Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: Pw4PiqXr5b2Q3ng/RglRzaqNMvssd3l62m2WclYP1/M=
Subject key identifier: 38:48:D1:EE:08:2D:DA:97:8F:1B:65:1F:14:B6:A9:57:BF:1D:49:8D
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01A000CA60063B1A7F199B3302936FD766E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:00:57 +0000
Manifest this update: Fri 14 Aug 2026 15:00:57 +0000
Manifest next update: Sat 15 Aug 2026 15:00:57 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: 4QKtiBI/OxIBet4umN8DM3z5RWWVPJjjMgZtDky1G9k=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:60:06:3b:1a:7f:19:9b:33:02:93:6f:d7:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Aug 14 15:00:57 2026 GMT
Not After : Aug 15 15:00:57 2026 GMT
Subject: CN=3848d1ee082dda978f1b651f14b6a957bf1d498d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:5e:2f:f5:1b:94:98:9c:eb:71:b0:a6:fc:
d9:f2:ec:0d:20:cb:d1:61:66:e4:88:84:3b:6a:72:
f6:89:7c:50:5b:0f:81:83:d5:d6:de:be:7e:2b:4c:
37:09:71:3b:76:ca:31:18:87:06:a9:c0:8b:95:8a:
f7:b0:03:ae:a7:d6:d5:65:1d:d1:19:3a:52:50:4c:
08:1f:b9:52:26:17:fb:88:b1:a2:d1:b6:fa:12:aa:
a6:3c:b9:23:78:99:64:25:8d:93:8e:28:4e:e8:3b:
0b:f0:e7:e2:87:b1:9e:c0:ae:31:b1:5b:9d:d4:dd:
5d:4a:52:3b:b7:d7:4d:71:27:05:22:39:95:3c:91:
e1:b1:3e:34:ff:a3:1d:48:89:39:bb:05:79:b0:69:
11:f3:0e:79:ad:c2:57:c8:fe:a6:f3:de:55:ef:1e:
39:15:2c:09:22:4b:04:47:ff:2a:60:60:d1:7a:82:
e2:41:8c:dc:68:fc:4d:f0:7b:24:c8:51:a0:ad:b0:
86:0b:00:43:c7:8b:f3:a7:b8:6c:5e:ae:10:5d:c5:
31:bf:ac:f2:95:82:a4:ee:b5:a2:7e:1e:41:b1:2c:
b8:e8:d6:25:72:a9:c7:5d:4b:e0:5a:a1:11:59:68:
d0:68:20:8f:93:11:91:25:cc:05:93:c9:98:6b:11:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:D1:EE:08:2D:DA:97:8F:1B:65:1F:14:B6:A9:57:BF:1D:49:8D
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:90:d8:6d:40:1e:75:7c:4c:c6:f4:64:bc:63:eb:cb:bd:dc:
4f:fd:16:1a:cd:b3:7c:27:15:32:f7:da:48:0f:ed:6a:86:1b:
0c:bd:be:f6:bb:80:22:c9:19:32:7f:30:8f:b4:8e:cc:fe:a0:
b1:59:f0:a0:a5:52:82:30:fd:30:d7:7f:f2:73:58:63:2f:57:
2f:6b:0b:36:47:75:1a:59:a3:5b:ed:de:c7:8b:4e:6e:ad:a8:
87:bb:85:b4:2c:b6:eb:ba:cf:2f:43:68:84:e2:44:7e:b6:14:
75:84:84:c2:97:6e:08:67:e3:20:73:b6:ac:9c:0b:93:75:93:
5f:c1:6c:10:f5:da:81:71:dc:0c:3d:49:44:7f:e8:b0:71:85:
f1:76:cd:bb:63:9e:05:65:a6:41:16:c1:e3:2b:6e:01:6e:fa:
a7:7f:ee:7d:b4:4b:e8:34:1c:36:d3:8a:53:e4:64:20:13:1d:
69:52:06:54:e2:01:18:77:47:47:c8:43:c8:4c:1a:7a:7c:f2:
ed:c8:41:d3:2b:0c:34:2a:f8:95:ed:e5:79:38:5f:ff:84:3b:
8e:3b:e2:10:6c:6e:cd:3b:fb:57:64:5c:d9:68:83:3f:b9:43:
7d:c8:f5:00:34:00:ce:07:14:a6:4b:94:d8:3d:14:48:a4:fc:
24:6a:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:14:05 2026 by rpki-client