Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: dzo0dgWgEiVEFO6LbjDQxfYyqwnVuE9F0FgKLZFyVVY=
Subject key identifier: B1:32:89:02:F8:97:C1:54:22:FB:70:AB:18:A7:A6:A9:CC:3B:07:6D
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 01A12BB2226B3E6FA24713BFBE2D31D48E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 16:00:56 +0000
Manifest this update: Sun 11 Oct 2026 16:00:56 +0000
Manifest next update: Mon 12 Oct 2026 16:00:56 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: 2MZbbU/MuEC5REHe/QG/frQ4EIQu+KRFU28KOMrY64w=)
2: 61-4acpKq_PC7ATdZVCHWRg8JKs.roa (hash: XfLv38L+k8qNjwRe1RGjTzVU0A2ck+gkD6atchEx+8g=)
3: snhbQ-MBqaP4OUTW8WJ3Hr1dnUc.roa (hash: 9I5SXUe0pT58xK312SvCJFKTSES2daM8oG5AXaPkWQM=)
4: y0v5hqRnK3oXSef_pYXkfz4Oyzw.roa (hash: 0FZ3W5rrSzMRERGSvGaSIJBxiMzf+ECnXIculdCdNkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:22:6b:3e:6f:a2:47:13:bf:be:2d:31:d4:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Oct 11 16:00:56 2026 GMT
Not After : Oct 12 16:00:56 2026 GMT
Subject: CN=b1328902f897c15422fb70ab18a7a6a9cc3b076d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:c1:88:32:f1:72:f7:5f:c9:34:c9:43:98:
4b:79:2d:a9:17:26:2e:7d:0a:ef:70:6b:dc:ec:81:
a3:44:e8:ce:c8:26:8c:cb:7a:34:7c:9c:53:2d:77:
7c:87:f8:1c:0d:23:37:a9:04:52:57:90:b8:d2:56:
56:f9:34:6f:56:67:c1:8b:f7:97:ff:4c:8f:4e:2a:
c7:41:55:e9:7e:08:2d:cb:5a:90:87:ae:25:2e:e9:
21:7f:0b:23:62:10:52:25:24:40:95:cc:10:33:1b:
29:49:b8:5d:06:cd:61:3a:38:b7:34:c4:fa:9f:72:
1b:5b:67:92:c4:3c:18:63:aa:63:b0:25:0b:87:28:
5f:a6:58:f3:aa:d1:a1:b8:81:89:c9:13:4a:e4:f7:
93:7a:e4:91:d4:60:60:73:00:c7:bc:58:fc:56:e4:
59:e7:72:ac:71:26:2f:16:62:b8:2c:d8:c2:ed:bb:
9a:2e:32:ed:d1:b6:b0:1a:01:09:8d:2b:d9:33:98:
13:e0:ab:fd:3d:97:d8:51:26:c3:cd:61:16:9c:01:
a8:7a:27:a4:87:a9:b7:66:92:7e:33:3f:67:d0:29:
c2:83:cb:c9:f9:c2:98:92:24:4e:1a:a0:7b:dd:9e:
ac:77:e3:ff:fa:ea:c6:b7:28:22:93:e7:00:dc:6e:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:89:02:F8:97:C1:54:22:FB:70:AB:18:A7:A6:A9:CC:3B:07:6D
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:c0:ed:2a:e5:e3:a9:5d:9f:c3:5b:41:ca:3e:36:41:a2:
16:1b:a9:42:e3:c8:ea:73:b3:87:ce:21:c9:a9:8a:2c:b2:0a:
54:e6:4f:56:bf:c2:10:f0:c3:24:6d:09:8a:c6:35:a3:85:fc:
3c:0f:13:1f:bd:b4:3f:bb:cf:9c:cf:9d:87:69:49:1b:68:76:
a5:39:f6:e5:bc:49:7b:5c:4d:d7:27:d2:7d:3c:45:de:1e:92:
12:b1:2d:88:6d:31:2c:06:00:ef:97:a0:91:6b:1a:9b:54:0a:
b1:e1:c8:f5:75:22:4e:e4:fc:b4:f6:af:02:8e:33:6c:d1:a1:
32:47:62:d2:38:f6:35:98:19:05:21:cc:48:60:2f:cf:12:c8:
16:68:cb:60:a4:3a:4e:b3:44:a0:c1:dd:12:08:e9:07:23:0e:
c9:6a:95:c2:cd:fa:9d:57:60:32:01:a2:b8:85:41:d6:57:0e:
5d:cd:f7:2f:6b:8c:df:e7:6d:ab:29:b6:03:7c:9d:82:15:45:
2a:4f:a8:d9:ca:dd:7f:f6:ea:51:4f:9d:27:36:f8:f5:56:b4:
75:a7:6d:54:eb:89:07:58:7b:4f:e8:cc:5d:b4:76:b8:3a:07:
1d:17:3f:cf:a3:b9:84:b6:f7:f3:e8:65:7a:98:73:b9:68:bf:
c7:37:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:09:19 2026 by rpki-client