Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier: OgDmi5Lnw42a9W0s5pQJqRgKUwUHj5mlnpUk2+uua6E=
Subject key identifier: 8F:8F:F5:7B:A0:3A:F3:DE:CC:FD:D4:BC:1C:3E:D8:2D:6E:0D:C0:9E
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 01A13F3964E7191583DAF7A0292A4E4F1BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number: 0C39
Signing time: Thu 15 Oct 2026 11:01:28 +0000
Manifest this update: Thu 15 Oct 2026 11:01:28 +0000
Manifest next update: Fri 16 Oct 2026 11:01:28 +0000
Files and hashes: 1: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: gbL8XcGhMj4cPZK8u+xMs9beD7vDsNB4zBuG2uE7gSE=)
2: zlePSr6zYlrhgCFQW-qZhuoxEwk.roa (hash: ebo4B4GxIfR5oraws5Tn/cPpRYE1VsqUuELBHVvUXok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:64:e7:19:15:83:da:f7:a0:29:2a:4e:4f:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Oct 15 11:01:28 2026 GMT
Not After : Oct 16 11:01:28 2026 GMT
Subject: CN=8f8ff57ba03af3deccfdd4bc1c3ed82d6e0dc09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:6e:58:4f:64:c8:5a:33:39:f7:5e:fd:b3:
11:b1:4c:0d:18:20:e8:30:e1:fb:b8:da:25:8a:e2:
47:bc:47:29:d9:16:3f:80:88:d9:36:8c:a1:f5:da:
08:50:5e:fb:92:f4:98:98:f4:b9:91:17:40:9e:f6:
84:2b:d2:b3:16:b1:26:a6:36:dc:54:00:46:b4:5c:
19:42:89:71:44:a8:2b:bc:dd:eb:29:a2:b7:5d:3b:
97:63:7b:a8:ab:ee:96:e9:9c:ad:9b:ba:91:f4:ed:
cb:67:d3:5c:3e:9b:cf:70:1a:06:40:41:d4:ae:51:
e5:9c:db:5c:cb:1b:e5:62:42:c1:d3:84:d5:cd:97:
2b:e2:cb:6f:14:f1:a7:ac:e5:4f:a0:33:c6:08:d3:
58:dc:74:26:7b:3d:17:34:24:6a:99:c2:41:23:82:
e2:7e:a3:e4:ae:c8:0a:80:87:56:58:d6:b9:17:95:
7a:fe:76:9f:80:41:15:01:9f:c8:16:e3:03:73:8c:
04:17:5a:8e:c2:3c:37:33:35:41:80:04:d7:c3:ab:
1a:f0:f0:7f:fc:0b:dc:26:22:f1:95:fc:44:b1:3c:
75:6f:67:3c:74:6c:0a:b5:09:52:84:56:dc:3b:d9:
70:57:47:bd:74:9d:c4:9f:4c:b4:7e:f6:6d:c2:5a:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:F5:7B:A0:3A:F3:DE:CC:FD:D4:BC:1C:3E:D8:2D:6E:0D:C0:9E
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:60:14:43:21:b8:ff:e4:10:b6:98:98:99:08:3d:65:f9:18:
3f:cc:50:62:64:04:59:3f:a8:80:07:05:7e:44:ad:8a:92:ed:
21:12:cd:b9:e0:57:1f:5a:a9:91:14:ab:b8:1e:3d:29:ec:7f:
30:ea:c7:7e:91:f3:38:74:06:d3:f5:ba:b2:bb:1b:f0:7f:aa:
ec:28:55:1a:7b:2a:79:78:eb:7e:07:94:82:04:bc:f8:06:fb:
b9:8b:e4:6f:72:03:e3:98:3a:59:00:5f:e9:2a:1d:d9:98:9a:
dd:c9:3f:3e:49:59:4e:54:e1:1c:24:52:a2:fa:89:77:aa:19:
4d:1b:9b:bc:f0:47:08:c0:48:74:c9:19:81:ca:8c:9c:a0:60:
f2:c6:1d:20:d6:04:91:48:36:20:c2:b1:0c:0f:a4:04:f0:a1:
61:d5:54:65:25:2e:c5:4f:cf:a6:bd:0e:49:ba:63:46:4e:12:
bc:16:a1:6d:56:4d:42:58:59:55:ce:1b:6a:bd:43:13:1a:1a:
9a:07:12:bf:19:42:75:79:5e:f8:1b:df:92:20:c6:00:8d:ec:
1f:af:00:bc:dc:7e:88:a8:5e:0b:d6:cb:17:1d:7f:15:cf:95:
40:0e:e0:47:9f:d7:5a:ed:2d:46:8f:3f:c2:c2:6d:ed:f1:a5:
10:51:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:35 2026 by rpki-client