Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: rgL6ePibCOq5PW1EP2f/vzek/bfB630Lw7Vp1ndM3Go=
Subject key identifier: 60:D0:90:CB:B3:78:45:82:24:FF:C0:DF:6B:F3:52:3D:73:0A:8E:E6
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 01A040F2D5FC49A0F26C6713C35AEF7F12B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 0503
Signing time: Thu 27 Aug 2026 02:00:51 +0000
Manifest this update: Thu 27 Aug 2026 02:00:51 +0000
Manifest next update: Fri 28 Aug 2026 02:00:51 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: q1dhdOxXsD4LgocUGA2y+OT0grMIG2G4amG0TtLArMA=)
2: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (hash: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:d5:fc:49:a0:f2:6c:67:13:c3:5a:ef:7f:12:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Aug 27 02:00:51 2026 GMT
Not After : Aug 28 02:00:51 2026 GMT
Subject: CN=60d090cbb378458224ffc0df6bf3523d730a8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:4c:f1:15:40:3e:d3:1d:b3:ee:4b:17:ad:
b9:a2:f4:ce:b2:77:f9:73:4a:8e:61:4d:43:b2:05:
e0:73:f4:7c:be:5c:ce:b7:9c:2d:5f:92:60:00:48:
bd:91:d1:c5:52:56:18:ec:0c:20:d6:67:79:12:35:
12:57:13:e2:d7:d7:f4:7d:ec:33:a6:34:5a:77:ae:
98:08:ab:b3:8f:a0:16:ad:bf:8f:2e:0c:8d:d4:54:
66:ec:bd:38:67:cb:17:2c:c1:35:56:20:2f:6f:ef:
f1:ed:5c:4d:59:55:b3:97:b9:8d:b5:16:0d:d4:eb:
05:90:58:05:15:b4:63:d3:65:e7:09:d1:ad:66:fa:
8c:39:43:ff:74:db:97:c1:60:d2:d3:77:64:00:43:
fa:2a:b9:d9:6b:da:a2:17:76:15:72:1f:7f:84:20:
90:77:88:06:ee:a6:2a:13:ed:1c:8a:59:81:6b:cd:
c4:31:b0:47:0b:93:3a:f2:68:31:8c:a2:db:5f:0f:
59:ba:98:d9:c4:df:25:12:35:4b:00:9d:ca:c5:fa:
df:ec:bf:a8:ce:98:92:2d:10:06:2a:9c:5f:ff:ff:
b3:ae:d3:34:9a:8b:c1:ad:51:42:2d:f1:42:ae:31:
d6:06:d1:b5:cc:7b:d2:c8:22:84:09:9c:1c:a2:08:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:90:CB:B3:78:45:82:24:FF:C0:DF:6B:F3:52:3D:73:0A:8E:E6
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1c:22:31:9b:cf:47:23:37:12:56:ef:da:3c:df:c8:55:e1:
79:82:b9:62:4c:fb:d3:10:8c:55:30:92:ae:d5:91:b2:70:f7:
68:83:3d:db:53:4a:36:7e:21:03:32:d2:dc:2a:d7:60:1f:62:
0e:66:6d:bc:c5:93:33:5f:1b:74:61:f3:25:16:a5:e1:b9:53:
eb:dc:52:ca:0f:2b:49:83:1e:b2:5c:7e:18:f7:e9:17:f3:6e:
62:0b:18:5c:16:84:0b:3a:b4:75:9c:d9:50:79:80:05:2e:6c:
09:31:43:5a:00:07:7f:1d:9c:40:0d:b7:1c:6b:36:12:1b:a5:
7b:9f:03:24:f1:b3:f5:a0:3c:bf:dc:13:6d:47:bf:f1:c1:48:
f7:6a:60:03:ea:90:c5:de:c3:27:f3:ab:32:b0:05:53:20:fe:
d7:3f:07:1c:44:a6:42:a2:53:bd:d6:c5:d4:e4:0c:3c:72:cd:
da:9d:e3:3b:e5:d1:25:12:75:1a:62:a2:4f:8e:1a:36:9a:ed:
9b:f4:29:aa:03:c0:65:06:2b:7f:49:d5:3a:40:23:f8:7d:fb:
a1:93:12:41:89:21:06:0d:53:bf:5d:e4:31:db:9e:a9:8d:20:
09:22:a1:90:c4:77:a6:51:d1:e6:29:f3:4b:61:80:b8:1a:f2:
04:f0:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:14 2026 by rpki-client