Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: LDcILInAlIZH0wpDxdrhEB3Xh8xRYToBqStcaN1uQ48=
Subject key identifier: 60:7E:9C:D3:C2:8F:92:F6:E6:AF:41:62:56:18:C9:95:06:51:9D:A6
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 01A08C0CFA7DB2CBE9847F9AD32708F8C87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 10EA
Signing time: Thu 10 Sep 2026 16:00:55 +0000
Manifest this update: Thu 10 Sep 2026 16:00:55 +0000
Manifest next update: Fri 11 Sep 2026 16:00:55 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: 1YD/aKj5YzWcP14ltZ4rEonSw4T4guKAGJYzRaNrwUc=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:fa:7d:b2:cb:e9:84:7f:9a:d3:27:08:f8:c8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Sep 10 16:00:55 2026 GMT
Not After : Sep 11 16:00:55 2026 GMT
Subject: CN=607e9cd3c28f92f6e6af41625618c99506519da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:8f:93:f3:1a:e0:21:21:42:74:e3:a0:fb:
61:53:fd:ef:c3:3e:44:a8:ce:f0:dd:8c:18:23:78:
55:8b:6e:c6:77:4a:1b:ba:aa:fd:84:4e:01:11:15:
65:af:58:97:b1:ee:fc:82:da:4d:e7:16:29:20:99:
e8:d0:78:c9:b7:d2:09:ac:ee:38:11:83:10:01:44:
6f:92:7c:a7:19:c4:24:f0:9f:d9:76:a9:9f:8f:ff:
3a:59:5d:02:66:a6:f2:49:27:2b:6e:3b:f6:a9:92:
97:d8:3d:51:15:c0:44:d3:09:5f:47:8b:00:8d:ed:
df:45:37:71:99:b9:7f:1f:14:e4:52:14:89:8e:5c:
13:1e:22:55:c6:3d:3a:94:31:1d:ff:d1:16:62:fa:
51:1d:66:21:68:b7:0e:c6:2d:31:a0:2c:aa:ec:98:
06:e3:d0:d4:5c:e7:55:05:bc:82:54:87:6c:2b:bf:
be:a0:5f:0a:68:bd:b8:b5:33:af:22:76:77:f9:ab:
67:89:5a:e8:3d:db:8c:9c:12:5a:06:90:ce:4b:67:
25:8f:14:8a:77:41:7d:33:e4:37:30:f7:d7:d3:33:
39:d3:bc:71:b8:fa:ea:32:44:f2:e9:73:ae:52:2d:
d1:13:ed:2d:cd:6e:84:e6:87:92:35:d4:de:f0:fb:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:9C:D3:C2:8F:92:F6:E6:AF:41:62:56:18:C9:95:06:51:9D:A6
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1d:59:6c:26:d1:af:82:ef:14:6c:08:78:c3:3b:d9:a1:d5:
05:09:ef:e4:97:8c:f2:45:7e:fb:55:19:96:86:d9:66:c9:bd:
2c:91:62:19:d4:62:4b:c6:15:c8:eb:b1:52:ff:81:b1:76:fd:
79:50:b5:95:f4:93:28:1a:1c:c8:6f:c4:f1:52:63:9a:fa:80:
88:b6:8f:f5:75:7b:5d:d0:a7:ea:a2:b7:07:a8:fb:4b:d0:10:
db:e9:95:47:5c:f6:80:ed:03:0e:1b:64:4a:2c:19:44:75:4a:
8f:68:f1:cf:2c:65:a2:19:01:dc:8c:9f:24:b0:9c:2c:67:5a:
34:24:01:dc:4c:21:74:d2:3d:71:ce:b0:3b:44:26:84:73:84:
46:d3:11:a6:65:69:7b:86:34:45:c0:fa:a8:02:7a:5a:8c:4f:
d3:14:6c:c4:36:ad:83:ad:f7:dc:15:f6:4f:05:99:53:d4:fd:
57:d5:23:36:15:c0:57:a5:d0:73:96:a3:2f:21:4c:9b:3a:48:
c2:48:da:f9:76:d6:20:78:da:d8:78:39:38:1b:47:90:67:22:
52:b3:39:10:98:4a:f9:45:87:c9:83:f9:71:cd:08:55:33:d4:
bb:f7:a8:22:3c:c8:b3:d5:6a:ae:53:eb:c8:92:5f:83:9b:96:
fd:e2:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:24:58 2026 by rpki-client