Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
File: 1-liHAt_6RhvpE-iY5-o1CwClP2A.mft (raw, json)
Hash identifier: nZTvVZW/0rJO1aFkCpL64WaU//pYLDe/Ple4m7ZVoG4=
Subject key identifier: F7:F0:DA:10:0F:4C:FE:A0:85:DB:63:1B:73:4A:AD:03:E0:76:41:DA
Authority key identifier: FA:58:87:02:DF:FA:46:1B:E9:13:E8:98:E7:EA:35:0B:00:A5:3F:60
Certificate issuer: /CN=fa588702dffa461be913e898e7ea350b00a53f60
Certificate serial: 01A18299F27516B7BB706F12680A0FC032AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
Manifest number: 11
Signing time: Wed 28 Oct 2026 13:01:29 +0000
Manifest this update: Wed 28 Oct 2026 13:01:29 +0000
Manifest next update: Thu 29 Oct 2026 13:01:29 +0000
Files and hashes: 1: 1-liHAt_6RhvpE-iY5-o1CwClP2A.crl (hash: sZ7lrOCIk5lfho1nHKIer38cr9Dep4/Dz+MGhM7XiNY=)
2: gOBQpvrlYgY9AqdqsoXxVt2Vh4Y.roa (hash: pGxEaEmHpvGHsKUuszqEC/Za5pRpgcBQna2c2eXbqWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:f2:75:16:b7:bb:70:6f:12:68:0a:0f:c0:32:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa588702dffa461be913e898e7ea350b00a53f60
Validity
Not Before: Oct 28 13:01:29 2026 GMT
Not After : Oct 29 13:01:29 2026 GMT
Subject: CN=f7f0da100f4cfea085db631b734aad03e07641da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:28:dc:07:b2:a7:53:60:93:09:54:ee:08:
7d:97:40:ab:b7:c0:a3:4b:61:d8:1a:b0:3f:ff:db:
57:d0:e9:b2:ff:94:c7:0d:45:c5:90:f2:f6:5f:59:
29:5a:1b:d5:fc:7e:8b:6f:c9:de:ba:eb:9a:3c:24:
0b:e0:cc:18:44:22:55:0b:57:bd:e0:78:e4:f1:5f:
4d:4c:d3:06:3b:41:8e:97:6d:89:da:f2:ef:e0:36:
04:68:33:d3:b8:d9:4e:49:ad:23:a6:b4:36:bf:a0:
a6:2e:d7:ce:dd:1e:5d:fd:f2:39:ad:9f:a3:ee:69:
e7:b0:4b:ea:ab:42:9d:37:0b:5b:cf:0d:82:be:89:
e1:4f:d8:ea:4b:d5:b7:a9:05:81:4b:c0:76:69:c9:
76:d3:cd:7f:cb:93:bc:b5:8a:00:22:52:72:0b:a7:
7b:82:3c:e4:3f:96:de:56:b6:d0:d2:24:54:76:11:
68:e1:54:12:13:cf:dd:12:41:07:b8:23:74:3f:38:
7f:c0:85:65:04:00:73:c7:3d:f7:b3:aa:b8:c2:15:
4d:e4:bc:f8:f0:3c:de:b3:8a:56:30:45:5b:9c:c8:
fa:8b:14:40:51:b7:50:ec:ff:53:4d:bc:49:9c:44:
25:9a:3b:af:f7:c5:42:16:70:af:a8:11:27:5b:a0:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:DA:10:0F:4C:FE:A0:85:DB:63:1B:73:4A:AD:03:E0:76:41:DA
X509v3 Authority Key Identifier:
keyid:FA:58:87:02:DF:FA:46:1B:E9:13:E8:98:E7:EA:35:0B:00:A5:3F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:75:8f:12:fb:e0:cc:b2:25:29:50:33:40:7c:a6:19:83:12:
2f:b3:ee:50:52:96:19:f3:91:ce:1b:bb:fb:74:2c:bb:8a:00:
20:9e:47:ad:36:09:c8:6e:64:30:3f:bb:23:59:11:48:54:29:
09:fc:f6:08:57:4c:7c:a4:04:24:6e:58:df:d4:e9:f6:d7:48:
20:e1:93:2b:85:5f:29:a9:5c:f1:c1:36:89:a8:fd:b7:18:04:
42:d2:43:38:15:4d:da:e0:df:5e:05:4b:5c:87:d0:04:2e:59:
02:af:3e:c6:7c:58:7d:f1:9d:ea:1f:c8:24:07:b5:39:cc:34:
cc:58:97:bb:e6:d8:7d:8d:59:3e:86:8b:cd:74:9a:07:0e:01:
f1:1c:49:09:a3:fd:de:ca:3a:fd:90:e0:4e:bd:ad:9d:e5:58:
ab:fc:e8:04:a2:7a:2e:1f:6e:56:44:44:af:e3:11:20:c5:90:
7d:62:8b:df:8b:87:f6:4a:c5:eb:d6:95:fe:29:4f:52:16:b1:
6f:67:ba:4f:e8:19:60:da:8d:c0:5c:8e:d6:62:46:81:0a:cd:
46:ce:41:ce:47:08:85:78:9d:fa:ff:52:c9:70:e1:e4:3b:a0:
bb:b8:34:ce:da:82:34:95:76:65:47:e7:06:b2:cf:18:0c:89:
0c:af:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:17 2026 by rpki-client