Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: +AP9Bk7LwofD4m35IHo4+KZhgV+kOsUdU5RYVFQA1jc=
Subject key identifier: 36:75:7A:48:D5:09:15:EB:29:24:89:3D:C0:C5:7B:64:F9:2C:DD:56
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 01A17F624FACDF71CEDFB91880B4CC6DBC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 1168
Signing time: Tue 27 Oct 2026 22:01:51 +0000
Manifest this update: Tue 27 Oct 2026 22:01:51 +0000
Manifest next update: Wed 28 Oct 2026 22:01:51 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: xBJAnYGnk+4DsLIXbq/tAq7cRJl/z5HpAk5/7wNyY3E=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:62:4f:ac:df:71:ce:df:b9:18:80:b4:cc:6d:bc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Oct 27 22:01:51 2026 GMT
Not After : Oct 28 22:01:51 2026 GMT
Subject: CN=36757a48d50915eb2924893dc0c57b64f92cdd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:5f:35:bd:82:a2:7b:ed:98:56:7b:b4:c3:
71:02:73:f0:9b:4c:d8:10:23:88:70:bf:93:b8:31:
c4:29:2c:96:32:d7:22:50:4f:1f:f5:8d:e8:be:ae:
3c:a0:56:17:e1:50:f4:15:94:ed:b8:37:a3:69:0d:
4b:a1:05:ec:7b:39:eb:52:45:9b:0f:be:e5:49:c7:
ee:20:9d:11:a1:95:39:07:65:80:83:68:f0:ca:d7:
4a:d4:fc:32:c2:21:ad:0d:a8:41:20:29:cf:75:b9:
75:b7:64:89:df:0f:0f:91:ab:2c:d4:32:37:79:8b:
47:1c:68:7d:90:b9:6c:e4:46:97:67:ed:c2:96:72:
27:c9:70:2e:ee:2d:33:4e:c6:c6:79:97:26:22:67:
e1:99:f5:6c:78:75:5b:07:61:cb:71:ca:26:f4:50:
cd:17:e2:35:a8:c6:14:3f:ac:42:7d:66:ad:b1:96:
5a:02:cb:fd:09:55:56:c9:69:f9:5b:e4:88:f3:82:
98:46:a4:a7:6b:be:47:99:83:95:0f:cd:15:43:1e:
95:ee:ad:58:6f:8b:d0:13:88:ef:b6:ff:81:40:d6:
d4:c5:cc:0c:a5:bf:f4:70:80:89:d6:1a:0f:e4:c4:
14:34:9a:66:cf:e7:d5:c6:20:8d:be:c8:e0:fa:30:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:75:7A:48:D5:09:15:EB:29:24:89:3D:C0:C5:7B:64:F9:2C:DD:56
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:13:50:de:a0:ca:8b:cf:58:d2:46:61:37:69:d4:28:33:c5:
0b:79:ed:f8:c0:50:71:e2:da:ac:a5:0f:23:4c:ff:b4:f4:24:
7e:0b:fb:8e:ab:6b:e0:4c:00:f0:e4:68:b3:de:05:84:1e:5b:
db:c9:fd:7a:34:c8:9a:12:a5:3d:5d:e9:5c:34:e8:7f:4b:ee:
f7:e8:69:8f:25:7d:4e:ad:89:74:f5:e1:b7:eb:e7:61:2b:cc:
8e:fe:5b:f0:1b:7c:e0:ee:05:85:91:ff:68:2d:60:0a:66:58:
a0:9d:0c:16:a7:a0:01:4d:19:9f:5c:85:ed:44:cf:7a:46:0a:
a5:66:0e:ae:c6:51:ab:32:df:ba:1e:f5:8e:9d:fc:38:a0:60:
b7:70:78:9a:1f:d1:29:84:b0:19:0b:2c:59:d2:82:3f:62:e3:
ad:a6:1b:67:78:b4:9d:42:a7:e8:5c:57:43:21:82:14:98:ac:
01:16:6d:bb:b6:74:1e:3e:9a:6d:ad:ff:05:1c:90:b4:fd:91:
7a:ba:2a:27:d1:4c:72:16:9d:1b:b1:51:60:90:42:73:1b:ce:
96:06:9e:0e:32:5f:1b:1c:b6:a2:05:30:94:0c:5b:3f:8e:04:
4d:87:11:c7:70:7d:d2:f7:51:29:48:e8:e1:ed:c0:42:3b:ba:
56:04:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:02:05 2026 by rpki-client