Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: XJNlQMyAlAj0BFCqTUYGVsoN3DUgDbKh3x6QmpmlmRU=
Subject key identifier: E9:6D:E0:1C:B6:D2:AB:F2:84:1B:92:B0:24:E0:F6:82:1D:CE:B7:3F
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 01A08C7B17DC3A8FCF75FC7272F04D80B9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:12 +0000
Manifest this update: Thu 10 Sep 2026 18:01:12 +0000
Manifest next update: Fri 11 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: zE5HIIUBKwfIqMOjt+vwgbttlODD3qusEqLviNm7a/U=)
2: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (hash: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=)
3: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (hash: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:17:dc:3a:8f:cf:75:fc:72:72:f0:4d:80:b9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Sep 10 18:01:12 2026 GMT
Not After : Sep 11 18:01:12 2026 GMT
Subject: CN=e96de01cb6d2abf2841b92b024e0f6821dceb73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:b1:fa:06:d2:77:79:47:1f:b4:d4:31:51:
5d:17:9c:ae:05:09:8e:84:ef:ef:19:1b:ed:e0:53:
31:74:ed:3c:dd:0f:3c:0f:d7:9e:7e:1e:f3:0a:8f:
2d:73:96:a8:1b:c0:c2:8a:fa:40:5a:c4:a8:16:5c:
e1:1d:00:b2:40:00:4f:1a:2e:34:7f:72:08:4b:70:
9b:15:fe:7b:bd:53:e1:af:2b:32:d8:89:34:e1:0a:
58:d4:73:b1:c4:ed:00:b9:42:01:d2:08:6a:bc:5a:
c5:be:b3:5b:17:23:0b:c5:29:88:af:ed:b5:a2:85:
c3:4e:c1:7e:b7:29:09:1a:3b:79:94:47:b1:d7:1f:
9e:80:0e:c3:73:5c:46:90:1b:8a:7f:3f:da:3b:a6:
75:2b:1f:09:db:27:f4:3d:59:35:a6:92:25:56:df:
8d:14:ea:6e:cd:43:66:fc:b4:db:83:73:5a:69:dd:
f4:47:20:91:4b:0e:01:e8:2b:88:ac:52:31:f3:14:
e1:e6:81:1c:22:64:42:f4:d1:fa:f2:89:18:e8:a0:
1f:13:bb:b9:dc:2b:83:2e:b6:cc:67:85:9b:2a:f6:
1a:5b:f1:81:1e:6c:2d:87:29:12:f0:f3:2d:9d:4b:
8f:50:7f:56:8d:2c:1e:ac:13:b5:be:1d:f1:10:20:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:E0:1C:B6:D2:AB:F2:84:1B:92:B0:24:E0:F6:82:1D:CE:B7:3F
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:63:dd:ed:9e:a0:2e:5e:12:27:83:ce:d7:cb:eb:c3:3f:97:
5d:c1:61:a8:89:ba:91:12:6b:1b:d9:c7:27:87:5f:cf:2b:36:
5c:6f:d9:ec:6b:7a:01:e4:4a:d6:c0:b5:09:99:46:c8:19:7c:
7e:6e:8c:f7:69:6f:27:ca:6b:1c:e5:e9:f2:95:1c:03:2b:38:
64:04:c9:69:de:f1:8f:a4:8b:e9:6c:16:08:04:31:c9:85:36:
45:ec:8e:33:93:91:5f:60:93:07:d5:1c:f6:fc:ac:63:42:c8:
ef:ab:71:7d:93:92:2c:94:11:e3:d9:f8:77:7f:03:be:53:8a:
2f:9f:4b:d2:ba:62:7f:68:2d:06:15:92:76:b2:93:ce:e1:c6:
08:21:56:ef:29:1e:f8:7a:23:84:ac:72:3d:6a:ad:9a:51:46:
ef:87:5c:39:07:ab:6a:bb:56:9d:aa:b6:32:c9:03:f6:dd:9d:
b3:f5:a2:4f:e4:e7:bc:ef:48:7f:45:fa:58:a1:a9:04:76:9b:
a5:92:9e:62:ae:ec:33:4f:51:d8:43:97:be:4f:39:f4:7d:7b:
c4:5c:94:13:2d:e4:50:a5:a3:1d:42:c6:08:e9:4f:06:14:e8:
b4:b3:02:31:f8:03:34:16:48:66:87:a1:58:f1:22:2b:ad:6e:
48:86:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:41 2026 by rpki-client