4:a1:25:d4:34:ba:7b:
f9:41:48:ef:80:bb:a6:4a:ed:ba:18:22:70:91:f7:
c0:6f:19:38:a2:b5:33:e0:dd:50:98:a9:dc:32:4e:
c4:00:0e:a9:69:88:a7:74:17:97:32:7a:0d:93:e9:
0a:7d:fa:b7:ae:c6:9a:d1:17:ad:58:7f:07:2f:df:
f9:e8:cc:c2:ce:9b:fc:a2:f7:b4:4b:04:2f:bc:fc:
bd:0e:87:cd:ea:c3:5c:71:98:8b:87:b5:3b:90:ac:
43:84:d8:f8:69:eb:8b:03:ea:ed:34:3f:5d:e4:77:
f5:12:e7:91:63:5c:43:f1:ff:40:36:48:88:0a:0b:
a9:46:fc:c6:8b:08:6c:c0:7c:cd:1e:13:21:b5:5b:
8a:5f:9f:a3:9a:36:9f:13:5c:d8:63:45:35:8e:cd:
1e:af:b5:7f:29:e2:2b:65:33:d9:81:1b:8b:42:04:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:03:36:2A:12:B5:25:D0:7A:93:55:06:E9:8B:71:23:97:E0:AB
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7c:e1:5b:33:e5:9e:bd:9f:38:2f:a8:25:27:fa:56:72:95:
5d:96:c3:2a:de:e2:e9:59:4b:96:cc:3f:8f:b9:9d:e0:c2:c0:
5c:b4:80:82:82:ee:6b:71:d8:43:d2:90:10:0b:49:88:6c:67:
bd:63:d7:ba:79:ac:83:25:81:02:79:67:c5:e0:0b:9f:93:1d:
c3:ae:19:7a:db:c5:28:ce:9a:2a:d0:6c:49:82:93:08:d2:ff:
12:28:25:f4:6f:92:3f:d2:4b:26:b5:0e:cb:f0:da:a7:db:2b:
e5:98:a6:8c:c9:e7:58:5a:66:cb:68:7e:fe:12:1c:f7:14:98:
a3:03:a6:98:1d:98:21:32:f7:c6:13:61:f5:f0:5b:47:b0:7a:
d0:22:8c:f4:42:80:2b:16:b7:67:40:48:3c:2d:1f:b0:f4:ea:
8a:3c:3f:71:49:49:3a:c3:c7:dd:d6:1a:0a:d6:2a:53:38:04:
51:03:10:f7:ff:21:ce:68:0f:9c:10:1c:9e:76:c9:34:ec:18:
75:6f:e3:b7:13:40:37:4e:88:f6:6d:8a:33:e3:96:f5:1e:4c:
a1:af:b4:92:be:32:75:41:52:4a:a7:fa:30:c2:67:c1:ec:f6:
35:eb:6b:ef:8a:4e:0a:3d:e3:79:27:6e:09:d5:9e:55:cc:ed:
06:0b:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:59:02 2026 by rpki-client