Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: wtgDU+rDgsNPpe9saZHSYmLWmPsZhnIuiTV4UNhzaYI=
Subject key identifier: A1:3E:BF:4C:67:5E:D0:8D:DB:4B:43:EA:FD:1F:B5:37:02:EA:F9:5F
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 01A1404C2D0454C2305B10B7E56A609D4EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1AAB
Signing time: Thu 15 Oct 2026 16:01:36 +0000
Manifest this update: Thu 15 Oct 2026 16:01:36 +0000
Manifest next update: Fri 16 Oct 2026 16:01:36 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: Tpw9SCMZFER0OTbrov9HdtFMxTft08T6+poE5t6283Q=)
2: GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa (hash: bXptPxFQyb9Owh/hKmiA83+wjy1OBwsMr11rFf9sFDQ=)
3: jn0yEdikXWBGn1EaR0b8w0TJFr8.roa (hash: 10DA5MXiJsweYaG/q6sof9ShkMYv66PwkP1hNlnqUDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:2d:04:54:c2:30:5b:10:b7:e5:6a:60:9d:4e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Oct 15 16:01:36 2026 GMT
Not After : Oct 16 16:01:36 2026 GMT
Subject: CN=a13ebf4c675ed08ddb4b43eafd1fb53702eaf95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:f4:5a:ab:ed:ea:fc:a8:09:05:1a:53:29:
79:d0:81:99:55:b3:3c:7f:ab:ff:99:4e:14:55:4a:
c1:29:57:ab:97:2e:76:5e:97:76:33:46:98:bc:ad:
8c:c4:32:29:09:d8:26:a6:63:2a:90:b4:1b:0d:33:
a6:96:88:07:19:0f:f7:f4:72:2d:46:7b:74:d0:f1:
40:b3:5a:75:55:94:62:0e:a0:e6:3a:e6:cd:05:98:
be:34:53:c2:f1:20:bb:0e:36:af:0a:87:a1:eb:27:
51:62:ef:8f:e3:90:62:af:ba:98:63:c2:ba:c6:02:
a7:85:78:ab:76:e7:7a:5c:06:0e:85:1b:44:b4:58:
ab:39:9b:4e:e5:20:20:64:0b:f9:26:91:2c:16:be:
fb:9c:22:ec:6f:e7:83:b1:07:cc:9f:72:fc:10:e9:
e7:4d:33:78:27:07:3d:20:32:b8:bc:c0:56:6f:7d:
1b:a2:ce:10:8c:1b:4b:7c:2a:25:20:98:ff:c1:05:
cd:4e:c8:2c:1f:59:f1:12:f2:f0:c5:0b:25:55:49:
42:97:e7:b8:c5:5e:41:d8:54:07:8d:83:9b:38:7b:
35:32:26:b9:c1:39:32:eb:fe:8b:c9:de:a6:3a:36:
66:c7:b6:58:5f:38:cc:60:56:eb:e6:20:1e:5a:66:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:BF:4C:67:5E:D0:8D:DB:4B:43:EA:FD:1F:B5:37:02:EA:F9:5F
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3c:71:cf:97:a6:e2:c4:4a:c0:bd:0a:a9:ce:f3:d8:0f:05:
60:20:93:02:be:80:cc:cb:09:a8:22:b8:4f:5c:0b:d0:22:3f:
5c:f8:61:8b:26:c2:2d:0a:5b:b0:4a:96:42:e9:c5:ab:fc:22:
8b:cf:8d:6d:d5:ea:17:70:fe:75:29:c6:e1:38:d0:fc:56:a5:
d1:65:87:7f:9b:6a:e3:b3:09:b5:05:86:3f:a8:1c:be:49:32:
e7:26:30:61:e5:16:6f:a6:03:38:a1:97:24:fc:9c:cf:fe:26:
54:01:57:58:45:77:b4:68:d8:6a:0f:fd:e8:c8:c6:a0:6d:f5:
4e:de:31:c1:e4:dd:5b:99:a6:63:2c:d4:4d:d2:57:e3:11:58:
2e:42:87:9a:18:29:d0:2a:28:2f:b6:14:32:f2:ca:dd:9e:0c:
ec:08:f5:82:f8:42:ed:02:ed:e6:b7:47:63:d9:ea:0f:ce:61:
c2:2d:a2:7c:df:86:07:f2:a5:63:21:97:1a:9f:3c:c4:6b:06:
0d:52:62:08:5c:bd:43:8c:fb:62:ee:10:9c:4c:fc:84:8f:ee:
aa:fd:b4:d4:b4:2d:8f:3a:92:66:af:21:8e:aa:9d:3c:08:55:
12:cd:61:19:29:83:25:5e:8b:19:bb:7e:b6:50:6f:01:87:9c:
38:b1:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:46 2026 by rpki-client