Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: 5oHfjjZ/upVgqU4TYYKQGcTfqzftbQf4uRoah0HHpss=
Subject key identifier: 0F:36:FE:29:81:A1:09:DF:98:D1:BD:5E:50:0D:D3:77:A6:34:24:0D
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 01A13DB850268252CBDB548E30692ADD800E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:00:51 +0000
Manifest this update: Thu 15 Oct 2026 04:00:51 +0000
Manifest next update: Fri 16 Oct 2026 04:00:51 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: 1BY6P/q6eJqvzJfZsbVouEtb5ZBnZYlevFom23RhbS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:50:26:82:52:cb:db:54:8e:30:69:2a:dd:80:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Oct 15 04:00:51 2026 GMT
Not After : Oct 16 04:00:51 2026 GMT
Subject: CN=0f36fe2981a109df98d1bd5e500dd377a634240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:7d:0f:2a:a5:65:31:54:88:6f:09:20:a6:
44:74:ea:0e:2d:26:c0:e7:42:ed:f6:dd:d5:a2:04:
70:40:d3:2b:48:f1:9b:c8:14:54:82:5d:0d:ee:4e:
79:90:37:dd:b4:e8:91:7d:ee:0a:78:d7:4c:c7:ca:
8a:dd:94:d2:16:a6:e6:76:13:b0:76:72:1b:37:34:
95:c6:de:f7:ff:72:ee:5e:fd:96:09:39:30:e7:b1:
59:b0:1e:94:66:f5:c5:7f:d7:31:2e:32:49:ce:19:
bf:7a:22:a0:c3:4c:c2:b5:dc:21:66:df:11:2a:7b:
88:34:30:73:d2:d8:ed:8a:9f:e6:f6:6f:ec:fa:4f:
28:6a:99:04:09:05:22:c1:34:c4:bb:e5:4c:f7:57:
54:7a:7e:b8:ce:11:c5:a9:c7:8d:28:ac:34:e6:da:
86:e5:7e:82:62:27:01:89:0f:73:75:1a:32:36:99:
fa:77:c0:bd:62:2a:98:b8:d9:11:27:50:57:c1:eb:
e4:9f:be:99:8b:c0:34:9b:2f:bd:be:3a:e7:ca:e1:
64:89:eb:5f:5b:cb:e4:a8:7a:6a:75:7e:a4:58:98:
a6:75:b7:04:59:4a:65:b5:79:82:98:77:93:15:dc:
4a:f4:ed:b2:60:64:3f:b5:3e:42:a3:44:c6:d7:7a:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:FE:29:81:A1:09:DF:98:D1:BD:5E:50:0D:D3:77:A6:34:24:0D
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:bd:19:ce:3d:4e:3e:6b:5c:51:50:d8:31:5d:de:46:43:
36:86:fd:da:6b:d1:26:59:ba:e9:7a:ff:60:a2:de:9e:0c:7d:
ae:34:36:72:cf:ec:b2:d8:97:9a:21:5e:ec:79:30:f1:5d:c5:
c1:8e:03:f3:f0:03:0a:c5:91:67:7f:c3:c6:29:25:a5:8b:11:
a9:4f:f3:03:aa:e7:c5:4c:76:9e:d5:ce:4f:d3:28:3e:65:27:
6e:f0:b9:71:79:9a:c1:f8:db:d6:76:17:a9:26:7b:d0:17:c2:
6e:74:d5:95:ed:56:62:c8:8f:9e:a0:69:19:82:63:76:e2:4d:
80:a6:25:ee:1c:10:af:85:02:bf:f4:d9:6a:79:57:6b:3a:29:
e1:be:13:97:e4:c3:cb:d3:32:32:f8:13:ae:7d:fe:a3:c6:bd:
3a:bc:7d:55:3e:96:04:ea:7a:17:e2:5a:c1:b5:b8:17:58:9a:
75:48:55:cd:6d:be:3a:e0:0f:f9:59:3c:22:f5:7c:b9:ac:28:
80:b0:ea:72:17:56:d2:3a:0d:84:0a:44:fe:55:86:cc:da:40:
bb:df:28:5c:46:f1:1d:28:b1:52:01:b9:44:c6:c8:98:66:b5:
90:d2:a1:48:0d:af:fb:4c:48:98:2e:2c:1d:5e:1c:e6:67:8b:
1e:28:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:05 2026 by rpki-client