Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: pdmMTg+ObyRXkcWTyk3fTbkiKT1Ywa/euoA64Zsx8Ys=
Subject key identifier: FE:A8:C2:5D:DB:48:A0:7D:1F:C7:CD:BA:FA:8B:CE:A9:C6:C4:8F:3C
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01A13CA59D2E5AE61F998FA48F74923C85A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0CF2
Signing time: Wed 14 Oct 2026 23:00:48 +0000
Manifest this update: Wed 14 Oct 2026 23:00:48 +0000
Manifest next update: Thu 15 Oct 2026 23:00:48 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: sINI9ICm61WlfrZh+c4g/VKAU/XomM8ERxDeHi6OwIU=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:9d:2e:5a:e6:1f:99:8f:a4:8f:74:92:3c:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Oct 14 23:00:48 2026 GMT
Not After : Oct 15 23:00:48 2026 GMT
Subject: CN=fea8c25ddb48a07d1fc7cdbafa8bcea9c6c48f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:a0:0f:b5:b7:2f:e3:ef:90:83:70:9f:bb:
50:25:72:12:7b:b5:d1:67:14:ef:92:4a:91:8e:70:
a7:ee:5c:9b:63:c8:ce:fe:33:f3:9c:80:96:0f:9f:
0d:bb:cc:54:c0:66:3a:b6:33:51:65:ac:d2:e4:a1:
46:00:31:b0:0e:eb:23:76:18:c7:fa:ed:3d:cc:cd:
b4:4e:c2:d1:9b:e3:83:65:71:48:8d:fd:af:62:b7:
ce:2d:ca:0e:04:b2:e4:8d:ac:63:01:05:af:9d:e6:
eb:d2:c4:54:50:b4:b1:86:12:1b:01:97:61:07:bf:
c4:92:7b:44:a6:63:6d:5f:b8:f8:09:a0:ea:93:cc:
d8:79:2e:23:21:dd:ca:0e:dc:42:97:9f:d3:9a:98:
fb:21:29:bf:d3:05:93:a8:79:79:08:00:5d:ce:51:
01:5d:50:2b:64:1f:f9:33:35:12:28:a9:76:7c:79:
81:b4:f0:55:22:8f:03:e5:8d:9a:f9:4b:9a:a3:d2:
d7:2d:ca:af:91:e7:e1:99:5d:ec:67:29:cb:65:d6:
8d:c2:1c:13:12:b4:2c:ae:85:6b:09:6a:41:eb:e7:
51:1d:1b:8f:c3:5b:b1:32:5b:63:e6:06:7e:ef:b1:
6b:54:54:c3:b6:4d:7f:51:da:6b:90:83:09:c2:2e:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:C2:5D:DB:48:A0:7D:1F:C7:CD:BA:FA:8B:CE:A9:C6:C4:8F:3C
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:c8:a6:52:44:d1:7d:bc:2e:fc:f1:e3:ea:b2:d5:dc:1f:
b5:cf:ec:04:35:21:ca:f7:ed:cb:00:19:5f:22:12:eb:84:c8:
34:e1:78:21:0b:0b:b8:bb:ac:93:c4:a4:23:81:ff:8c:78:b3:
8d:46:5b:dc:63:e1:c5:ab:d7:ba:5f:7b:41:91:76:ba:13:9d:
88:b0:4c:3a:f2:92:45:3e:fa:5d:c6:7d:94:c4:32:18:7d:a4:
88:d0:c1:a3:a5:57:d4:4f:25:77:54:ef:83:6f:6e:3c:c2:82:
59:15:d2:2e:dc:a3:da:70:63:fa:2c:14:b2:4e:77:02:bb:fa:
00:e1:0b:55:a3:04:43:ed:00:21:d5:ea:86:f6:fe:27:ce:68:
69:30:39:74:8a:ff:e0:9d:bc:c3:72:59:b5:89:11:08:39:ad:
63:6e:87:24:8a:89:f8:7e:6e:d5:82:b9:08:8e:14:51:1c:f7:
55:84:5c:ff:9b:2b:3c:dd:40:75:23:3e:7a:de:58:ac:7a:9a:
f7:b2:6f:9c:92:6a:a5:40:82:65:1d:f3:b9:a3:7b:19:b2:c5:
69:5d:30:78:7c:ae:b5:96:55:05:12:46:c9:3b:be:27:06:9e:
1d:ab:77:56:fd:4e:51:6e:73:1a:64:b9:29:0b:c9:6a:8f:fe:
37:2b:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:04 2026 by rpki-client