Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: 94r8FX6R86POjYFQOtyi+D69NS9Dtp07UDqcEoUlk+8=
Subject key identifier: 42:18:04:F2:31:EA:D9:AA:DA:15:B9:4E:4D:CD:3A:A2:28:6F:51:F7
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 01A000CA9674C53526E3DE157CB15B35E567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:01:11 +0000
Manifest this update: Fri 14 Aug 2026 15:01:11 +0000
Manifest next update: Sat 15 Aug 2026 15:01:11 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: aLWaWVSXIDpv7Vk4gJa2bQcwnbrvm+Og46h/sqAEMdU=)
2: 4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa (hash: l+G/CcJNCFJU4d+SNUaOc2KOUJVWckb0n4DNmMjMMz4=)
3: yJ2MXHIuwnlLBfSQT_c_ui7bxZ8.roa (hash: bKb0mrONqrCtemohnhY7UQM4/Wb2IQBdRvBQnmw2e9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:96:74:c5:35:26:e3:de:15:7c:b1:5b:35:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Aug 14 15:01:11 2026 GMT
Not After : Aug 15 15:01:11 2026 GMT
Subject: CN=421804f231ead9aada15b94e4dcd3aa2286f51f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:8e:4d:78:08:a2:d0:f5:db:df:2e:8d:9e:
98:28:0d:a1:73:c9:e3:ae:8c:49:9c:b1:40:9a:a1:
df:7a:79:2e:e1:d5:d9:fa:f7:79:90:ac:c9:3d:62:
cf:7c:bf:3d:0e:01:a6:92:21:a1:99:70:fb:d5:79:
07:0c:ac:c8:32:4e:78:52:b6:b9:74:6f:e1:be:64:
a5:fc:52:68:cb:b7:f4:0c:74:62:d1:15:b6:d7:e1:
02:1b:8f:95:89:5d:ad:3c:4a:f8:32:7f:c3:4d:ae:
f7:d4:b2:89:09:c7:70:a4:a0:9a:e9:d0:bd:f2:c6:
97:a2:fb:ed:37:64:f0:be:70:2f:88:90:4b:8a:f2:
4a:36:ca:b4:25:51:0f:76:48:5a:5a:be:36:5d:34:
47:1a:ad:1a:dc:b4:b3:92:12:90:53:ad:20:f7:dd:
4b:a8:db:81:cd:a3:d3:34:f8:df:41:30:49:66:fd:
86:00:30:35:93:fe:f0:c4:e8:6a:a9:7d:2e:dc:af:
32:6f:71:bb:f2:d4:1b:58:a9:f2:64:74:6d:6b:b3:
e0:c0:27:10:05:17:c4:64:fe:73:ad:8f:db:7f:84:
40:5d:5f:53:bb:3e:65:00:1a:9b:f1:2a:be:e2:21:
81:3c:d7:3a:3a:12:ee:75:8d:fc:47:6b:cf:85:04:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:04:F2:31:EA:D9:AA:DA:15:B9:4E:4D:CD:3A:A2:28:6F:51:F7
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:90:4e:a4:8e:4b:78:ed:dd:3a:2e:4d:7f:c6:ae:7e:31:
aa:9c:e5:1f:40:34:ad:7b:36:80:b2:80:3f:54:d9:0c:4c:47:
1a:59:a0:f7:37:01:99:90:88:1a:1b:2d:96:32:9f:e0:85:d2:
c5:fe:e5:6c:c8:ab:7a:9a:1a:87:ca:ba:8d:c0:96:df:17:84:
c9:fa:0b:6d:2b:5d:94:5c:aa:59:b1:ff:63:89:25:2e:f8:95:
e4:80:76:98:3d:fe:0e:5f:8e:26:ca:a5:10:29:08:e3:e4:63:
f5:84:5a:9e:8e:15:e0:58:50:a8:8c:1c:34:b1:20:26:4e:8d:
6a:5f:64:1b:c2:47:b8:c0:03:5b:09:74:40:f4:35:15:8f:e9:
fa:29:41:0e:1a:19:b5:a8:df:80:4d:5d:36:a9:ed:46:45:f2:
44:1d:cc:a7:17:97:e4:d7:b3:d3:73:75:76:01:c8:37:e2:81:
c9:13:e0:a1:05:c0:c1:0a:06:84:fe:4e:8d:00:a1:db:45:62:
0a:21:0a:22:11:e2:28:3c:fb:61:6a:48:69:8f:3d:11:84:d9:
b7:f0:a2:de:1a:9d:2d:79:86:b0:63:62:9d:f8:39:54:ef:4f:
73:c4:db:11:e0:6f:01:a3:4f:17:16:e5:1a:b6:21:56:4b:41:
5b:20:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:03 2026 by rpki-client