Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: XwV9nNS5/Gx+Go88C347f4umZJtzVtd4RLtYKHEhpXk=
Subject key identifier: 5A:EE:24:ED:C9:A5:02:B3:50:41:21:38:1B:8D:5C:F1:D0:4B:7C:D0
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 01A110A8E291FDE9E4A9DB564C3CA8D8E581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 10:01:05 +0000
Manifest this update: Tue 06 Oct 2026 10:01:05 +0000
Manifest next update: Wed 07 Oct 2026 10:01:05 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: tM+EseaxnjmxpNO0LK3MSubGr3Ulb4ooAk9FPEETHeo=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:e2:91:fd:e9:e4:a9:db:56:4c:3c:a8:d8:e5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Oct 6 10:01:05 2026 GMT
Not After : Oct 7 10:01:05 2026 GMT
Subject: CN=5aee24edc9a502b3504121381b8d5cf1d04b7cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:ec:84:00:f6:25:a3:17:42:ac:e2:c1:5c:
35:0c:f9:91:8f:62:3f:3d:5f:37:21:12:2c:60:c0:
64:37:a4:a1:47:94:ff:b5:68:3d:23:1f:d8:0f:23:
e8:d5:2b:2b:57:d7:e6:37:9f:15:00:06:65:03:65:
54:ba:3c:9a:7d:2c:c0:d4:a9:30:f9:60:29:f7:3d:
16:3b:61:35:d7:d2:95:c3:d8:f3:0d:eb:25:82:5b:
c4:58:f9:fa:2d:63:1c:e9:52:ac:97:f0:35:fb:f1:
fb:e4:15:77:83:b8:ce:be:0e:14:4c:5d:14:14:06:
d4:72:ea:70:09:e8:fe:f9:75:8f:0c:f0:17:f2:25:
76:25:a5:58:b5:95:63:d3:2f:ba:42:29:df:2a:ff:
08:62:2b:f3:1d:0d:21:64:e6:2c:a6:ef:97:cd:a0:
c5:03:31:0e:5a:01:7e:22:0c:35:91:63:1c:c2:c6:
c2:2b:29:48:e3:43:81:8a:6c:fa:b1:80:74:bd:3e:
0b:51:d7:9f:a7:ac:9d:60:00:66:00:2f:15:ec:2e:
cb:6f:96:67:aa:2f:fc:db:67:37:e9:d4:20:d8:91:
d8:96:35:fa:68:af:38:6a:94:0c:fa:c1:62:8f:d2:
d4:26:94:44:d5:3d:70:5d:78:3e:03:12:1c:ce:38:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:24:ED:C9:A5:02:B3:50:41:21:38:1B:8D:5C:F1:D0:4B:7C:D0
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:10:a9:cd:09:95:4e:ad:85:d0:dc:ec:3d:65:e6:5a:89:81:
72:24:a5:b0:da:4a:67:3c:50:58:18:fe:c4:7c:a1:f4:24:58:
fd:f5:94:9e:4d:93:47:f5:ee:ff:b5:5b:05:54:f6:4e:60:d1:
80:b7:e3:21:f6:99:c1:d4:5a:83:c8:34:aa:c2:f7:6e:ed:71:
3b:a1:c3:95:e0:ac:97:9f:8a:37:9b:02:b4:2a:25:e3:0e:c8:
fb:35:40:3f:ee:bd:79:4e:7f:c9:e0:e4:e6:d7:7c:15:47:5f:
95:60:4b:dc:72:df:6a:01:55:d7:5d:56:42:d3:df:ba:e3:c7:
6c:40:99:ed:05:e4:87:c8:d8:61:8b:5d:1a:06:24:e4:36:8c:
89:c7:32:19:4b:23:69:d8:9c:51:a2:4f:9d:4b:94:83:5a:09:
ef:df:f1:b4:42:cd:c6:cb:0a:5f:f1:e7:aa:dc:3e:99:06:50:
94:06:3f:2b:9c:8d:1b:d6:e0:6f:f3:26:f1:1d:fa:77:ef:f2:
3e:26:77:42:bb:0e:6d:8c:15:6e:de:22:41:94:2c:58:1b:bc:
da:07:27:69:51:d5:65:5b:46:75:12:ed:b9:dc:e3:ad:ba:22:
f2:a2:20:af:74:73:7d:12:47:cf:6d:8b:c4:62:57:e6:01:05:
8b:99:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:10:46 2026 by rpki-client