Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: 2qqrFnzkjuN3IHpmoX4X3LLHIRZzxuV8T4sBwO7e72o=
Subject key identifier: F5:B4:E7:EB:1B:8D:FE:68:A5:46:82:14:C9:90:25:75:5C:95:C9:8E
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 01A13ECB6FD338C85A1CCF0E10B4EE0BAAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0B8E
Signing time: Thu 15 Oct 2026 09:01:22 +0000
Manifest this update: Thu 15 Oct 2026 09:01:22 +0000
Manifest next update: Fri 16 Oct 2026 09:01:22 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: gJnPUlr+CNB93UcM7XFUgULzoxV9AHeLT1Ux+Iu4fO4=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:6f:d3:38:c8:5a:1c:cf:0e:10:b4:ee:0b:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Oct 15 09:01:22 2026 GMT
Not After : Oct 16 09:01:22 2026 GMT
Subject: CN=f5b4e7eb1b8dfe68a5468214c99025755c95c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:97:a5:ea:15:0e:6d:c6:87:d4:44:94:91:
bc:00:28:a5:d3:94:72:80:c1:a6:1b:d6:26:2f:17:
06:9d:60:18:cf:f2:5b:5e:c8:4e:80:99:d7:1a:96:
25:29:76:89:f2:81:3b:46:b6:29:30:94:13:b5:99:
c9:05:1b:25:44:45:c0:f5:1d:52:53:ba:f2:3f:e1:
e7:ec:c6:10:0e:7d:72:cc:d5:37:90:b9:1a:67:81:
cd:23:d7:b8:d6:ae:4d:ee:ee:36:f3:9a:56:26:0a:
e9:9f:82:a0:59:84:a6:dd:11:d7:50:87:13:fd:be:
6b:ae:a5:c4:b7:b5:15:9a:4a:b2:3e:6a:79:81:b6:
37:d1:ab:8f:2b:82:12:e9:4b:bc:8d:0a:25:78:08:
1d:d2:cf:f9:99:88:2f:60:d2:3e:6f:00:22:17:14:
6d:f2:5e:4e:cb:46:84:39:73:07:55:cc:cf:90:36:
64:77:8d:d1:1d:e5:a2:16:da:6a:0e:f0:c5:b5:2d:
16:a2:65:de:c5:bf:b4:c7:a9:3d:a6:1c:91:1a:57:
e9:d9:81:ea:18:f7:eb:9d:31:4f:0e:42:48:e4:ab:
65:10:23:75:b0:f1:55:c8:c7:13:b4:b0:e7:ef:9d:
00:21:5d:8e:8d:47:6c:1d:84:4b:06:9a:d0:b3:fb:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:E7:EB:1B:8D:FE:68:A5:46:82:14:C9:90:25:75:5C:95:C9:8E
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:46:41:c7:70:b1:e6:65:2e:d6:a7:14:d3:0b:ef:a5:cc:
bb:18:5b:9c:68:a4:b0:5e:15:28:2d:4b:e1:1c:de:5e:76:32:
d4:5c:44:98:f4:dd:a1:cf:1e:d3:04:7d:57:dc:6c:a4:87:88:
ee:90:e4:79:51:3c:9d:de:a3:34:7e:54:96:3a:34:f3:11:e5:
39:f4:a1:a8:2a:5d:6d:a8:79:0d:13:fc:de:18:4c:ec:f7:e8:
cf:5f:bb:8d:1b:f8:00:74:75:bc:de:28:b8:88:09:72:70:60:
4c:e0:e1:b8:d3:7b:82:bd:5e:41:72:b2:b6:32:35:d6:22:c8:
45:ee:34:46:bf:b2:fe:17:ff:37:f1:5a:ec:4f:de:e2:0f:15:
ad:4a:02:6f:8b:0b:a4:44:98:5b:d1:1a:41:25:4e:3d:af:e4:
0d:b4:ac:40:22:cc:95:da:36:50:98:db:0f:f7:27:7a:63:ce:
3c:57:6a:45:cb:f5:18:ac:6f:4b:b0:03:3f:10:51:46:95:86:
ea:09:ce:8a:59:5c:97:88:69:52:31:56:68:da:44:6e:79:53:
c4:ef:65:ba:f3:d1:d8:b8:a0:57:85:4a:bb:25:06:70:74:7d:
d5:83:67:07:94:f4:4f:36:5b:bd:ee:d6:91:0a:b3:44:b1:6f:
6a:81:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:38:24 2026 by rpki-client