Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: iaFqyb8G0M/baObx/GqOPeLlTdVMzx8086etHvhc/Jw=
Subject key identifier: BD:4D:22:FF:2D:F9:98:93:2B:ED:6F:62:1A:CF:90:8A:2E:1C:D9:6E
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 01A13F39759258F2A7A01E4C5812EF235567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 07B3
Signing time: Thu 15 Oct 2026 11:01:32 +0000
Manifest this update: Thu 15 Oct 2026 11:01:32 +0000
Manifest next update: Fri 16 Oct 2026 11:01:32 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: 6j5rtbsMptVYubQCBA5eaGfOBqoZTDbipdJs7Hp+8kU=)
2: X_QIXpc1D9Swl7RHSJxujli_8yk.roa (hash: 18pzA1Lx0ABoYaRYkMn900C2smbYbwmxYD/sh/UcCOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:75:92:58:f2:a7:a0:1e:4c:58:12:ef:23:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Oct 15 11:01:32 2026 GMT
Not After : Oct 16 11:01:32 2026 GMT
Subject: CN=bd4d22ff2df998932bed6f621acf908a2e1cd96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:be:0b:c9:28:39:3a:b7:10:a1:94:21:57:
99:d7:bd:ed:a6:7a:2f:82:1f:31:05:3c:5b:ff:3d:
56:a9:ea:8a:fd:98:e5:f3:10:76:eb:42:70:fa:06:
75:03:b0:bb:44:15:47:8a:92:bc:74:ad:22:11:8c:
50:3b:bd:24:96:dc:3f:37:d1:5e:5d:b9:04:e4:b8:
fc:bd:e3:a2:9b:09:02:25:d5:67:e5:d5:5e:3e:66:
bd:18:36:dc:d3:30:24:40:08:c1:02:b0:10:f7:a7:
84:c0:2f:00:71:74:ca:59:7f:6f:83:61:7c:72:d7:
1d:5c:0b:97:54:c4:37:01:eb:b9:3b:22:35:da:45:
a3:fd:3d:c7:d4:d8:db:92:89:79:af:13:f8:09:c6:
d7:da:f7:a5:3b:92:f8:d4:c0:21:f3:61:ba:4f:e0:
5a:36:74:fb:06:f7:97:90:6a:3f:a9:e1:22:2f:19:
a2:99:5e:08:d9:57:86:4d:b5:5a:74:c3:05:62:e1:
99:6b:b4:6c:5c:04:90:fa:a5:32:0a:ef:dd:39:ab:
a4:ae:30:27:04:98:5a:f5:a3:71:f5:cc:da:b9:a1:
f3:c2:40:66:df:89:57:80:0b:b1:1a:9c:0c:2b:7d:
3c:a0:26:2e:ca:b4:03:90:81:60:9f:4a:0b:c8:f2:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4D:22:FF:2D:F9:98:93:2B:ED:6F:62:1A:CF:90:8A:2E:1C:D9:6E
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:64:c2:f3:8f:c7:5a:87:08:41:27:d2:2a:1f:15:aa:d2:74:
0c:3d:64:cb:79:aa:64:3f:05:0f:40:db:1b:33:d4:7c:cd:99:
05:c8:28:e4:36:8c:99:6e:ee:61:5d:14:8c:10:0c:86:a7:6a:
24:ba:47:15:1a:ec:ac:8a:1f:d5:8b:fb:1b:66:28:5c:d9:d6:
d4:b4:52:e9:85:c1:71:a5:9a:00:31:69:d6:5e:81:fd:16:42:
ec:54:bc:ff:81:24:6d:5e:83:2a:15:11:af:1f:da:e2:4d:b9:
27:83:fe:de:df:f2:3b:bb:02:28:5f:23:61:c7:42:9c:d6:d5:
08:37:aa:f0:ae:68:b4:21:61:b1:3f:2b:75:65:60:30:46:02:
b9:0f:43:58:b1:19:b9:26:da:05:61:d1:14:14:dd:a7:b6:13:
ad:50:40:a9:38:6e:c9:b7:97:f3:fc:6f:d9:c7:dc:57:af:d7:
bb:b4:f2:0d:91:13:1b:00:da:b4:04:0e:63:27:c2:6b:d4:96:
eb:d9:cd:32:10:49:2b:f9:af:10:80:92:ca:b4:cc:ad:42:87:
bd:82:af:95:71:e9:67:46:7c:b5:43:47:ef:8e:1c:c6:1a:2a:
64:0a:cf:35:d6:14:f5:fb:cb:05:32:62:2b:46:08:84:cd:28:
f3:21:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:12 2026 by rpki-client