Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier: yi1XJInshBHG7c4ahaRcpccb9HDE6y7+wWWH5IOP1X0=
Subject key identifier: CA:B7:D9:FE:FF:F1:F8:22:74:2C:C5:4E:5B:DF:38:02:BA:6D:49:6D
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial: 01A1697E5D36D2FD3CB079D79FB3731A4319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number: 0401
Signing time: Fri 23 Oct 2026 16:00:51 +0000
Manifest this update: Fri 23 Oct 2026 16:00:51 +0000
Manifest next update: Sat 24 Oct 2026 16:00:51 +0000
Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: yJ+MddpmHn+hpDpZrwbzKZ5hUkG8EOpgb/9mSWjFNho=)
2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:7e:5d:36:d2:fd:3c:b0:79:d7:9f:b3:73:1a:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Validity
Not Before: Oct 23 16:00:51 2026 GMT
Not After : Oct 24 16:00:51 2026 GMT
Subject: CN=cab7d9fefff1f822742cc54e5bdf3802ba6d496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:32:e5:00:6b:5c:b8:2a:58:a2:a5:8d:90:
c6:52:54:2f:f1:ff:ea:7d:5f:6c:68:52:a3:53:12:
35:bd:70:b3:ee:d6:5e:11:80:6b:14:f3:f3:11:2a:
ad:93:62:6c:af:42:70:66:4c:ac:38:c5:54:05:27:
56:e4:a9:4b:02:a2:13:8d:87:a7:13:e6:99:1f:19:
06:a9:3a:15:be:d9:31:67:58:28:8f:72:50:8b:99:
24:75:63:27:6f:b4:ac:ed:d0:49:c7:1d:91:f7:33:
50:20:9d:b9:d7:56:31:db:3e:ef:89:b2:99:d9:6c:
cf:fd:cc:4c:9b:28:34:3f:1e:a4:dc:d5:53:e9:6d:
53:c2:12:a8:b4:fa:2c:d4:e9:cb:5f:e8:ab:86:a9:
10:48:0b:90:86:80:bd:16:59:d9:54:50:6f:89:80:
df:8a:c9:78:fe:80:61:5a:24:57:32:34:93:fd:0c:
e8:ac:29:0a:ae:c8:d4:2a:b8:bd:52:27:d1:87:b8:
7d:15:3f:f7:da:76:ce:53:18:26:30:f7:70:98:80:
aa:a6:16:ed:85:54:f8:03:54:e0:cd:1b:25:35:cb:
f8:70:67:81:98:5d:fd:72:11:28:59:24:cb:22:ba:
ef:de:8e:e4:89:cb:85:a3:9c:f4:45:f8:0f:fc:9f:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B7:D9:FE:FF:F1:F8:22:74:2C:C5:4E:5B:DF:38:02:BA:6D:49:6D
X509v3 Authority Key Identifier:
keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3e:8a:fe:4d:cf:04:fd:3f:1c:7b:26:99:f7:d3:c7:9f:c4:
de:43:24:d4:2c:71:3a:0b:c9:67:86:e5:08:97:ed:cf:f1:a8:
73:5e:7e:24:b1:bf:31:ae:da:67:f0:07:f2:12:73:dc:b0:17:
7c:c6:1b:b0:14:4f:5d:74:f5:83:de:df:1b:5a:72:b2:ba:7a:
ef:0f:cf:f5:b8:38:24:84:c6:13:b3:d5:99:04:cf:3c:46:1a:
54:06:44:6b:80:11:17:6f:d9:10:2f:71:42:e7:9b:04:55:f1:
fa:a3:99:9a:6a:ab:d4:2a:45:62:74:9a:52:9f:8c:7f:2d:da:
49:27:43:f8:7b:0a:83:e6:67:27:1c:d3:1c:19:91:f9:fe:2f:
26:34:81:89:aa:10:e8:86:7a:2a:9d:cc:d4:f8:46:d0:99:63:
01:e7:0b:84:23:27:24:4d:a3:0b:ac:35:3f:29:e6:f2:7e:bb:
aa:4d:22:96:83:5b:7a:17:52:ef:53:d6:62:54:9b:82:62:9c:
c0:78:97:91:da:74:c8:7d:77:9a:2b:f8:d8:70:09:54:97:a1:
49:af:fd:0f:f2:fb:17:d9:5e:07:66:5c:c6:dc:f5:a8:8d:31:
6a:9e:7d:09:a8:cc:c6:a0:7c:01:19:89:27:e4:5f:41:ed:30:
ef:fd:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:32:52 2026 by rpki-client